Greetings,
I've recently patched at least the DOS/NTFS probing stuff for amd64, see
http://www.freebsd.org/cgi/cvsweb.cgi/ports/sysutils/gpart/
or more specifically these two patches:
http://www.freebsd.org/cgi/cvsweb.cgi/ports/sysutils/gpart/files/patch-src__gpart.h?rev=1.1
http://www.freebsd.org/cgi/cvsweb.cgi/ports/sysutils/gpart/files/patch-src__gm_ntfs.h?rev=1.1
It does detect partition tables on DOS and recognizes FreeBSD "slices"
(partitions in Linux lingo) but doesn't go all the way (meaning I
haven't audited the whole code, particularly it may still assume "little
endian" all over the map).
I wonder if we should either try to unify our (maintainer) forces to get
this gpart thingy polished and portable and possibly extended for NTFS5,
ZFS and thereabouts, or if the whole package should be ditched in favour
of something more modern, such as
http://www.cgsecurity.org/wiki/TestDisk (note I haven't tried it yet).
--
Matthias Andree
(FreeBSD ports committer)
_______________________________________________
forensics-devel mailing list
forensics-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/forensics-devel
