Re: [sleuthkit-developers] Sort in hfind
Brought to you by:
carrier
From: Marcio C. <mar...@gm...> - 2005-05-23 14:05:32
|
On 5/22/05, Brian Carrier <ca...@sl...> wrote: >=20 > hfind uses the local 'sort' tool to sort the index file. I think the > NSRL files are already somewhat sorted by SHA1, but not fully (although > I'm traveling and don't have access to the full database). So, the > SHA1 sorting does not need as many temporary files because less work > needs to be done. The MD5 sorting may need to duplicate the entire DB > in temp files. The strange thing it that the /tmp has 1GB... And the oddest thing is that now it worked... :-P Maybe I have updated sort, I'm not sure... Thanks! M=E1rcio. |