Re: [sqlite] SQLite Version 2.1
That is not what I want. I want to develop a little tool for later investigations too, not only for this one. Marcus Haßmann Simon Slavin schrieb: > On 8 Jun 2009, at 1:50am, Shane Harrelson wrote: > > >> http://www.sqlite.org/sqlite-2.8.17.tar.gz I think is the oldest >> version still available from the SQLite website. >> >> BTW, I'm not certain what kind of forensic evidence you can get from >> your db if it's empty as you say. >> > > Yeah. In fact, reading the bare file in hexdump is going to tell you > far more than reading it using the SQLite library. More time- > consuming, though. > > Simon. > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > -- Mit freundlichen Grüßen Marcus Haßmann -- Hassmann-Software In der Pottaschdell 31 66333 Völklingen ICQ: 192 982 963 Tel.: 06898 / 49 32 30 Mobil: 0176 / 400 53 54 5 Email: i...@hassmann-software.de Web: http://www.hassmann-software.de XING: http://www.xing.com/profile/Marcus_Hassmann ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
Hi Mihai! I tested all versions of sqlite browser already - without success. The next step will be to compile the old sources of sqlite. Or is there a download repository of older sqlite versions? Then, I will be able to develop a little tool for reading out the contents of this older 2.X database. With kindly regards, Marcus Haßmann Mihai Limbasan schrieb: > Hi there! > > An older version of SQLiteBorwser should do the trick - you can get it > from the SourceForge project page at > http://sourceforge.net/projects/sqlitebrowser/. The direct download link > for a suitable precompiled version would be > > - for Linux: > http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-i386.tar.gz > - for Win32: > http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-win.zip > - for OS X: > http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-osx.dmg > > with the source code at > http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlite-1.1-src.tar.gz > > If that version doesn't do the trick, you can try other versions of the > same project from > http://sourceforge.net/project/showfiles.php?group_id=87946&package_id=91778 > > Hope this helps. > > Mihai Limbasan > > On 06/06/2009 04:55 PM, Marcus Hassmann / Hassmann-Software wrote: > >> Hello@ all! >> >> I need an old version of SQLite to do a forensic investigation for a >> BearShare SQLite database file. >> I didn't find any older version in the download section or anywhere else. >> >> Or does anybody have an old database tool that can read this format? The >> newer one can read version 3 only. >> >> >> > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
The 2.8 version should be able to read the 2.1... although it will try to convert the format first, so make a backup copy of the original. On Mon, Jun 8, 2009 at 12:35 PM, Marcus Haßmann wrote: > The empty database in an example. > I have to do an investigation for a non empty database... > > Marcus Haßmann > > Shane Harrelson schrieb: >> http://www.sqlite.org/sqlite-2.8.17.tar.gz I think is the oldest >> version still available from the SQLite website. >> >> BTW, I'm not certain what kind of forensic evidence you can get from >> your db if it's empty as you say. >> >> HTH. >> -Shane >> >> On Sun, Jun 7, 2009 at 5:12 PM, Marcus Haßmann wrote: >> >>> I tested BearShare Lite Version 5.2.5.1 >>> The database is located in C:\Program Files\BearShare\db and it is named >>> "library.db". >>> The header of the empty database is "** This file contains an SQLite 2.1 >>> database **" >>> >>> Marcus Haßmann >>> >>> Simon Slavin schrieb: >>> On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote: > I tested all versions of sqlite browser already - without success. > > Are you certain that this really is a sqlite database, and not just a file with the right extension ? Does it start with the right header ? Simon. ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-user >>> ___ >>> sqlite-users mailing list >>> sqlite-users@sqlite.org >>> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users >>> >>> >> ___ >> sqlite-users mailing list >> sqlite-users@sqlite.org >> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users >> > > > -- > Mit freundlichen Grüßen > Marcus Haßmann > -- > Hassmann-Software > In der Pottaschdell 31 > 66333 Völklingen > ICQ: 192 982 963 > Tel.: 06898 / 49 32 30 > Mobil: 0176 / 400 53 54 5 > Email: i...@hassmann-software.de > Web: http://www.hassmann-software.de > XING: http://www.xing.com/profile/Marcus_Hassmann > > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
