TSK_COMPAREDIR(1) General Commands Manual TSK_COMPAREDIR(1)NAME
tsk_comparedir - compare the contents of a directory with the contents of an image or local device.
SYNOPSIS
tsk_comparedir [-vV] [-n start_inum ][ -i imgtype ][ -b dev_sector_size ][-o sector_offset ] image comparison_directory
DESCRIPTION
tsk_comparedir compares the contents of image to the contents of comparison_directory. This can be useful for detecting rootkits and when
testing. Rootkits can be detected by comparing the contents of a local directory and a local raw device. The rootkits typically don't
hide data when it is read directly from the raw device.
The arguments are as follows:
-o sector_offset
Sector offset for a partition in the image or device to compare with.
-n start_inum
Starting inum for a directory in the image to start the comparison at.
-v verbose output to stderr
-V Print version
-i imgtype
The format of the image file (use '-i list' for supported types) If not given, autodetection methods are used.
-b dev_sector_size
The size (in bytes) of the device sectors If not given, autodetection methods are used.
EXAMPLES
To compare the directories in image.dd to those in directory:
# tsk_comparedir ./image.dd ./directory
AUTHOR
Brian Carrier <carrier at sleuthkit dot org>
Send documentation updates to <doc-updates at sleuthkit dot org>
TSK_COMPAREDIR(1)
Check Out this Related Man Page
TSK_LOADDB(1) General Commands Manual TSK_LOADDB(1)NAME
tsk_loaddb - populate a SQLite database with metadata from a disk image
SYNOPSIS
tsk_loaddb [-vVk] [-i imgtype ] [-b dev_sector_size ] [-i imgtype ] [-d output_dir ] image
DESCRIPTION
tsk_loaddb loads disk information from image to a sqlite database. This database can then be used by tools in other languages for analy-
sis. By default, the database is stored in the same directory as the image with ".db" appended to the name.
The arguments are as follows:
-d output_dir
specify a directory to output the database file to (must be an existing directory) if not specified the database file will be cre-
ated in the same directory as the image file
-v verbose output to stderr
-V Print version
-k Don't create block data table. This table maps each block to the file that allocated it. This option will make this program run
faster.
-i imgtype
The format of the image file (use '-i list' for supported types)
-b dev_sector_size
The size (in bytes) of the device sectors If -i or -b are not given, autodetection methods are used.
EXAMPLES
To load image data from image.dd to image.dd.db:
# tsk_loaddb ./image.dd
AUTHOR
Brian Carrier <carrier at sleuthkit dot org>
Send documentation updates to <doc-updates at sleuthkit dot org>
TSK_LOADDB(1)
Hi all,
I need to compare the contents of 2 directories where the file contents are similar and take out the filenames whose contents does not exist within the 2 directories.
Directory1
1
2
3
4
Directory2
54
55
56
57
Does anyone has a script which can do this?
At the end of... (6 Replies)
Hey guys!
I'm so glad I found this site, I've had so many questions and have been left alone for roughly a year scanning man pages but It's just not quite cutting it for some things.
So, I often like to list directories when browsing around my local machine, a friend's machine, or my web... (6 Replies)
I have an array "arrA" with the following contents:
A0012 Paint Shop.doc
ES001 Contract Signature.doc
Budget Plan.pdf
TS PWS.pdf
My data file "Files.dat" has the same contents:
A0012 Paint Shop.doc
ES001 Contract Signature.doc
Budget Plan.pdf
TS PWS.pdf
I have a script that compares... (0 Replies)
Hello every one,
Iam newbie to this forum and shell programming &scripting.
i needed to compare each and every folder of two separate servers.
Actually I have copied some directory structure from one server to second server, to build on second server the files all should be copied... (3 Replies)
Hello,
There are directories named by "yyyyMMdd" format. The one directory name is given and I should find & print that directory & its previous days directory names if exist.
For example:
20080401
20080402
20080403
20080404
...
The given date: 20080403
The result:
20080403... (4 Replies)
Hi all,
I need help on this.
I have a file with 4500 bytes. I want to modify the contents of line from 1357 through 3208.
1. Starting 1357, there is 35 occurence of 40 bytes data making it to 2757.
2. The remaining 451 filler with spaces taking it to 3208.
Now, the 40 byte data is... (2 Replies)
I have two file in a Directory.I want a script which will compare the Size of Two file.
Can Anyone Help me on this:
linasplg11:/opt/dataout/kk/linasplg11 # cat size
-rwxrwxrwx 1 root root 16658 Jan 8 13:58 lina_IP_SIP_1231325621210.xml
-rwxr-xr-x 1 root root 16672 Jan 8 14:30... (1 Reply)
i have a file which has following content:
the value of x is : 5
In another file i have:
the value of x is :
i want when i will compare both file then output should come like
the value of x is : 5
need some help (1 Reply)
i have been asked to write a bash shell script comparing two directories and sed or awk should not be used in this assignment. compdir will compare filenames in two directories, and list information about filenames that are in one directory but not the other. The information listed will be a long... (1 Reply)
Hello,
I am new to scripting and have been trying to compare two different directories, but with all the same file names in each directory for file changes. I have been doing it in baby steps and have been doing pretty good, but I have hit a few snags. Test 1 and Test 2 work great, but my... (4 Replies)
Hi,
I am facing issue while reading data from a file in UNIX. my requirement is to compare two files and for the text pattern matching in the 1st file, replace the contents in second file by the contents of first file from start to the end and write the contents to thrid file.
i am able to... (2 Replies)
Hi Guys ,
we have one directory ...in that directory all files will be set on each day..
files must have header ,contents ,footer..
i wants to compare the header,contents,footer ..if its same means display an error message as 'files contents same' (7 Replies)
Hey guys,
need help with a script I'm trying to write.
Basically I need to compare the contents of a folder called "profiles"
with a list of files called "template".
when the file matches the contents of the folder it needs to set a variable called "checked" to "1"
Cookies to anyone... (4 Replies)