[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sleuthkit-users
Subject:    Re: [sleuthkit-users] linux lvm support?
From:       Derrick Karpo <dkarpo () gmail ! com>
Date:       2011-10-13 3:57:35
Message-ID: CAMDiSGQLdiGszMERFaV7kRCPNogtSPs0tGbaH2qvg=_cGeU3ng () mail ! gmail ! com
[Download RAW message or body]

Hi Stuart.

I have not seen a FUSE + LVM implementation.  I've always relied on
using `losetup' and the `lvm2' tools to expose the LV's via
/dev/mapper and use Sleuthkit against those.  I can see the appeal of
being able to access them "natively" though.

Derrick


On Tue, Oct 11, 2011 at 5:41 PM, Stuart Maclean
<stuart@apl.washington.edu> wrote:
> I cannot seem to locate any info on Sleuthkit and Linux LVM.  If I have
> a disk image containing a Linux LVM setup, tools like fls cannot seem to
> see 'inside' to the logical volumes?
>
> I wonder if anyone has written a fuse fs for lvm?  That is, reverse
> engineer the on-disk representation of LVM and apply it to fuse.
> Perhaps this is not possible without kernel help of the /dev/mapper
> variety??
>
> Any pointers appreciated.
>
> Stuart
>
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure contains a
> definitive record of customers, application performance, security
> threats, fraudulent activity and more. Splunk takes this data and makes
> sense of it. Business sense. IT sense. Common sense.
> http://p.sf.net/sfu/splunk-d2d-oct
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2d-oct
_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
http://www.sleuthkit.org

[prev in list] [next in list] [prev in thread] [next in thread]