fiwalk_using_sax and split images

15 views
Skip to first unread message

Stephanie S

unread,
May 20, 2011, 2:05:41 PM5/20/11
to aff-discuss
I'm trying to figure out how to use the function fiwalk_using_sax()
when working with split image files (encase and raw). My ultimate
goal is to use other fiwalk/dfxml functions to extract a set of files
from the image via the contents() function. It is my understanding
that fiwalk_using_sax() requires a file descriptor pointing to the
image file for contents() to be able to return a file object's bytes.
Do you have any suggestions on how to get this to work when multiple
open image files are needed?

Simson Garfinkel

unread,
May 20, 2011, 2:46:27 PM5/20/11
to aff-d...@googlegroups.com, Stephanie S
give fiwalk_using_sax the XML file generated by fiwalk, or a file handle to the first image. Unfortunately you will not be able to get content in the other images. Sorry; you are welcome to fix the code to handle split images, but they are simply not a priority for me.

> --
> You received this message because you are subscribed to the Google Groups "aff-discuss" group.
> To post to this group, send email to aff-d...@googlegroups.com.
> To unsubscribe from this group, send email to aff-discuss...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/aff-discuss?hl=en.
>

Reply all
Reply to author
Forward
0 new messages