Re: [sleuthkit-users] XFS image file analysis

[Sagar B. <sag...@gm...>]

Hi,


On Fri, Dec 7, 2012 at 7:08 PM, RB <ao...@gm...> wrote:

> On Tue, Dec 4, 2012 at 11:09 PM, Sagar Belure <sag...@gm...>
> wrote:
> > Well here is the output for the commands by Derrick:
> > $ mmls /home/forensic/forensic-images/xfs-1tb.img
> >
> > DOS Partition Table
> > Offset Sector: 0
> > Units are in 512-byte sectors
> >
> >      Slot    Start        End          Length       Description
> > 00:  Meta    0000000000   0000000000   0000000001   Primary Table (#0)
> > 01:  -----   0000000000   0000000062   0000000063   Unallocated
> > 02:  00:00   0000000063   1953520064   1953520002   Linux RAID (0xFD)
>
> So what kind of RAID is it, 0, 1, 5...?  Unless it's just RAID1 you're
> going to need all members of the original disk set.
>

It is RAID 1.

Thanks,
Sagar Belure