Re: [sleuthkit-users] DD images for sun

[farmer d. <far...@ya...>]

--- Bri...@kp... wrote:

> I have acquired my DD images from a SUN server...

May we know how you made your acquisition?  Also, are
these physical images (of each disk in the server) or
logical images (of each partition/file system/slice)?



> however I am only able 
> to perform keyword searches... no data analysis. 

Why is this so?  Are you limited by the tool(s) you're
using or you cannot mount the file system to view
logical structure and active files?


> I
> have never performed 
> analysis on Sun - - - so I am kind of at a loss
> here. 

This is not for a real case, or anything important,
then, is it?  ;)


> Anyone know what I 
> can do in order to access the file system, time
> sequencing, etc?

You obviously don't need to mount a file system to
analyze the contents.  Mounting it may make it easier
to view and see things, though.

What is the disk layout and the file system type(s)
for each slice/partition?

You will need to specify the ufs type to Linux mount
command.  You could use SMART for Linux as well. 
Finally, there is my CD, THE FARMER'S BOOT CD.  I know
each of these supports UFS types and enable you to
mount Sun file systems.  

regards,

farmerdude


 
____________________________________________________________________________________
Yahoo! Music Unlimited
Access over 1 million songs.
http://music.yahoo.com/unlimited