From owner-freebsd-questions@FreeBSD.ORG Sat Jan 24 00:22:28 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 64E6416A4CE for ; Sat, 24 Jan 2004 00:22:28 -0800 (PST) Received: from mx.tele-kom.ru (mx.tele-kom.ru [213.80.148.6]) by mx1.FreeBSD.org (Postfix) with SMTP id 9B2A443D48 for ; Sat, 24 Jan 2004 00:22:25 -0800 (PST) (envelope-from doublef@tele-kom.ru) Received: (qmail 69068 invoked by uid 555); 24 Jan 2004 11:22:24 +0300 Received: from hal.localdomain (213.80.149.181) by t-k.ru with TeleMail/2 id 1074932540-69047 for lee_shackelford@dot.ca.gov; Sat, 24 Jan 11:22:20 2004 +0300 (MSK) Date: Sat, 24 Jan 2004 11:26:04 +0300 From: Sergey 'DoubleF' Zaharchenko To: Lee_Shackelford@dot.ca.gov Message-Id: <20040124112604.77988c0d.doublef@tele-kom.ru> In-Reply-To: References: X-Mailer: Sylpheed version 0.9.6claws (GTK+ 1.2.10; i386-portbld-freebsd4.8) Mime-Version: 1.0 Content-Type: multipart/signed; protocol="application/pgp-signature"; micalg="pgp-sha1"; boundary="Signature=_Sat__24_Jan_2004_11_26_04_+0300_0fwC2MbmZ1u6AlOX" cc: questions@FreeBSD.org Subject: Re: recommendation for disk sector editor X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Jan 2004 08:22:28 -0000 --Signature=_Sat__24_Jan_2004_11_26_04_+0300_0fwC2MbmZ1u6AlOX Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 7bit On Fri, 23 Jan 2004 09:51:46 -0800 Lee_Shackelford@dot.ca.gov probably wrote: > Good morning, FreeBSD enthusiasts, > > Would you wish to recommend a disk sector editor program? I am looking for > something that provides functionality similar to Microsoft DskProbe, but > not requiring a graphics user interface, and most importantly, does not > require any operating system support beyond that which can be loaded from a > floppy diskette. It would be used on a computer with contemporary Intel > architecture. I am interested in accessing things such as the boot record, > partition table, FAT, directories, i-nodes, and other similar parts of the > hard drive. The type of display that a tool such as PCTools, or XTGold has > would be great; however each of these accesses files, not sectors, and > neither work with contemporary gigabyte drives. Surprisingly, I was unable > to identify any such program at the GNU site. Any suggestions would be > appreciated. Yours truly, Lee Shackelford L e e underscore S h a c k e l > f o r d dot d o t dot c a dot g o v SleuthKit (sysutils/sleuthkit) *reads* >& bsdi (BSDi FFS) >& fat (auto-detect FAT) >& fat12 (FAT12) >& fat16 (FAT16) >& fat32 (FAT32) >& freebsd (FreeBSD FFS) >& linux-ext2 (Linux EXT2FS) >& linux-ext3 (Linux EXT3FS) >& netbsd (NetBSD FFS) >& ntfs (NTFS) >& openbsd (OpenBSD FFS) >& solaris (Solaris FFS) I'm not sure how much *editing* you may do with it (I guess none, but at least you can figure out the physical location of the data you need modified) When I built it statically (not via the port), it took more than 1 diskette (~3M), but I didn't try crunching the binaries together. I guess you might end up using 2 diskettes: 1 for booting, the other for sleuthkit. HTH. -- DoubleF "It's a small world, but I wouldn't want to have to paint it." -- Steven Wright --Signature=_Sat__24_Jan_2004_11_26_04_+0300_0fwC2MbmZ1u6AlOX Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQFAEiwmwo7hT/9lVdwRAg1PAJ4js2FXpD1wHTVa0mJ6sqkIdrCmqwCfW6TP aDf0tD+gBPW8GPsayoBozFA= =Ly1O -----END PGP SIGNATURE----- --Signature=_Sat__24_Jan_2004_11_26_04_+0300_0fwC2MbmZ1u6AlOX--