Bug#614609: icat: doesn't working with ext3 in kernel 2.6.32-5

Joao Eriberto Mota Filho eriberto at eriberto.pro.br
Tue Feb 22 16:34:34 UTC 2011


Package: sleuthkit
Version: 3.1.3-1
Severity: normal
Tags: squeeze

The icat command doesn't retrieve data from an inode in ext3
filesystem when using kernel 2.6.32-5. For example:

icat img.dd 12

I think this problem was caused by improvements in filesystem
code.

Thanks in advance.

Regards,

Eriberto - Brazil


-- System Information:
Debian Release: 6.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686-bigmem (SMP w/2 CPU cores)
Locale: LANG=pt_BR.UTF-8, LC_CTYPE=pt_BR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages sleuthkit depends on:
ii  file                          5.04-5     Determines file type using "magic"
ii  libc6                         2.11.2-10  Embedded GNU C Library: Shared lib
ii  libdate-manip-perl            6.11-1     module for manipulating dates
ii  libgcc1                       1:4.4.5-8  GCC support library
ii  libstdc++6                    4.4.5-8    The GNU Standard C++ Library v3
ii  libtsk3-3                     3.1.3-1    library for forensics analysis on 

sleuthkit recommends no packages.

sleuthkit suggests no packages.

-- no debconf information





More information about the forensics-devel mailing list