{"action":"created","issue":{"url":"https://api.github.com/repos/sleuthkit/autopsy/issues/2855","repository_url":"https://api.github.com/repos/sleuthkit/autopsy","labels_url":"https://api.github.com/repos/sleuthkit/autopsy/issues/2855/labels{/name}","comments_url":"https://api.github.com/repos/sleuthkit/autopsy/issues/2855/comments","events_url":"https://api.github.com/repos/sleuthkit/autopsy/issues/2855/events","html_url":"https://github.com/sleuthkit/autopsy/issues/2855","id":236470403,"number":2855,"title":"Finding files forever","user":{"login":"klasse76","id":29483248,"avatar_url":"https://avatars2.githubusercontent.com/u/29483248?v=3","gravatar_id":"","url":"https://api.github.com/users/klasse76","html_url":"https://github.com/klasse76","followers_url":"https://api.github.com/users/klasse76/followers","following_url":"https://api.github.com/users/klasse76/following{/other_user}","gists_url":"https://api.github.com/users/klasse76/gists{/gist_id}","starred_url":"https://api.github.com/users/klasse76/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/klasse76/subscriptions","organizations_url":"https://api.github.com/users/klasse76/orgs","repos_url":"https://api.github.com/users/klasse76/repos","events_url":"https://api.github.com/users/klasse76/events{/privacy}","received_events_url":"https://api.github.com/users/klasse76/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-06-16T12:35:24Z","updated_at":"2017-06-19T10:31:40Z","closed_at":null,"body":"Hi\r\n \r\nI have imported a E01 into Griffeye Analyze whihc is using Sleuthkit for extracting images into the software. It found about 40 times the amount of files that I have in my image according to EnCase.\r\n\r\nI then ran the same E01 in Autopsy and the same thing happened. It ran and ran for days and nothing happened\r\nThe image contains illegal files so I can’t send it to you.\r\nI have installed autopsy and imported the E01 image, selecting all options except email parsing, android, keywords.\r\nIt has been running now for days and is still going, I have no idea how much longer it is going to take.\r\n \r\nI gave up on the Analyze job at 155 million files – it was still going but I had to restart my computer. The image contains 4 million files according to EnCase.\r\n\r\nWhat could be the problem?"},"comment":{"url":"https://api.github.com/repos/sleuthkit/autopsy/issues/comments/309401842","html_url":"https://github.com/sleuthkit/autopsy/issues/2855#issuecomment-309401842","issue_url":"https://api.github.com/repos/sleuthkit/autopsy/issues/2855","id":309401842,"user":{"login":"klasse76","id":29483248,"avatar_url":"https://avatars2.githubusercontent.com/u/29483248?v=3","gravatar_id":"","url":"https://api.github.com/users/klasse76","html_url":"https://github.com/klasse76","followers_url":"https://api.github.com/users/klasse76/followers","following_url":"https://api.github.com/users/klasse76/following{/other_user}","gists_url":"https://api.github.com/users/klasse76/gists{/gist_id}","starred_url":"https://api.github.com/users/klasse76/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/klasse76/subscriptions","organizations_url":"https://api.github.com/users/klasse76/orgs","repos_url":"https://api.github.com/users/klasse76/repos","events_url":"https://api.github.com/users/klasse76/events{/privacy}","received_events_url":"https://api.github.com/users/klasse76/received_events","type":"User","site_admin":false},"created_at":"2017-06-19T10:31:40Z","updated_at":"2017-06-19T10:31:40Z","body":"Hi\r\n\r\nIt is an external storage drive (ie there is no OS), which has 1.8TB  formatted as HFSX, and a 200MB FAT32 partition. It is a 2TB drive. It is an E01 image.\r\nSleuth kit never got to the point where there was a tree visible – I got the Configure ingest module window, clicked next and then got a screen that says processing data source and adding it to a local database. *this process may take some time for large data sources.\r\nAfter 24 hours it was still on this same screen though the file path shown in the lower window is changing. I then accidentally pressed something and it stopped (probably I accidentally pressed the cancel button).\r\nI will run it again over the weekend and see how far it gets. Screen shots attached.\r\n\r\n\r\nFrom: Brian Carrier [mailto:notifications@github.com]\r\nSent: den 16 juni 2017 15:46\r\nTo: sleuthkit/autopsy <autopsy@noreply.github.com>\r\nCc: Klas Waldenfors <klas.waldenfors@safersociety.com>; Author <author@noreply.github.com>\r\nSubject: Re: [sleuthkit/autopsy] Finding files forever (#2855)\r\n\r\n\r\nHello. Do you know what file system type it is? FAT?\r\n\r\nWhen you added it to Autopsy, did the \"Add Data Source\" wizard panel ever go away and you could see the tree and such to navigate around? There are two phases to adding a Data Source in Autopsy. One is when The Sleuth Kit is used to enumerate all of the files (and that can be slow for FAT file systems) and the second is when the files are run through the pipelines of ingest modules. The tree on the left doesn't appear until the files have been enumerated.\r\n\r\n—\r\nYou are receiving this because you authored the thread.\r\nReply to this email directly, view it on GitHub<https://github.com/sleuthkit/autopsy/issues/2855#issuecomment-309030055>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AcHg8KneM40HJaQo48kahQ07P3fJRUM3ks5sEocTgaJpZM4N8Z4v>.\r\n\r\nKlas Waldenfors\r\nCustomer Care Manager\r\nTel: +46 31 719 08 00\r\nMobile: +46 702 28 18 96\r\nklas.waldenfors@safersociety.com\r\n\r\n[Safer Society Group]\r\n\r\nSafer Society Group Sweden AB\r\nFörsta Långgatan 30, SE-413 27 Gothenburg, Sweden\r\nsafersociety.com<http://www.safersociety.com>\r\n\r\nThe group comprises two brands:\r\nNetClean and Griffeye.\r\n\r\nThe information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.\r\nTo preserve the environment, print this message only if necessary\r\n"}}
{"actor":{"display_login":"klasse76"}}