Date: Thu, 12 Jan 2017 19:58:22 -0800 From: "Ngie Cooper (yaneurabeya)" <yaneurabeya@gmail.com> To: cem@freebsd.org Cc: svn-src-head@freebsd.org, src-committers <src-committers@freebsd.org>, svn-src-all@freebsd.org Subject: Re: svn commit: r312003 - head/usr.sbin/fstyp Message-ID: <6F52AA68-EBD4-4FD1-B2BB-D5831D5B0777@gmail.com> In-Reply-To: <5DFBA40B-3B06-448A-9AD3-A70D3EC8BB16@gmail.com> References: <201701130212.v0D2Cw0j092852@repo.freebsd.org> <CAG6CVpVhQ7Jg4StBYPWJT8zy8ryMqQVeqajE8dSsqCgnf_H=KQ@mail.gmail.com> <5DFBA40B-3B06-448A-9AD3-A70D3EC8BB16@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--Apple-Mail=_DEEAEC0F-D73D-4634-9005-ADA91E7ABE26 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jan 12, 2017, at 19:57, Ngie Cooper (yaneurabeya) = <yaneurabeya@gmail.com> wrote: >=20 >=20 >> On Jan 12, 2017, at 18:14, Conrad Meyer <cem@FreeBSD.org> wrote: >>=20 >> Forgot to mention: >>=20 >> Documentation: = https://www.sans.org/reading-room/whitepapers/forensics/reverse-engineerin= g-microsoft-exfat-file-system-33274 >>=20 >> Images for testing: http://www.cfreds.nist.gov/dfr-test-images.html >> (raw disk images, include partition tables) >=20 > This commit doesn=E2=80=99t work as advertised: >=20 > $ fstyp dfr-01-xfat.img > fstyp: dfr-01-xfat.img: filesystem not recognized > $ grep exfat `which fstyp` > Binary file /usr/sbin/fstyp matches >=20 > -Ngie Also: $ file dfr-01-xfat.img dfr-01-xfat.img: DOS/MBR boot sector $ hexdump -C dfr-01-xfat.img | head -n 2 00000000 eb 76 90 45 58 46 41 54 20 20 20 00 00 00 00 00 |.v.EXFAT = .....| 00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 = |................| --Apple-Mail=_DEEAEC0F-D73D-4634-9005-ADA91E7ABE26 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJYeFBeAAoJEPWDqSZpMIYVERgQAIsNLsk4eY7fUOhnyG1UNPmr Dw3gVpxvm/6W0VEzr+nqpyHC5D9As0PAuBKmiIhaw+ysF3OEG0UKNkBEkgcIzM5P dJJY5xH0W1HqIwWMXi4h+smc801sBggN7jRnLXTXm3cj8bi+R5W2wTVFL9SFzR9a maLObOo3jPDVVYXBIp5rasokcfkBDGN8+0HY63mR84tzK8ujs0NzNvC+LwuXxmu9 iyG/57i4CNnEQa22+Ht03IdmMSpSwd57S9Cl6DfJ0/QrTX6amlNWA+SOQEWeMD6C HLScGnL8KJPYQe7KHLrXor+DKdTLjbPe+sKjITk0n+Q7H719OegDdvQukw3iQb0A xI57giswATtkKPNqDp3iECj56VClHgZJsaP1lI2lYjxSx2q2SP67S/mqXVzd+J75 4aXJOybfDy2Rb7A//GRnDJR36aNvI8CfoPEy31jvmcfSVOzCYBt4X93JP2frroiB rSt4ptbM+f8T1uYNRgv8zj+Ljowpng+f6+A4hFhPZj+CG7O3Mm8BH+/t2pgaVz4q ZLwYBzwV0fE3LTO6CNTEIzBniVxEXBU6TXZKhdjU6Ylg/ArGcAeiEfKjsb8ohgoW KWk7EGmIIi2ymyusvUVjYCxhLpyUNXwkxLn83zo26ncPx4Fa/f+xgKtWTnQ0eBZu 9IHF2EYRmjIS5YX0R6LP =A/0V -----END PGP SIGNATURE----- --Apple-Mail=_DEEAEC0F-D73D-4634-9005-ADA91E7ABE26--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6F52AA68-EBD4-4FD1-B2BB-D5831D5B0777>