Hi Eriberto Can you send me more details? What is the error message? How do you know there is something in inode 12? can you share the image that has the problem you are seeing?
thanks, brian On Feb 22, 2011, at 11:34 AM, Joao Eriberto Mota Filho wrote: > Package: sleuthkit > Version: 3.1.3-1 > Severity: normal > Tags: squeeze > > The icat command doesn't retrieve data from an inode in ext3 > filesystem when using kernel 2.6.32-5. For example: > > icat img.dd 12 > > I think this problem was caused by improvements in filesystem > code. > > Thanks in advance. > > Regards, > > Eriberto - Brazil > > > -- System Information: > Debian Release: 6.0 > APT prefers stable > APT policy: (500, 'stable') > Architecture: i386 (i686) > > Kernel: Linux 2.6.32-5-686-bigmem (SMP w/2 CPU cores) > Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/bash > > Versions of packages sleuthkit depends on: > ii file 5.04-5 Determines file type using > "magic" > ii libc6 2.11.2-10 Embedded GNU C Library: Shared > lib > ii libdate-manip-perl 6.11-1 module for manipulating dates > ii libgcc1 1:4.4.5-8 GCC support library > ii libstdc++6 4.4.5-8 The GNU Standard C++ Library v3 > ii libtsk3-3 3.1.3-1 library for forensics analysis > on > > sleuthkit recommends no packages. > > sleuthkit suggests no packages. > > -- no debconf information > > _______________________________________________ forensics-devel mailing list forensics-devel@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/forensics-devel
