sleuthkit-users

[sleuthkit-users] HPA error - disk_stat and SATA

[<rob...@us...>]

# disk_stat /dev/sda
Maximum Disk Sector: 0
Maximum User Sector: 153356489

** HPA Detected (Sectors 153356490 - 0) **


I know there's an HPA there...does disk_stat not work yet with SATA drives? This is Linux 2.6.16 on a Dell Inspiron e1705. thx!

Re: [sleuthkit-users] HPA error - disk_stat and SATA

[Brian C. <ca...@sl...>]

rob...@us... wrote:
> # disk_stat /dev/sda
> Maximum Disk Sector: 0
> Maximum User Sector: 153356489
> 
> ** HPA Detected (Sectors 153356490 - 0) **
> 
> 
> I know there's an HPA there...does disk_stat not work yet with SATA drives? This is Linux 2.6.16 on a Dell Inspiron e1705. thx!

I guess not.  I haven't had a chance to test it yet, but I would not be 
surprised.  disk_stat doesn't work when USB is involved either.  I need 
to investigate Linux more to figure this out.  I just created some bug 
reports for these cases.

Anyone here an expert with ATA commands and Linux?

brian

Re: [sleuthkit-users] HPA error - disk_stat and SATA

[Robert M. <ro...@ze...>]

> I guess not.  I haven't had a chance to test it yet, but I would not 
> be surprised.  disk_stat doesn't work when USB is involved either.  I 
> need to investigate Linux more to figure this out.  I just created 
> some bug reports for these cases.
>
> Anyone here an expert with ATA commands and Linux?

Might want to take a look at:

http://smartmontools.sourceforge.net/#testinghelp

Bruce describes the Linux situation pretty well... and there is a 
potential kernel patch specifically for this type of SATA problem.

Cheers,

Rob McCrea
ro...@ze...
http://www.zebralogic.ca

Re: [sleuthkit-users] HPA error - disk_stat and SATA

[farmer d. <far...@ya...>]

-- Brian Carrier <ca...@sl...> wrote:
> > I know there's an HPA there...does disk_stat not
> work yet with SATA drives? This is Linux 2.6.16 on a
> Dell Inspiron e1705. thx!
> 
> I guess not.  I haven't had a chance to test it yet,
> but I would not be 
> surprised.  disk_stat doesn't work when USB is
> involved either. 

It doesn't currently work with SCSI, and since USB,
1394, and SATA drives all fall under SCSI modulation
then disk_stat and disk_sreset won't work with them. 
You probably get;

ioctl(3, 0x31f, 0xbffff690) = -1 EINVAL (Invalid
argument)

regards,

farmerdude

http://www.forensicbootcd.com/

http://www.farmerdude.com/




__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com