Re: [sleuthkit-users] mactime -i issues
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2014-04-17 16:41:37
|
No specific reason, just not a use case that we originally thought of. I added a check though to give an error if you supply multiple '-i' values to make it more obvious that you can give only one. brian On Apr 15, 2014, at 10:27 AM, Stefan Kelm <sk...@bf...> wrote: > Brian et al, > > is there any reason why one cannot pass both '-i day' and > '-i hour' options to mactime (v4.1.3) during the same run? > Doing so always results in the first output file to be empty, > i.e. > > mactime -b tl.txt -i day daily.txt -i hour hourly.txt > > gives an empty daily.txt file whereas hourly.txt is fine. > > Thanks! > > Stefan. > > -- > Stefan Kelm <sk...@bf...> > BFK edv-consulting GmbH http://www.bfk.de/ > Kriegsstrasse 100 Tel: +49-721-96201-1 > D-76133 Karlsruhe Fax: +49-721-96201-99 > > ------------------------------------------------------------------------------ > Learn Graph Databases - Download FREE O'Reilly Book > "Graph Databases" is the definitive new guide to graph databases and their > applications. Written by three acclaimed leaders in the field, > this first edition is now available. Download your free book today! > http://p.sf.net/sfu/NeoTech > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |