You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Let me start this with the pretense that I'm not entirely sure what happened, but the logs seem to back up my claim. It's also not that important of an issue, but figure'd I'd document it.
Background
So I was exporting a little under 500GB from one external drive to another. Long story short, HDD broke, tried using Autopsy to get the uncorrupted files.
I was exporting a folder, and last I checked the export progress was at 40%. I left to cook dinner, came back, and Autopsy wasn't open. I originally thought I must have closed it, but I took a look at the logs and they may say otherwise (I backed them all up if you want the copies).
autopsy.log.0:
The last couple of messages were about access denied problems, which may have led to the downfall. But after that, it just drops off. No logs to say Solr stopped or that I closed Autopsy. Then again, the log only contains a few messages about files being extracted out of the >1000 it had to have processed in a few hours. Not sure if you guys reduced the verbosity of logging though.
Last few lines are as follows:
May 07, 2013 4:22:17 PM org.sleuthkit.autopsy.coreutils.Logger log
SEVERE: Trouble extracting file to G:\Devin\Albums\Last Track Meet Ever\DSC_0977.JPG
Exception: java.io.FileNotFoundException: G:\Devin\Albums\Last Track Meet Ever\DSC_0977.JPG (Access is denied)
May 07, 2013 4:51:21 PM org.sleuthkit.autopsy.coreutils.Logger log
SEVERE: Trouble extracting file to G:\Devin\Backup\Windows.XP.USB.Stick.Edition\Windows.XP.USB.Stick.Edition\INSTALLDIR\i386\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82
Exception: java.io.FileNotFoundException: G:\Devin\Backup\Windows.XP.USB.Stick.Edition\Windows.XP.USB.Stick.Edition\INSTALLDIR\i386\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82 (Access is denied)
May 07, 2013 4:51:49 PM org.sleuthkit.autopsy.coreutils.Logger log
SEVERE: Trouble extracting file to G:\Devin\Images\Misc
Exception: java.io.FileNotFoundException: G:\Devin\Images\Misc (Access is denied)
(Looking at the times, the last log took place way before I last saw Autopsy open. I think I left it around 6:30.)
Additional Details
A Java process was open in the background - most likely Solr.
Autopsy Version 3.0.5 RELEASE
TSK Version 4.0.2
My thoughts are that hell, maybe I closed it and the logs didn't write. Or perhaps it hit the corrupted area of my HDD and TSK/Autopsy didn't quite know what to do?
The text was updated successfully, but these errors were encountered:
Hey guys
Pretense
Let me start this with the pretense that I'm not entirely sure what happened, but the logs seem to back up my claim. It's also not that important of an issue, but figure'd I'd document it.
Background
So I was exporting a little under 500GB from one external drive to another. Long story short, HDD broke, tried using Autopsy to get the uncorrupted files.
I was exporting a folder, and last I checked the export progress was at 40%. I left to cook dinner, came back, and Autopsy wasn't open. I originally thought I must have closed it, but I took a look at the logs and they may say otherwise (I backed them all up if you want the copies).
autopsy.log.0:
The last couple of messages were about access denied problems, which may have led to the downfall. But after that, it just drops off. No logs to say Solr stopped or that I closed Autopsy. Then again, the log only contains a few messages about files being extracted out of the >1000 it had to have processed in a few hours. Not sure if you guys reduced the verbosity of logging though.
Last few lines are as follows:
(Looking at the times, the last log took place way before I last saw Autopsy open. I think I left it around 6:30.)
Additional Details
A Java process was open in the background - most likely Solr.
Autopsy Version 3.0.5 RELEASE
TSK Version 4.0.2
My thoughts are that hell, maybe I closed it and the logs didn't write. Or perhaps it hit the corrupted area of my HDD and TSK/Autopsy didn't quite know what to do?
The text was updated successfully, but these errors were encountered: