[sleuthkit-users] blkcat fails to output textfile
Brought to you by:
carrier
From: Kai P. <ka...@po...> - 2015-01-25 20:27:14
|
Hello sleuthkit folks, I try do display the content of a text file with the help of blkcat. But the output is none. I did sync before. # cat /mnt/not-encrypted-disk/sensitive-file.txt sensitive text # ls -li /mnt/not-encrypted-disk/sensitive-file.txt 12 -rw-r--r-- 1 root root 15 Jan 24 17:15 /mnt/not-encrypted-disk/sensitive-file.txt # istat /dev/sdb1 12 inode: 12 Allocated Group: 0 Generation Id: 2192492698 uid / gid: 0 / 0 mode: rrw-r--r-- Flags: size: 15 num of links: 1 Inode Times: Accessed: 2015-01-24 17:15:58 (CET) File Modified: 2015-01-24 17:15:27 (CET) Inode Modified: 2015-01-24 17:15:27 (CET) Direct Blocks: 127754 # sync # blkcat /dev/sdb1 127754 # Souldn't 'blkcat /dev/sdb1 127754 ' display the content of the file? How do I blkcat the content of the file? Thanks in advance. |