Re: [sleuthkit-users] Autopsy Survey: Directory Contents Count

[Brian C. <ca...@sl...>]

Hi Simson,

There were actually two motivations for the question.    One was the presentation question (which has workarounds as you suggest) and the other was that this will add some addl. complexity / database calls to the code and we wanted to make sure people actually wanted it.  At a high-level, there is a bunch of lazy loading going on and the tree doesn't know details about the contents of the folder.  It needs to tell the table how many it will display and it would need to display a different number for itself.  Folders and file systems may have "." and ".." or not, so we can't blindly subtract 2.  So, we need to do an extra query for each folder to get the 2nd count.  Not rocket science, just added complexity and time that I'd prefer to avoid if people really don't care about the feature.

brian



On Dec 6, 2013, at 10:34 AM, Simson Garfinkel <si...@ac...> wrote:

> Since the results are not being parsed, we have some flexibility.
> 
> Have you thought about having them reported as “0 (+2)” and “3 (+2)” ? 
> 
> 
>> 
>> 
>>> -----Original Message-----
>>> From: Brian Carrier [mailto:ca...@sl...]
>>> Sent: Thursday, December 05, 2013 5:51 PM
>>> To: sle...@li... users
>>> Subject: [sleuthkit-users] Autopsy Survey: Directory Contents Count
>>> 
>>> Currently, the tree on the left of Autopsy shows the number of items in the
>>> directory.  If there is a "." or ".." entry in the directory, they are included in
>>> the count.  In our last training course, someone suggested that we should
>>> not include those entries in the number so that a directory with no files or
>>> sub-folders shows up as "0" in the tree except "2".   I'm a bit torn on this one
>>> because they are in fact entries in the database and some could also get
>>> confused that there are more rows in the table than what was reported.
>>> 
>>> Thoughts? Do you want the number in the tree to include the "." and ".." or
>>> not?
>>> 
>>> brian
>>> 
>>> 
> 
> 
> ------------------------------------------------------------------------------
> Sponsored by Intel(R) XDK 
> Develop, test and display web and hybrid apps with a single code base.
> Download it for free now!
> http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org