Re: Block device to regular file?

2009-04-14 Thread cpghost
On Tue, Apr 14, 2009 at 09:36:22PM +0200, Roland Smith wrote: > On Tue, Apr 14, 2009 at 07:48:16PM +0200, cpghost wrote: > > On Tue, Apr 14, 2009 at 07:18:43PM +0200, Polytropon wrote: > > > On Tue, 14 Apr 2009 18:17:24 +0200, cpghost wrote: > > > > I'm trying to recover some deleted files from a

Re: Block device to regular file?

2009-04-14 Thread Roland Smith
On Tue, Apr 14, 2009 at 07:48:16PM +0200, cpghost wrote: > On Tue, Apr 14, 2009 at 07:18:43PM +0200, Polytropon wrote: > > On Tue, 14 Apr 2009 18:17:24 +0200, cpghost wrote: > > > I'm trying to recover some deleted files from a UFS2 file > > > system with the sleuthkit. > > > > > Unfortunatly, mo

Re: Block device to regular file?

2009-04-14 Thread cpghost
On Tue, Apr 14, 2009 at 07:18:43PM +0200, Polytropon wrote: > On Tue, 14 Apr 2009 18:17:24 +0200, cpghost wrote: > > I'm trying to recover some deleted files from a UFS2 file > > system with the sleuthkit. > > > Unfortunatly, most sleuthkit > > utilities expect regular image files and won't opera

Re: Block device to regular file?

2009-04-14 Thread Polytropon
On Tue, 14 Apr 2009 18:17:24 +0200, cpghost wrote: > I'm trying to recover some deleted files from a UFS2 file > system with the sleuthkit. :-( > Unfortunatly, most sleuthkit > utilities expect regular image files and won't operate > on block devices: > > phenom# fls /dev/ad4s1e > Sector

Block device to regular file?

2009-04-14 Thread cpghost
I'm trying to recover some deleted files from a UFS2 file system with the sleuthkit. Unfortunatly, most sleuthkit utilities expect regular image files and won't operate on block devices: phenom# fls /dev/ad4s1e Sector offset supplied is larger than disk image (maximum: 0) Of course, I could a