Date: Sat, 24 Jan 2004 11:26:04 +0300 From: Sergey 'DoubleF' Zaharchenko <doublef@tele-kom.ru> To: Lee_Shackelford@dot.ca.gov Cc: questions@FreeBSD.org Subject: Re: recommendation for disk sector editor Message-ID: <20040124112604.77988c0d.doublef@tele-kom.ru> In-Reply-To: <OFC28EFB24.B65D053A-ON88256E24.0060D2F2@dot.ca.gov> References: <OFC28EFB24.B65D053A-ON88256E24.0060D2F2@dot.ca.gov>
next in thread | previous in thread | raw e-mail | index | archive | help
--Signature=_Sat__24_Jan_2004_11_26_04_+0300_0fwC2MbmZ1u6AlOX Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: 7bit On Fri, 23 Jan 2004 09:51:46 -0800 Lee_Shackelford@dot.ca.gov probably wrote: > Good morning, FreeBSD enthusiasts, > > Would you wish to recommend a disk sector editor program? I am looking for > something that provides functionality similar to Microsoft DskProbe, but > not requiring a graphics user interface, and most importantly, does not > require any operating system support beyond that which can be loaded from a > floppy diskette. It would be used on a computer with contemporary Intel > architecture. I am interested in accessing things such as the boot record, > partition table, FAT, directories, i-nodes, and other similar parts of the > hard drive. The type of display that a tool such as PCTools, or XTGold has > would be great; however each of these accesses files, not sectors, and > neither work with contemporary gigabyte drives. Surprisingly, I was unable > to identify any such program at the GNU site. Any suggestions would be > appreciated. Yours truly, Lee Shackelford L e e underscore S h a c k e l > f o r d dot d o t dot c a dot g o v SleuthKit (sysutils/sleuthkit) *reads* >& bsdi (BSDi FFS) >& fat (auto-detect FAT) >& fat12 (FAT12) >& fat16 (FAT16) >& fat32 (FAT32) >& freebsd (FreeBSD FFS) >& linux-ext2 (Linux EXT2FS) >& linux-ext3 (Linux EXT3FS) >& netbsd (NetBSD FFS) >& ntfs (NTFS) >& openbsd (OpenBSD FFS) >& solaris (Solaris FFS) I'm not sure how much *editing* you may do with it (I guess none, but at least you can figure out the physical location of the data you need modified) When I built it statically (not via the port), it took more than 1 diskette (~3M), but I didn't try crunching the binaries together. I guess you might end up using 2 diskettes: 1 for booting, the other for sleuthkit. HTH. -- DoubleF "It's a small world, but I wouldn't want to have to paint it." -- Steven Wright --Signature=_Sat__24_Jan_2004_11_26_04_+0300_0fwC2MbmZ1u6AlOX Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQFAEiwmwo7hT/9lVdwRAg1PAJ4js2FXpD1wHTVa0mJ6sqkIdrCmqwCfW6TP aDf0tD+gBPW8GPsayoBozFA= =Ly1O -----END PGP SIGNATURE----- --Signature=_Sat__24_Jan_2004_11_26_04_+0300_0fwC2MbmZ1u6AlOX--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040124112604.77988c0d.doublef>