Max Great stuff,
I looked some days ago on updating the kernel tools and who knows
i may even find the time :). This actually looks and is easier than writing
a "icat" like program for ZFS (or similar stuff) and looks like you are
up to the task!
So I will be glad to have you on board :D
Actuall
oject.
Kind regards
Mark
Original-Nachricht
> Datum: Wed, 22 Apr 2009 08:06:26 +0200
> Von: "max at bruningsystems.com"
> An: Evtim Batchev
> CC: security-discuss at opensolaris.org
> Betreff: Re: zfs forensics page
> Hi Evtim,
> I rec
Hi Evtim,
I recently blogged about raidz on-disk format at
http://mbruning.blogspot.com/2009/04/raidz-on-disk-format.html,
and was asked if I was working with the ZFS forensics project.
So, if you are interested, take a look at the blog.
thanks,
max
Max,
Thank for the pointer. It is great and very useful stuff.
I think Mark Furner (leading the ZFS effort) also agrees on
that!
We will look into inclusion of links and descriptions as we go!
Maybe mdb zfs module may bring may bring some mising zdb
functionality in mdb?
I will have to go tro
Hi Evtim,
Evtim Batchev wrote:
>
>
> Maybe mdb zfs module may bring may bring some mising zdb
> functionality in mdb?
>
> I will have to go trough your presentation morecarefully to
> inderstand better the isues :-)
There are two basic issues with using mdb to examine on-disk zfs
data/metadata.
O
Hi,
I just now saw this page:
http://opensolaris.org/os/project/forensics/ZFS-Forensics/ on the
forensics project,
and thought you might like to add the paper and slides I presented at
the OpenSolaris Developer Conference
on ZFS on-disk format. The paper is at:
http://www.osdevcon.org/2008/fil
