Re: [sleuthkit-users] DD images for sun

[<rob...@us...>]

Good call!

ROBERT C. CIPRIANI
1LT, SC, FLARNG
Operations Officer, A/146TH ESB
"VOICE OF COMMAND"
H:(813) 349-6879
W:(727) 329-2000 x74264
M:(727) 365-1231

"Whenever you do a thing, act as if all the world were watching." - Thomas Jefferson 

----- Original Message -----
From: farmer dude <far...@ya...>
Date: Friday, January 26, 2007 3:47 pm
Subject: Re: [sleuthkit-users] DD images for sun

> --- rob...@us... wrote:
> > You might need: -t ufs
> > 
> > Linux *should* support reading UFS without any
> > additional work needed.
> > 
> 
> Depending upon your Linux system you _may_ need to
> pass another option to your 'mount' command, and that
> is of the UFS type.  'mount' defaults to the "old" UFS
> type if you do not specify the type.  'man mount' is
> your friend, and specifically you most likely may pass
> "ufstype=sun" for UFS initialized by SunOS or Solaris
> on the Sparc platform or "ufstype=sunx86" for the same
> but on Intel architecture.  
> 
> 
> > --- Bri...@kp... wrote:
> > > They are straight DD images of each partition of  
> > the
> > drive copied accross 
> > the network. 
> 
> Can you elaborate?  Take each drive and share
> verbosely what you did, and command syntax if you
> remember.  This would allow everyone to help much
> faster and minimize the speculation that results from
> lack of knowledge about variables.
> 
> 
> 
> > I am using autopsy to perform the
> > analysis, but it does not 
> > appear to be able to ascertaing the file system...
> 
> Have you substantiated this with any other forensic
> program, be it SMART, FTK, etc.?
> 
> 
> regards,
> 
> farmerdude
> 
> 
> 
> ____________________________________________________________________________________
> Food fight? Enjoy some healthy debate 
> in the Yahoo! Answers Food & Drink Q&A.
> http://answers.yahoo.com/dir/?link=list&sid=396545367
> 
> -------------------------------------------------------------------
> ------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to 
> share your
> opinions on IT & business topics through brief surveys - and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>