Re: [sleuthkit-users] XFS image file analysis

[RB <ao...@gm...>]

On Tue, Dec 4, 2012 at 11:09 PM, Sagar Belure <sag...@gm...> wrote:
> Well here is the output for the commands by Derrick:
> $ mmls /home/forensic/forensic-images/xfs-1tb.img
>
> DOS Partition Table
> Offset Sector: 0
> Units are in 512-byte sectors
>
>      Slot    Start        End          Length       Description
> 00:  Meta    0000000000   0000000000   0000000001   Primary Table (#0)
> 01:  -----   0000000000   0000000062   0000000063   Unallocated
> 02:  00:00   0000000063   1953520064   1953520002   Linux RAID (0xFD)

So what kind of RAID is it, 0, 1, 5...?  Unless it's just RAID1 you're
going to need all members of the original disk set.