Re: [sleuthkit-users] Error when running 2.04

[Brian C. <ca...@sl...>]

They aren't critical errors and I will fix it so that they are not =20
displayed.  I changed the error handling in 2.04, which resulted in =20
new error messages and reporting.  That message is displayed when a =20
deleted file is found that can't be recovered.

thanks,
brian


On May 12, 2006, at 2:54 PM, Jennifer Smith wrote:

> When I run sorter in sleuthkit 2.04 on a FAT32 image, I am =20
> receiving odd errors that I didn't get when I ran the exact same =20
> command in v. 2.03 (from the 2.03 folder) - can someone help me =20
> figure out what I need to fix?  I looked through the change notes =20
> and the website, but I didn't see anything resembling this problem =20
> (sorry if it's there and I missed it - some of the notes are above =20
> my level of knowledge.)
>
> I am running the following command (in /path/sleuthkit-2.04/):
>
> ./bin/sorter -d /localdata/practice/TEST_G/sorterG -f fat -o 63 -x /=20=

> localdata/NSRL/known_good/goodfiles.txt -s /localdata/=20
> forensic_tools/images/fat32image.dd\
>
> and I receive the following output:
>
> Analyzing  "/localdata/forensic_tools/images/fat32image.dd"
>   Loading Allocated File Listing
>   Processing 34 Allocated Files and Directories
>   General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> 100%
>
>   Loading Unallocated File Listing
>   Processing 11 Unallocated meta-data structures
>   General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> General file system error (Starting cluster of deleted file is =20
> allocated)
> 100%
>
> All files have been saved to: /localdata/practice/TEST_G/sorterG
>
> Thanks in advance for any help you can give...
>
> -gg
>
>
> --=20
> _______________________________________________
> Check out the latest SMS services @ http://www.linuxmail.org
> This allows you to send and receive SMS through your mailbox.
>
> Powered by Outblaze
>
>
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, =20
> security?
> Get stuff done quickly with pre-integrated technology to make your =20
> job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache =20
> Geronimo
> http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=120709&bid&3057&dat=121642=

> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org