[sleuthkit-developers] RawFs patch
Brought to you by:
carrier
From: Paul B. <ba...@fo...> - 2004-03-02 13:51:54
|
Brian, I wrote a small patch for Sleuthkit 1.67 that makes it possible to use = Raw fs in a generic manner (Similar to fatfs, extfs, etc) It makes it possible to use fs_open() to open raw images... Most = functions will return error if called on it, but this way external tools (Like searchtools) do not need to make exceptions to use raw file = systems... Maybe something similar should be done for swap (Perhaps it = can also use rawfs)... It is small and first version, but it works for me (what I need at the = moment is only access to an FS_INFO object with the size inside and thus = the possiblility to call fs_read_random).. Could you integrate this patch in Sleuthkit 1.68 and expand it where = necessary? Paul Bakker |