Re: [sleuthkit-users] Exfat recovery

[Dennis Z. <de...@es...>]

This is the SD card:

Disk /dev/sdb: 59.5 GiB, 63864569856 bytes, 124735488 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0x00000000

Device     Boot Start       End   Sectors  Size Id Type
/dev/sdb1  *     2048 124735487 124733440 59.5G  c W95 FAT32 (LBA)

And this is the partition it self:

Disk /dev/sdb1: 59.5 GiB, 63863521280 bytes, 124733440 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0xf4f4f4f4

Device      Boot      Start        End    Sectors  Size Id Type
/dev/sdb1p1 ?    4109694196 8219388391 4109694196  1.9T f4 SpeedStor
/dev/sdb1p2 ?    4109694196 8219388391 4109694196  1.9T f4 SpeedStor
/dev/sdb1p3 ?    4109694196 8219388391 4109694196  1.9T f4 SpeedStor
/dev/sdb1p4 ?    4109694196 8219388391 4109694196  1.9T f4 SpeedStor


On Sat, Jan 31, 2015 at 10:29 AM, Dennis Zheleznyak <de...@es...>
wrote:

> Thanks again for the quick response and help !
>
> I downloaded both 4.20 and development versions and compiled it using:
>
> ./configure --prefix=/usr/local/sl
>> ./configure --prefix=/usr/local/sldevelop
>> make -j 4
>> make install
>
>
> I get the same result as before, anything I can do to fix it ?
>
>
>
> On Sat, Jan 31, 2015 at 6:26 AM, Kalin KOZHUHAROV <me....@gm...>
> wrote:
>
>> On Sat, Jan 31, 2015 at 11:27 AM, Dennis Zheleznyak
>> <de...@es...> wrote:
>> > The Sleuth Kit ver 4.1.3
>> >
>> https://github.com/sleuthkit/sleuthkit/releases
>>
>> 4.1.3 was released Jan 2014 and has no support for exFAT...
>>
>> You'll need to compile either possibly upcoming 4.2.0
>> https://github.com/sleuthkit/sleuthkit/tree/release-4.2.0/ or the
>> develop branch https://github.com/sleuthkit/sleuthkit/tree/develop/
>>
>> You can always check your current support with `-f list` option, like
>> `fls -f list`.
>>
>> Cheers,
>> Kalin.
>>
>
>