Re: [sqlite] SQLite Version 2.1

2009-06-09 Thread Marcus Hassmann / Hassmann-Software
That is not what I want.
I want to develop a little tool for later investigations too, not only 
for this one.

Marcus Haßmann

Simon Slavin schrieb:
> On 8 Jun 2009, at 1:50am, Shane Harrelson wrote:
>
>   
>> http://www.sqlite.org/sqlite-2.8.17.tar.gz  I think is the oldest
>> version still available from the SQLite website.
>>
>> BTW, I'm not certain what kind of forensic evidence you can get from
>> your db if it's empty as you say.
>> 
>
> Yeah.  In fact, reading the bare file in hexdump is going to tell you  
> far more than reading it using the SQLite library.  More time- 
> consuming, though.
>
> Simon.
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>   


-- 
Mit freundlichen Grüßen
Marcus Haßmann
-- 
Hassmann-Software
In der Pottaschdell 31
66333 Völklingen
ICQ:   192 982 963
Tel.:  06898 / 49 32 30
Mobil: 0176 / 400 53 54 5
Email: i...@hassmann-software.de
Web:   http://www.hassmann-software.de
XING:  http://www.xing.com/profile/Marcus_Hassmann

___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-09 Thread Marcus Haßmann
Hi Mihai!

I tested all versions of sqlite browser already - without success.

The next step will be to compile the old sources of sqlite.
Or is there a download repository of older sqlite versions? Then, I will 
be able to develop a little tool for reading out the contents of this 
older 2.X database.

With kindly regards,
Marcus Haßmann


Mihai Limbasan schrieb:
> Hi there!
>
> An older version of SQLiteBorwser should do the trick - you can get it 
> from the SourceForge project page at 
> http://sourceforge.net/projects/sqlitebrowser/. The direct download link 
> for a suitable precompiled version would be
>
> - for Linux: 
> http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-i386.tar.gz
> - for Win32: 
> http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-win.zip
> - for OS X: 
> http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-osx.dmg
>
> with the source code at 
> http://sourceforge.net/project/downloading.php?group_id=87946=sqlite-1.1-src.tar.gz
>
> If that version doesn't do the trick, you can try other versions of the 
> same project from 
> http://sourceforge.net/project/showfiles.php?group_id=87946_id=91778
>
> Hope this helps.
>
> Mihai Limbasan
>
> On 06/06/2009 04:55 PM, Marcus Hassmann / Hassmann-Software wrote:
>   
>> Hello@ all!
>>
>> I need an old version of SQLite to do a forensic investigation for a
>> BearShare SQLite database file.
>> I didn't find any older version in the download section or anywhere else.
>>
>> Or does anybody have an old database tool that can read this format? The
>> newer one can read version 3 only.
>>
>>
>> 
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>   

___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-08 Thread Shane Harrelson
The 2.8 version should be able to read the 2.1... although it will try
to convert the format first, so make a backup copy of the original.

On Mon, Jun 8, 2009 at 12:35 PM, Marcus Haßmann wrote:
> The empty database in an example.
> I have to do an investigation for a non empty database...
>
> Marcus Haßmann
>
> Shane Harrelson schrieb:
>> http://www.sqlite.org/sqlite-2.8.17.tar.gz  I think is the oldest
>> version still available from the SQLite website.
>>
>> BTW, I'm not certain what kind of forensic evidence you can get from
>> your db if it's empty as you say.
>>
>> HTH.
>> -Shane
>>
>> On Sun, Jun 7, 2009 at 5:12 PM, Marcus Haßmann wrote:
>>
>>> I tested BearShare Lite Version 5.2.5.1
>>> The database is located in C:\Program Files\BearShare\db and it is named
>>> "library.db".
>>> The header of the empty database is "** This file contains an SQLite 2.1
>>> database **"
>>>
>>> Marcus Haßmann
>>>
>>> Simon Slavin schrieb:
>>>
 On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote:



> I tested all versions of sqlite browser already - without success.
>
>
 Are you certain that this really is a sqlite database, and not just a
 file with the right extension ?  Does it start with the right header ?

 Simon.
 ___
 sqlite-users mailing list
 sqlite-users@sqlite.org
 http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-user


>>> ___
>>> sqlite-users mailing list
>>> sqlite-users@sqlite.org
>>> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>>>
>>>
>> ___
>> sqlite-users mailing list
>> sqlite-users@sqlite.org
>> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>>
>
>
> --
> Mit freundlichen Grüßen
> Marcus Haßmann
> --
> Hassmann-Software
> In der Pottaschdell 31
> 66333 Völklingen
> ICQ:   192 982 963
> Tel.:  06898 / 49 32 30
> Mobil: 0176 / 400 53 54 5
> Email: i...@hassmann-software.de
> Web:   http://www.hassmann-software.de
> XING:  http://www.xing.com/profile/Marcus_Hassmann
>
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-08 Thread Marcus Haßmann
That is not what I want.
I want to develop a little tool for later investigations too, not only 
for this one.

Marcus Haßmann


Simon Slavin schrieb:
> On 8 Jun 2009, at 1:50am, Shane Harrelson wrote:
>
>   
>> http://www.sqlite.org/sqlite-2.8.17.tar.gz  I think is the oldest
>> version still available from the SQLite website.
>>
>> BTW, I'm not certain what kind of forensic evidence you can get from
>> your db if it's empty as you say.
>> 
>
> Yeah.  In fact, reading the bare file in hexdump is going to tell you  
> far more than reading it using the SQLite library.  More time- 
> consuming, though.
>
> Simon.
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>   


-- 
Mit freundlichen Grüßen
Marcus Haßmann
-- 
Hassmann-Software
In der Pottaschdell 31
66333 Völklingen
ICQ:   192 982 963
Tel.:  06898 / 49 32 30
Mobil: 0176 / 400 53 54 5
Email: i...@hassmann-software.de
Web:   http://www.hassmann-software.de
XING:  http://www.xing.com/profile/Marcus_Hassmann

___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-08 Thread Marcus Haßmann
The empty database in an example.
I have to do an investigation for a non empty database...

Marcus Haßmann

Shane Harrelson schrieb:
> http://www.sqlite.org/sqlite-2.8.17.tar.gz  I think is the oldest
> version still available from the SQLite website.
>
> BTW, I'm not certain what kind of forensic evidence you can get from
> your db if it's empty as you say.
>
> HTH.
> -Shane
>
> On Sun, Jun 7, 2009 at 5:12 PM, Marcus Haßmann wrote:
>   
>> I tested BearShare Lite Version 5.2.5.1
>> The database is located in C:\Program Files\BearShare\db and it is named
>> "library.db".
>> The header of the empty database is "** This file contains an SQLite 2.1
>> database **"
>>
>> Marcus Haßmann
>>
>> Simon Slavin schrieb:
>> 
>>> On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote:
>>>
>>>
>>>   
 I tested all versions of sqlite browser already - without success.

 
>>> Are you certain that this really is a sqlite database, and not just a
>>> file with the right extension ?  Does it start with the right header ?
>>>
>>> Simon.
>>> ___
>>> sqlite-users mailing list
>>> sqlite-users@sqlite.org
>>> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-user
>>>
>>>   
>> ___
>> sqlite-users mailing list
>> sqlite-users@sqlite.org
>> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>>
>> 
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>   


-- 
Mit freundlichen Grüßen
Marcus Haßmann
-- 
Hassmann-Software
In der Pottaschdell 31
66333 Völklingen
ICQ:   192 982 963
Tel.:  06898 / 49 32 30
Mobil: 0176 / 400 53 54 5
Email: i...@hassmann-software.de
Web:   http://www.hassmann-software.de
XING:  http://www.xing.com/profile/Marcus_Hassmann

___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-07 Thread Simon Slavin

On 8 Jun 2009, at 1:50am, Shane Harrelson wrote:

> http://www.sqlite.org/sqlite-2.8.17.tar.gz  I think is the oldest
> version still available from the SQLite website.
>
> BTW, I'm not certain what kind of forensic evidence you can get from
> your db if it's empty as you say.

Yeah.  In fact, reading the bare file in hexdump is going to tell you  
far more than reading it using the SQLite library.  More time- 
consuming, though.

Simon.
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-07 Thread Shane Harrelson
http://www.sqlite.org/sqlite-2.8.17.tar.gz  I think is the oldest
version still available from the SQLite website.

BTW, I'm not certain what kind of forensic evidence you can get from
your db if it's empty as you say.

HTH.
-Shane

On Sun, Jun 7, 2009 at 5:12 PM, Marcus Haßmann wrote:
> I tested BearShare Lite Version 5.2.5.1
> The database is located in C:\Program Files\BearShare\db and it is named
> "library.db".
> The header of the empty database is "** This file contains an SQLite 2.1
> database **"
>
> Marcus Haßmann
>
> Simon Slavin schrieb:
>> On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote:
>>
>>
>>> I tested all versions of sqlite browser already - without success.
>>>
>>
>> Are you certain that this really is a sqlite database, and not just a
>> file with the right extension ?  Does it start with the right header ?
>>
>> Simon.
>> ___
>> sqlite-users mailing list
>> sqlite-users@sqlite.org
>> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-user
>>
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-07 Thread Marcus Haßmann
I tested BearShare Lite Version 5.2.5.1
The database is located in C:\Program Files\BearShare\db and it is named 
"library.db".
The header of the empty database is "** This file contains an SQLite 2.1 
database **"

Marcus Haßmann

Simon Slavin schrieb:
> On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote:
>
>   
>> I tested all versions of sqlite browser already - without success.
>> 
>
> Are you certain that this really is a sqlite database, and not just a  
> file with the right extension ?  Does it start with the right header ?
>
> Simon.
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-user
>   
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-07 Thread Marcus Haßmann
It starts with the right header:
"** This file contains an SQLite 2.1 database **"

Marcus Haßmann

Simon Slavin schrieb:
> On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote:
>
>   
>> I tested all versions of sqlite browser already - without success.
>> 
>
> Are you certain that this really is a sqlite database, and not just a  
> file with the right extension ?  Does it start with the right header ?
>
> Simon.
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>   
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-07 Thread Simon Slavin

On 7 Jun 2009, at 8:22pm, Marcus Haßmann wrote:

> I tested all versions of sqlite browser already - without success.

Are you certain that this really is a sqlite database, and not just a  
file with the right extension ?  Does it start with the right header ?

Simon.
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-07 Thread Marcus Haßmann
Hi Mihai!

I tested all versions of sqlite browser already - without success.

The next step will be to compile the old sources of sqlite.
Or is there a download repository of older sqlite versions? Then, I will 
be able to develop a little tool for reading out the contents of this 
older 2.X database.

With kindly regards,
Marcus Haßmann

Mihai Limbasan schrieb:
> Hi there!
>
> An older version of SQLiteBorwser should do the trick - you can get it 
> from the SourceForge project page at 
> http://sourceforge.net/projects/sqlitebrowser/. The direct download link 
> for a suitable precompiled version would be
>
> - for Linux: 
> http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-i386.tar.gz
> - for Win32: 
> http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-win.zip
> - for OS X: 
> http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-osx.dmg
>
> with the source code at 
> http://sourceforge.net/project/downloading.php?group_id=87946=sqlite-1.1-src.tar.gz
>
> If that version doesn't do the trick, you can try other versions of the 
> same project from 
> http://sourceforge.net/project/showfiles.php?group_id=87946_id=91778
>
> Hope this helps.
>
> Mihai Limbasan
>
> On 06/06/2009 04:55 PM, Marcus Hassmann / Hassmann-Software wrote:
>   
>> Hello@ all!
>>
>> I need an old version of SQLite to do a forensic investigation for a
>> BearShare SQLite database file.
>> I didn't find any older version in the download section or anywhere else.
>>
>> Or does anybody have an old database tool that can read this format? The
>> newer one can read version 3 only.
>>
>>
>> 
> ___
> sqlite-users mailing list
> sqlite-users@sqlite.org
> http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users
>   


-- 
Mit freundlichen Grüßen
Marcus Haßmann
-- 
Hassmann-Software
In der Pottaschdell 31
66333 Völklingen
ICQ:   192 982 963
Tel.:  06898 / 49 32 30
Mobil: 0176 / 400 53 54 5
Email: i...@hassmann-software.de
Web:   http://www.hassmann-software.de
XING:  http://www.xing.com/profile/Marcus_Hassmann

___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


Re: [sqlite] SQLite Version 2.1

2009-06-07 Thread Mihai Limbasan
Hi there!

An older version of SQLiteBorwser should do the trick - you can get it 
from the SourceForge project page at 
http://sourceforge.net/projects/sqlitebrowser/. The direct download link 
for a suitable precompiled version would be

- for Linux: 
http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-i386.tar.gz
- for Win32: 
http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-win.zip
- for OS X: 
http://sourceforge.net/project/downloading.php?group_id=87946=sqlitebrowser-1.1-osx.dmg

with the source code at 
http://sourceforge.net/project/downloading.php?group_id=87946=sqlite-1.1-src.tar.gz

If that version doesn't do the trick, you can try other versions of the 
same project from 
http://sourceforge.net/project/showfiles.php?group_id=87946_id=91778

Hope this helps.

Mihai Limbasan

On 06/06/2009 04:55 PM, Marcus Hassmann / Hassmann-Software wrote:
> Hello@ all!
>
> I need an old version of SQLite to do a forensic investigation for a
> BearShare SQLite database file.
> I didn't find any older version in the download section or anywhere else.
>
> Or does anybody have an old database tool that can read this format? The
> newer one can read version 3 only.
>
>
___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users


[sqlite] SQLite Version 2.1

2009-06-07 Thread Marcus Hassmann / Hassmann-Software
Hello@ all!

I need an old version of SQLite to do a forensic investigation for a 
BearShare SQLite database file.
I didn't find any older version in the download section or anywhere else.

Or does anybody have an old database tool that can read this format? The 
newer one can read version 3 only.

-- 
With kindly regards,
Marcus Haßmann
-- 
Hassmann-Software
In der Pottaschdell 31
66333 Völklingen
ICQ:   192 982 963
Tel.:  06898 / 49 32 30
Mobil: 0176 / 400 53 54 5
Email: i...@hassmann-software.de
Web:   http://www.hassmann-software.de
XING:  http://www.xing.com/profile/Marcus_Hassmann

___
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users