FAT caches copies of the FAT table and the various file systems save copies of file system data in FS_INFO. The "caching" in the higher levels is done with a copy of the data from IMG_INFO. Does that answer the question?
thanks,
brian
On Feb 4, 2010, at 2:15 PM, Joachim Metz wrote:
> Brian,
>
> Do I assume correctly that in TSK 3.1.0 sector data caching is only
> done in the IMG IO (Disk Image) layer?
> And other layers cache certain references but not sector data?
>
> Kind regards,
> Joachim
>
> ------------------------------------------------------------------------------
> The Planet: dedicated and managed hosting, cloud storage, colocation
> Stay online with enterprise data centers and the best network in the business
> Choose flexible plans and management services without long-term contracts
> Personal 24x7 support from experience hosting pros just a phone call away.
> http://p.sf.net/sfu/theplanet-com
> _______________________________________________
> sleuthkit-developers mailing list
> sle...@li...
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers
|