[sleuthkit-developers] dls questions

[Epsilon <ep...@ya...>]

Greetings,

When running dls, what is the difference between running dls alone (to
extract unallocated sectors) and running dls with the "-s" option ("to
copy only the slack space of the image")?

What exactly is the "-s" option doing?  Does it capture file slack or
filesystem slack (unallocated sectors)?  Or are filesystem slack and
unallocated sectors different things?

FWIW I'm using v1.71.

Thanks,
ep.


		
_______________________________
Do you Yahoo!?
Express yourself with Y! Messenger! Free. Download now. 
http://messenger.yahoo.com