That is not what I want. I want to develop a little tool for later investigations too, not only for this one. Marcus Haßmann Simon Slavin schrieb: > On 8 Jun 2009, at 1:50am, Shane Harrelson wrote: > > >> http://www.sqlite.org/sqlite-2.8.17.tar.gz I think is the oldest >> version still available from the SQLite website. >> >> BTW, I'm not certain what kind of forensic evidence you can get from >> your db if it's empty as you say. >> > > Yeah. In fact, reading the bare file in hexdump is going to tell you > far more than reading it using the SQLite library. More time- > consuming, though. > > Simon. > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > -- Mit freundlichen Grüßen Marcus Haßmann -- Hassmann-Software In der Pottaschdell 31 66333 Völklingen ICQ: 192 982 963 Tel.: 06898 / 49 32 30 Mobil: 0176 / 400 53 54 5 Email: i...@hassmann-software.de Web: http://www.hassmann-software.de XING: http://www.xing.com/profile/Marcus_Hassmann ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
The empty database in an example. I have to do an investigation for a non empty database... Marcus Haßmann Shane Harrelson schrieb: > http://www.sqlite.org/sqlite-2.8.17.tar.gz I think is the oldest > version still available from the SQLite website. > > BTW, I'm not certain what kind of forensic evidence you can get from > your db if it's empty as you say. > > HTH. > -Shane > > On Sun, Jun 7, 2009 at 5:12 PM, Marcus Haßmann wrote: > >> I tested BearShare Lite Version 5.2.5.1 >> The database is located in C:\Program Files\BearShare\db and it is named >> "library.db". >> The header of the empty database is "** This file contains an SQLite 2.1 >> database **" >> >> Marcus Haßmann >> >> Simon Slavin schrieb: >> >>> On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote: >>> >>> >>> I tested all versions of sqlite browser already - without success. >>> Are you certain that this really is a sqlite database, and not just a >>> file with the right extension ? Does it start with the right header ? >>> >>> Simon. >>> ___ >>> sqlite-users mailing list >>> sqlite-users@sqlite.org >>> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-user >>> >>> >> ___ >> sqlite-users mailing list >> sqlite-users@sqlite.org >> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users >> >> > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > -- Mit freundlichen Grüßen Marcus Haßmann -- Hassmann-Software In der Pottaschdell 31 66333 Völklingen ICQ: 192 982 963 Tel.: 06898 / 49 32 30 Mobil: 0176 / 400 53 54 5 Email: i...@hassmann-software.de Web: http://www.hassmann-software.de XING: http://www.xing.com/profile/Marcus_Hassmann ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
On 8 Jun 2009, at 1:50am, Shane Harrelson wrote: > http://www.sqlite.org/sqlite-2.8.17.tar.gz I think is the oldest > version still available from the SQLite website. > > BTW, I'm not certain what kind of forensic evidence you can get from > your db if it's empty as you say. Yeah. In fact, reading the bare file in hexdump is going to tell you far more than reading it using the SQLite library. More time- consuming, though. Simon. ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
http://www.sqlite.org/sqlite-2.8.17.tar.gz I think is the oldest version still available from the SQLite website. BTW, I'm not certain what kind of forensic evidence you can get from your db if it's empty as you say. HTH. -Shane On Sun, Jun 7, 2009 at 5:12 PM, Marcus Haßmann wrote: > I tested BearShare Lite Version 5.2.5.1 > The database is located in C:\Program Files\BearShare\db and it is named > "library.db". > The header of the empty database is "** This file contains an SQLite 2.1 > database **" > > Marcus Haßmann > > Simon Slavin schrieb: >> On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote: >> >> >>> I tested all versions of sqlite browser already - without success. >>> >> >> Are you certain that this really is a sqlite database, and not just a >> file with the right extension ? Does it start with the right header ? >> >> Simon. >> ___ >> sqlite-users mailing list >> sqlite-users@sqlite.org >> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-user >> > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
I tested BearShare Lite Version 5.2.5.1 The database is located in C:\Program Files\BearShare\db and it is named "library.db". The header of the empty database is "** This file contains an SQLite 2.1 database **" Marcus Haßmann Simon Slavin schrieb: > On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote: > > >> I tested all versions of sqlite browser already - without success. >> > > Are you certain that this really is a sqlite database, and not just a > file with the right extension ? Does it start with the right header ? > > Simon. > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-user > ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
