Re: [sleuthkit-developers] Some questions

[kenshin <ken...@gm...>]

Thks Michael to solve my doubts
I make some test with sgzip, but I dont see whereis the compression between
raw image and sgzip image. Do you now other seekable compression system?

2000/1/1, Michael Cohen <mic...@ne...>:
>
> On Wed, Jun 21, 2006 at 01:38:13PM +0200, kenshin wrote:
> > Other suggestion, I think that open stdin is better that open a file.
> > For example "fls < ext3fs.img" is better because you could for example
> > make "bunzip2 -c ext3fs.img.bz2| fls" or other combinations. With this
> > you have small images and if you have a good cpu you could scan
> > images faster :)
>
> kenshin, Its impossible for fls to use stdin since it needs to seek in the
> input file which means it cant use a pipe (you could still do fls <
> ext3fs.img
> because thats not a pipe, but not the second example). Also for normal
> images
> you certainly couldnt do bunzip2 -c ext3fs.img.bz2| fls because the image
> would
> take a huge length of time to decompress for a single shot of fls. If you
> want
> to handle compressed images you better use ewf, eff or sgzip formats.
>
> Michael.
>
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
> easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> sleuthkit-developers mailing list
> sle...@li...
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers
>