« Return to Thread: icat and ifind -- Help with -- Please DO NOT hijack threads
Re: icat and ifind -- Help with -- Please DO NOT hijack threads
by Simson Garfinkel-3
::
Rate this Message:
Hi, Al,
It turns out that this is a pretty easy thing to do with the Python framework I have put together. Would you like a small program that, using the framework, just pops out the answers?
On Nov 21, 2009, at 3:33 AM, Al Grant wrote:
>
> Disk /dev/sdb: 160.0 GB, 160041885696 bytes
> 255 heads, 63 sectors/track, 19457 cylinders
> Units = cylinders of 16065 * 512 = 8225280 bytes
> Disk identifier: 0x70000000
>
> Device Boot Start End Blocks Id System
> /dev/sdb1 1 8 64228+ de Dell Utility
> /dev/sdb2 9 1314 10485760 7 HPFS/NTFS
> /dev/sdb3 * 1314 19131 143117312 7 HPFS/NTFS
> /dev/sdb4 19131 19458 2621440 f W95 Ext'd (LBA)
> /dev/sdb5 19131 19458 2620416 dd Unknown
> al@al-ubuntu:~$ sudo badblocks -b 512 -vs /dev/sdb
> Checking blocks 0 to 312581807
> Checking for bad blocks (read-only test): 22817408done, 4:46 elapsed
> 22817432done, 5:55 elapsed
> 22817433done, 6:18 elapsed
> 22817434done, 6:42 elapsed
> 22817435done, 7:05 elapsed
> 22817436done, 7:28 elapsed
> 22817437done, 7:51 elapsed
> 22817438done, 8:14 elapsed
> 22817439done, 8:37 elapsed
> 22817440
> 22817441
>
> For example how do I determine which partition 22817441 resides on?
>
> -Al
>
> --
> View this message in context: http://old.nabble.com/icat-and-ifind----Help-with----Please-DO-NOT-hijack-threads-tp26452166p26455702.html
> Sent from the sleuthkit-users mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
http://www.sleuthkit.org
It turns out that this is a pretty easy thing to do with the Python framework I have put together. Would you like a small program that, using the framework, just pops out the answers?
On Nov 21, 2009, at 3:33 AM, Al Grant wrote:
>
> Disk /dev/sdb: 160.0 GB, 160041885696 bytes
> 255 heads, 63 sectors/track, 19457 cylinders
> Units = cylinders of 16065 * 512 = 8225280 bytes
> Disk identifier: 0x70000000
>
> Device Boot Start End Blocks Id System
> /dev/sdb1 1 8 64228+ de Dell Utility
> /dev/sdb2 9 1314 10485760 7 HPFS/NTFS
> /dev/sdb3 * 1314 19131 143117312 7 HPFS/NTFS
> /dev/sdb4 19131 19458 2621440 f W95 Ext'd (LBA)
> /dev/sdb5 19131 19458 2620416 dd Unknown
> al@al-ubuntu:~$ sudo badblocks -b 512 -vs /dev/sdb
> Checking blocks 0 to 312581807
> Checking for bad blocks (read-only test): 22817408done, 4:46 elapsed
> 22817432done, 5:55 elapsed
> 22817433done, 6:18 elapsed
> 22817434done, 6:42 elapsed
> 22817435done, 7:05 elapsed
> 22817436done, 7:28 elapsed
> 22817437done, 7:51 elapsed
> 22817438done, 8:14 elapsed
> 22817439done, 8:37 elapsed
> 22817440
> 22817441
>
> For example how do I determine which partition 22817441 resides on?
>
> -Al
>
> --
> View this message in context: http://old.nabble.com/icat-and-ifind----Help-with----Please-DO-NOT-hijack-threads-tp26452166p26455702.html
> Sent from the sleuthkit-users mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
http://www.sleuthkit.org
« Return to Thread: icat and ifind -- Help with -- Please DO NOT hijack threads
| Free embeddable forum powered by Nabble | Forum Help |
