Re: [sleuthkit-users] XFS image file analysis
Brought to you by:
carrier
From: Sagar B. <sag...@gm...> - 2012-12-10 12:15:08
|
Hi, On Fri, Dec 7, 2012 at 7:08 PM, RB <ao...@gm...> wrote: > On Tue, Dec 4, 2012 at 11:09 PM, Sagar Belure <sag...@gm...> > wrote: > > Well here is the output for the commands by Derrick: > > $ mmls /home/forensic/forensic-images/xfs-1tb.img > > > > DOS Partition Table > > Offset Sector: 0 > > Units are in 512-byte sectors > > > > Slot Start End Length Description > > 00: Meta 0000000000 0000000000 0000000001 Primary Table (#0) > > 01: ----- 0000000000 0000000062 0000000063 Unallocated > > 02: 00:00 0000000063 1953520064 1953520002 Linux RAID (0xFD) > > So what kind of RAID is it, 0, 1, 5...? Unless it's just RAID1 you're > going to need all members of the original disk set. > It is RAID 1. Thanks, Sagar Belure |