Re: [sleuthkit-developers] support for journal in ext3

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On May 4, 2004, at 4:28 PM, please please wrote:

> I would like to know if 'list contents of journal' is
> still a to-do task.

yes it is.  I will probably get to it this summer during my cleanup and 
expansion process.  I just did an overhaul of FAT this past weekend.

> If so, what do you think it will be better:
> * create a new command
> * add as a flag e.g. '-j' in some already existing
> command

I guess it could be a new set of commands, the 'j' commands.  Then 
there could be 'jls' that lists the entries in the journal,  'jstat' 
for details of an entry, and 'jcat' to get the data from the entry.

Are you interested in working on it?

brian



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAmBjvOK1gLsdFTIsRAt04AJ4wMS8+o+WBAnZt7Y0b8y4cVbHa3gCfbYRf
NoN6RHoOQqmmu1uDaVC/X8Q=
=+Vwt
-----END PGP SIGNATURE-----