Re: [Vol-dev] [patch] Support for block devices (such as iSCSI exported memory images)

echo6, The patch could not be applied to new_object since all the files it touches are obsolete and have been mostly removed. Its probably applied to trunk. Thats said I dont think the new object code checks isfile or isdir - it just opens what you give it as a filename so it should work with an iscsi device. Michael. On Mon, Sep 28, 2009 at 12:12 AM, echo6 <echo6_uk(a)yahoo.com> wrote: Hi all, Did this patch make it into either svn or new_object branch? Regards, Jon. Mike Auty wrote: >>> Hiya guys, >>>> I had a request from echo6 to allow Volatility to run against iSCSI >>> exported memory images (which basically show up in Linux as block >>> devices). The attached patch changes checks from "not isfile" to >>> "isdir", in order to include block files, regular files and symlinks. >>> The patch also includes a secondary method for determine filesize, based >>> on opening the file, seeking to the end, and then asking the file to >>> tell how far the cursor is. That works fine for block devices, whereas >>> getsize returns 0. >>>> As you can see form the patch, there's a lot of plugins that reimplement >>> existing code and handle files directly. That also means that other >>> existing plugins will need converting if they're to work against block >>> devices... >>>> Mike 5:) >>>>> ------------------------------------------------------------------------ >>>> _______________________________________________ >>> Vol-dev mailing list >>> Vol-dev(a)volatilityfoundation.org >>> http://lists.volatilityfoundation.org/mailman/listinfo/vol-dev

>