[sleuthkit-users] Fwd: Some guidance required

[Owen O' S. <owe...@gm...>]

resending this to the list as I accidentally hit reply instead of
replyall/reply tolist.


On Thu, Jun 11, 2015 at 11:15 AM, Simson Garfinkel <si...@ac...> wrote:

> Can you post the specific error that you are getting for "the image file
> is unavailable" ? That seems odd.
>

Because I had to kill the autopsy when it was hung, i can't show you the
21,000 errors in the bottom right hand corner all of which were this error,
but if I load the case now, and run the performance test I can get the
error:



Very worthwhile exercise, because now that I look at the target disk
"disk2" I see that I am not even analysing the whole disk, only the active
partition.

That is actually valid in this case, but could have been a bad oversight in
another case. I'm more used to linux where you point at the filesystem
device file

I need to make progress on the work, so I am going to go the bulk extractor
route. I hope the above is useful to the developers to work out what is
wrong with the build and maybe to suggest that they give some system
requirements on the site based on the various resource requirements of the
modules.

Owen.
​