Report generation time when working on a flash drive-also disconnections

[arieljacobsegal]

Hi. I have been experimenting with BitCurator on a 4 GB flash drive with 1.5 GB used.

When running Guymager, sometimes the drive appears to disconnect in the middle of imaging. 

When I have been successful at running Guymager, imaging times range from 12 minutes to 33 minutes on different test attempts.

Bulk Extractor takes about 10 minutes.

However, the Reporting Tool took on 1 occasion over 5 hours and was still not complete when I aborted it. 

On the next try, I ran it overnight (> 6 hours) and it was still not complete. 

That said, fiwalk completed in 2 minutes or so, as did generation of annotated features.

Most of the reports were extant in the reporting output folder I created. 

What could account for the delay in completing the generation of reports? That appears to be the hangup.

Best Ariel Segal

[Kam Woods]

Hi Ariel,

Apparent disconnection of the USB device is a known issue when running Guymager in VirtualBox VM on some Windows hosts. It can also occur due to certain issues with the USB device itself - see Guy's comment here:

http://askubuntu.com/questions/429675/guymager-device-disconnected-acquisition-paused

I'm afraid there's no specific fix (other than Guy's suggestions) that I know of.

The reporting tool hanging *may* be related to malformed or bad-sector data appearing in the disk image. Ariel, is it possible for you to share the image with me some way? If not, it is possible for you to share the reports that *were* generated?

Regards,

Kam

--
You received this message because you are subscribed to the Google Groups "BitCurator Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcurator-use...@googlegroups.com.
To post to this group, send email to bitcurat...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/bitcurator-users/c2bfb874-d6de-4bde-90f7-258f9c629b4a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Kam Woods]

Ariel,

Ah, sorry - I don't believe you meant to share that with the whole list. I've deleted the post from the public bitcurator-users forum.

Kam

On Wed, Feb 18, 2015 at 10:41 PM, 'arieljacobsegal' via BitCurator Users <bitcurat...@googlegroups.com> wrote:

Hi Kam. The image is of a personal flash drive, so I'd prefer not to share it publicly. However, I will attach the extant reports.

--

You received this message because you are subscribed to the Google Groups "BitCurator Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcurator-use...@googlegroups.com.
To post to this group, send email to bitcurat...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/bitcurator-users/90bfda73-09b0-4881-a8bd-2d6a6e442f52%40googlegroups.com.

[arieljacobsegal]

Sorry! How would you like to receive the reports?

Best Ariel

[Kam Woods]

No worries, Ariel. Writing to you off-list in a moment.

To view this discussion on the web visit https://groups.google.com/d/msgid/bitcurator-users/b120203d-4d78-4119-99e2-0642726bf5e2%40googlegroups.com.