sleuthkit-users

[sleuthkit-users] tsk_loaddb too slow

[Mike.X. <805...@qq...>]

To whom it may concern,    I'm testing SleuthKit and Autopsy, I found when adding image files with Autopsy, it is so fast, but using tsk_loaddb is too slow. Can somebody tell me why? I'm trying to building application with C++. Please, many thanks.




bst rgrds,


Mike.Xin

Re: [sleuthkit-users] tsk_loaddb too slow

[Luís F. N. <lfc...@gm...>]

I think Autopsy is compiled with the develop branch of sleuthkit, which has
a lot of fixes related to loaddb speed. No new version of tsk was released
after theses fixes were done.

Best,
Luis

2015-09-05 22:24 GMT-03:00 Mike.Xin <805...@qq...>:

> To whom it may concern,
>     I'm testing SleuthKit and Autopsy, I found when adding image files
> with Autopsy, it is so fast, but using tsk_loaddb is too slow. Can somebody
> tell me why? I'm trying to building application with C++. Please, many
> thanks.
>
>
> bst rgrds,
>
> Mike.Xin
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>
>

Re: [sleuthkit-users] tsk_loaddb too slow

[Brian C. <ca...@sl...>]

Autopsy calls the equivalent of tsk_loaddb -k, which does not populate the block map.   See if that is equivalent to what you are seeing.



> On Sep 5, 2015, at 9:24 PM, Mike.Xin <805...@qq...> wrote:
> 
> To whom it may concern,
>     I'm testing SleuthKit and Autopsy, I found when adding image files with Autopsy, it is so fast, but using tsk_loaddb is too slow. Can somebody tell me why? I'm trying to building application with C++. Please, many thanks.
> 
> 
> bst rgrds,
> 
> Mike.Xin
> ------------------------------------------------------------------------------
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org