3.5" diskette problem with fiwalk - "identify file names"

[arieljacobsegal]

Hi all. I have been experimenting with BitCurator on my 2.8 Ghz OSX 10.6 Mac w/ 4 GB RAM (which worked!)

I have successfully run Guymager, Bulk_Extractor, and Bit Curator Reporting Tool (including fiwalk etc) on a DVD-Video disc.

When processing 2 different 3.5" Macintosh diskettes dating from the mid-1990s, Guymager and Bulk_Extractor worked fine, 

but the Reporting Tool had problems. "identify_filenames" terminated with an error. No files were detected in the image file.

(See 1st screencap)

When I went into the fiwalk-generated XML file, I found many errors called "TSK_Error 'Cannot determine file system type' " for various sectors.(see second screencap)

Does anyone know what could be causing these errors? Both diskettes have Microsoft Word and/ or ClarisWorks type files on them, and Bulk_Extractor worked fine on both.

Best Ariel Segal

[Donald Mennerich]

The disks are likely HFS formatted and the underlying library for parsing the filesystem with fiwalk, 'The SleuthKit', does not support this filesystem.

Donald R. Mennerich, digital archivist

New York University Libraries

don.me...@nyu.edu (212) 992-6264

--
You received this message because you are subscribed to the Google Groups "BitCurator Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcurator-use...@googlegroups.com.
To post to this group, send email to bitcurat...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bitcurator-users/1ed74b95-0302-4e09-b97e-aa63f2c2b497%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Alex Nelson]

Hi Ariel,

Donald's right, for now.  TSK does not currently support HFS.

This was discussed at the BitCurator Users' Forum in early January.  There are a couple plans to fix this problem, but for now, you won't be able to read the files from those diskettes' images.

This problem won't be around forever, so you could most effectively wait by creating image files of your floppy drives before the media fails, having them ready for when BitCurator can read them.

--Alex

To view this discussion on the web visit https://groups.google.com/d/msgid/bitcurator-users/CAD067Emkz-y-5vTXAHwy%3Do_vVn6F-T%2B6L30BVStfPMSfHP1MUw%40mail.gmail.com.

[arieljacobsegal]

Thanks all! Tonight I plan to test a 2010-era flash drive. I suppose that would be supported?
Best Ariel

On Wednesday, February 4, 2015 at 12:21:55 PM UTC-5, Alex Nelson wrote:

Hi Ariel,

Donald's right, for now.  TSK does not currently support HFS.

This was discussed at the BitCurator Users' Forum in early January.  There are a couple plans to fix this problem, but for now, you won't be able to read the files from those diskettes' images.

This problem won't be around forever, so you could most effectively wait by creating image files of your floppy drives before the media fails, having them ready for when BitCurator can read them.

--Alex

On Feb 4, 2015, at 12:20 PM, Donald Mennerich <don.me...@nyu.edu> wrote:

The disks are likely HFS formatted and the underlying library for parsing the filesystem with fiwalk, 'The SleuthKit', does not support this filesystem. 

Donald R. Mennerich, digital archivist

New York University Libraries

don.me...@nyu.edu (212) 992-6264

On Wed, Feb 4, 2015 at 12:08 PM, 'arieljacobsegal' via BitCurator Users <bitcurat...@googlegroups.com> wrote:

Hi all. I have been experimenting with BitCurator on my 2.8 Ghz OSX 10.6 Mac w/ 4 GB RAM (which worked!)

I have successfully run Guymager, Bulk_Extractor, and Bit Curator Reporting Tool (including fiwalk etc) on a DVD-Video disc.

When processing 2 different 3.5" Macintosh diskettes dating from the mid-1990s, Guymager and Bulk_Extractor worked fine, 

but the Reporting Tool had problems. "identify_filenames" terminated with an error. No files were detected in the image file.

(See 1st screencap)

When I went into the fiwalk-generated XML file, I found many errors called "TSK_Error 'Cannot determine file system type' " for various sectors.(see second screencap)

Does anyone know what could be causing these errors? Both diskettes have Microsoft Word and/ or ClarisWorks type files on them, and Bulk_Extractor worked fine on both.

Best Ariel Segal

-- 
You received this message because you are subscribed to the Google Groups "BitCurator Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bitcurator-users+unsub...@googlegroups.com.

To post to this group, send email to bitcurat...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bitcurator-users/1ed74b95-0302-4e09-b97e-aa63f2c2b497%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups "BitCurator Users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to bitcurator-users+unsub...@googlegroups.com.

[Alex Nelson]

I'm guessing that would be FAT-formatted, so it should be supported just fine.

If it isn't, that's a more interesting situation and at least I would like to hear about it.

--Alex

To unsubscribe from this group and stop receiving emails from it, send an email to bitcurator-use...@googlegroups.com.

To post to this group, send email to bitcurat...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/bitcurator-users/0e2f0e21-929b-4605-92bc-16894891d917%40googlegroups.com.

[Kam Woods]

As an aside, BitCurator *does* include HFSExplorer (http://www.catacombae.org/hfsexplorer/) which can be used to browse files on HFS-era disks. It's in the "Additional Tools" folder on the desktop. 

Kam

To view this discussion on the web visit https://groups.google.com/d/msgid/bitcurator-users/D9179E82-759E-48E8-B945-75B24335D2D8%40prometheuscomputing.com.