It starts with the right header: "** This file contains an SQLite 2.1 database **" Marcus Haßmann Simon Slavin schrieb: > On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote: > > >> I tested all versions of sqlite browser already - without success. >> > > Are you certain that this really is a sqlite database, and not just a > file with the right extension ? Does it start with the right header ? > > Simon. > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote: > I tested all versions of sqlite browser already - without success. Are you certain that this really is a sqlite database, and not just a file with the right extension ? Does it start with the right header ? Simon. ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
Hi Mihai! I tested all versions of sqlite browser already - without success. The next step will be to compile the old sources of sqlite. Or is there a download repository of older sqlite versions? Then, I will be able to develop a little tool for reading out the contents of this older 2.X database. With kindly regards, Marcus Haßmann Mihai Limbasan schrieb: > Hi there! > > An older version of SQLiteBorwser should do the trick - you can get it > from the SourceForge project page at > http://sourceforge.net/projects/sqlitebrowser/. The direct download link > for a suitable precompiled version would be > > - for Linux: > http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-i386.tar.gz > - for Win32: > http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-win.zip > - for OS X: > http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-osx.dmg > > with the source code at > http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlite-1.1-src.tar.gz > > If that version doesn't do the trick, you can try other versions of the > same project from > http://sourceforge.net/project/showfiles.php?group_id=87946&package_id=91778 > > Hope this helps. > > Mihai Limbasan > > On 06/06/2009 04:55 PM, Marcus Hassmann / Hassmann-Software wrote: > >> Hello@ all! >> >> I need an old version of SQLite to do a forensic investigation for a >> BearShare SQLite database file. >> I didn't find any older version in the download section or anywhere else. >> >> Or does anybody have an old database tool that can read this format? The >> newer one can read version 3 only. >> >> >> > ___ > sqlite-users mailing list > sqlite-users@sqlite.org > http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users > -- Mit freundlichen Grüßen Marcus Haßmann -- Hassmann-Software In der Pottaschdell 31 66333 Völklingen ICQ: 192 982 963 Tel.: 06898 / 49 32 30 Mobil: 0176 / 400 53 54 5 Email: i...@hassmann-software.de Web: http://www.hassmann-software.de XING: http://www.xing.com/profile/Marcus_Hassmann ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
Re: [sqlite] SQLite Version 2.1
Hi there! An older version of SQLiteBorwser should do the trick - you can get it from the SourceForge project page at http://sourceforge.net/projects/sqlitebrowser/. The direct download link for a suitable precompiled version would be - for Linux: http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-i386.tar.gz - for Win32: http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-win.zip - for OS X: http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlitebrowser-1.1-osx.dmg with the source code at http://sourceforge.net/project/downloading.php?group_id=87946&filename=sqlite-1.1-src.tar.gz If that version doesn't do the trick, you can try other versions of the same project from http://sourceforge.net/project/showfiles.php?group_id=87946&package_id=91778 Hope this helps. Mihai Limbasan On 06/06/2009 04:55 PM, Marcus Hassmann / Hassmann-Software wrote: > Hello@ all! > > I need an old version of SQLite to do a forensic investigation for a > BearShare SQLite database file. > I didn't find any older version in the download section or anywhere else. > > Or does anybody have an old database tool that can read this format? The > newer one can read version 3 only. > > ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
[sqlite] SQLite Version 2.1
Hello@ all! I need an old version of SQLite to do a forensic investigation for a BearShare SQLite database file. I didn't find any older version in the download section or anywhere else. Or does anybody have an old database tool that can read this format? The newer one can read version 3 only. -- With kindly regards, Marcus Haßmann -- Hassmann-Software In der Pottaschdell 31 66333 Völklingen ICQ: 192 982 963 Tel.: 06898 / 49 32 30 Mobil: 0176 / 400 53 54 5 Email: i...@hassmann-software.de Web: http://www.hassmann-software.de XING: http://www.xing.com/profile/Marcus_Hassmann ___ sqlite-users mailing list sqlite-users@sqlite.org http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users