[dundee] FAT32 Image mounten

[Sean McRobbie]

Hello,

If I remember correctly there is a flag similar to --partition=1 which, --partition=2 etc which should mean no messing around with offsets.

I can dig out the exact command/flag combo but it's hidden away in some notes *somewhere* - may be quicker googling :)

Regards,
Sean McRobbie

----- Original Message -----
From: "Kris Davidson" <davidson.kris at gmail.com>
To: "Tayside Linux User Group" <dundee at lists.lug.org.uk>
Sent: Tuesday, 17 November, 2009 3:38:08 PM
Subject: Re: [dundee] FAT32 Image mounten

This the Abertay forensics image by any chance? because its just a
partition image. Anyway try running sudo mount -o loop,ro,umask=0222
-t auto /path/to/image /path/to/image/mount

If that doesn't work run fdisk -u -l /path/to/image against it.

and try sudo mount -o loop,ro,umask=0222,offset=whatever -t auto
/path/to/image /path/to/image/mount

BTW something like Sleuthkit and the associated web GUI should do this
automatically, but I might be way off on what you're wanting.

Kris

_______________________________________________
dundee GNU/Linux Users Group mailing list
dundee at lists.lug.org.uk  http://dundeelug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/dundee
Chat on IRC, #tlug on irc.lug.org.uk