Re: [Vol-users] Trouble with forensic1394 III
18 Aug
2011
18 Aug
'11
2 p.m.
On 18/08/11 10:51, Michael Felber wrote:
It seems that Volatility uses a I/O packet size that’s
to large for my
system.
That's due to hardware that incorrectly reports its maximum request size
(if you join the linux1394 mailing list, you'll see I've been diagnosing
this problem with my own hardware). It's not a simple problem to work
around. The dumping application that you included forcibly sets the
maximum read size down to 512 bytes, but we shouldn't really be doing
that, since it will have a (albeit tiny) performance impact on all the
hardware that's doing the right thing and operating correctly.
I'll investigate adding a parameter to override that value, but I'd
prefer that either the hardware be improved, or the kernel do the work
around for us. We're certain not to be the only program to run into
this problem...
Mike 5:)