kiddinn / log2timeline

Automatically exported from code.google.com/p/log2timeline
GNU General Public License v3.0
0 stars 3 forks source link

Strange desc output for Log2t::input::recycler #6

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Note: This is the first time I use log2timeline, so maybe I am running it with 
the wrong arguments or maybe I am expecting a wrong output.

Environment:
- Windows 7 64 bits
- Strawberry Perl 64 bits
- log2timeline 0.64

What I did:
- converted a raw disk image to virtual hard drive with VhdTool
- mounted the virtual disk on F:
- ran
      log2timeline.pl -m C: -r -f win7 -w bodyfile.csv -o csv F:

What I saw in the csv file, in the "desc" column:
   C:/temp/TCDA3BD.tmp <- F:/$Recycle.Bin/S-1-5-XXXXX-YYY/$IT7K7D3.tmp

What I would expect to see:
   C:/temp/TCDA3BD.tmp <- C:/$Recycle.Bin/S-1-5-XXXXX-YYY/$IT7K7D3.tmp

Cheers,

Antoine

Original issue reported on code.google.com by antoine....@gmail.com on 24 May 2012 at 5:46

GoogleCodeExporter commented 9 years ago
again, this is due to the fact that you are running it with the F: parameter, 
see the solution to the prior issue; 
http://code.google.com/p/log2timeline/issues/detail?id=5

Original comment by ki...@kiddaland.net on 24 May 2012 at 6:15