[sleuthkit-developers] tsk_file_layout in V3 schema documentation error

[Edward D. <eld...@tr...>]

In the documentation, at 
http://wiki.sleuthkit.org/index.php?title=SQLite_Database_v3_Schema, for 
the V3 schema of the sqlite database it says in the description of the 
tsk_file_layout table:

"byte_start - Byte offset of fragment relative to the start of the image 
file"

This is not the case. The 'byte_start' offset is relative to the start 
of the file system in which the file resides, not to the image itself. 
To get the actual byte_start relative to the start of the image file you 
need to add this value to the tsk_fs_info img_offset value for the 
appropriate tsk_fs_info row.

In a message dated 11/26/2014 at 
https://sourceforge.net/p/sleuthkit/mailman/message/33084547/ the same 
correction to the documentation was offered. Since this is some 22 
months ago can the documentation be corrected accordingly now ?

Eddie Diener