Re: [sleuthkit-users] What if a module fails to initialize
Brought to you by:
carrier
From: Alex N. <ajn...@cs...> - 2013-10-07 18:34:44
|
I guess my vote came with too big a string attached. (Again, not commentary, though the taste in timing is looking like a losing debate.) Like others are saying, bailing early and clearly looks like the best option, especially if Willi's right and there isn't a "Re-try ingest" procedure. On that note, though, is there one? --Alex On Oct 7, 2013, at 14:15 , Willi Ballenthin <wil...@gm...> wrote: > Perhaps I've missed a menu item, but I don't remember seeing a way to re-run the ingest process on a given case. Assuming that's true, I would prefer to bail at the first opportunity. > > If I'm using Autopsy during an investigation with a set of plugins, I've decided to use them for a specific reason (otherwise they'd be disabled for better performance). Therefore, if I spend a while waiting for processing to complete, only to learn its in fact incomplete and the only way to finish is to re-ingest, I'd be annoyed. > > If there is a way to re-ingest a case, then a large warning dialog with a quick fix/reconfigure button would be my second choice. > > Willi > > > On Mon, Oct 7, 2013 at 1:44 PM, Alex Nelson <ajn...@cs...> wrote: > I vote 1, because one faulty module should not prevent the other modules' results, which may take a long time, from doing their work. (Please believe me that this is not commentary on other current events.) > > However, this requires the module framework have support for a results dependency graph. This'll take some intelligent designer's time to get across gracefully to the end user if one module among many fails. (I can say from experience that Make and Dot/GraphViz are not a simple solution.) > > How do later modules in a pipeline specify that they need the results of an earlier module? > > --Alex > > > On Oct 7, 2013, at 13:26 , Nanni Bassetti <dig...@gm...> wrote: > >> My vote is for the number 2 :-) >> bye >> -- >> Dr. Nanni Bassetti >> http://www.nannibassetti.com >> CAINE project manager - http://www.caine-live.net >> ------------------------------------------------------------------------------ >> October Webinars: Code for Performance >> Free Intel webinars can help you accelerate application performance. >> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from >> the latest Intel processors and coprocessors. See abstracts and register > >> http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk_______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org > > > ------------------------------------------------------------------------------ > October Webinars: Code for Performance > Free Intel webinars can help you accelerate application performance. > Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from > the latest Intel processors and coprocessors. See abstracts and register > > http://pubads.g.doubleclick.net/gampad/clk?id=60134071&iu=/4140/ostg.clktrk > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |