[sleuthkit-users] Autopsy 3.1.1 times

[Nanni B. <dig...@gm...>]

Hi all,
I launched a little survey in CFI (Computer Forensics Italy) an italian
mailing list, on the times for indexing an hard disk with Autopsy 3.1.1
I believe this could be interesting for you:

hdd da 150Gb, connected via Bridge Sata on USB 3.0, 3Gb Ram, i5 cpu - time
taken almost 12 hours.

100 GB EWF image,compression factor = 6,
Workstation HP Z620 16 GB RaM, 1 cpu  4 core Xeon E5-2609 v2, 3 Disks  RAID
0 ( Seagate Barracuda 2 TB HDD SATA 6 Gb/s NCQ 64MB Cache 3.5-Inch Internal
Bare Drive ST2000DM001) Controller LSI 9217-4i4e 8-port SAS 6Gb/s RAID Card
-  Time taken 5 hours.

dd image HD  250 Gb,
Notebook  - cpu i7 (F:2Gh+, Cache L3:3Mb+, 64 bit), 8Gb RAM DDR3. Time
taken 30 hours.

Hard disk 320GB - Workstation sata1 - cpu Xeon 2.4Ghz  - 8GB ram - Time
taken 52 hours.

Others comments are on the stuck issue of Autopsy,while it are indexing
something big (1Tb, 500Gb, etc.).

I hope this helps ;)

Thanks


-- 
Dr. Nanni Bassetti
http://www.nannibassetti.com
CAINE project manager - http://www.caine-live.net