jschicht / LogFileParser

Parser for $LogFile on NTFS

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Error _RemoveSingleOffsetOfAttrib...

fcano opened this issue · comments

Hi,

Thanks for such a great tool.

During the parsing of a $LogFile/$MFT file I get multiple errors like the following:

clipboard02

clipboard03

What does this mean? How I can avoid them?

There seems to be a bug in one of the latest functionality I added (it
builds an array with attribute offsets for given MFT numbers). That message
was used during the development to indicate situations that should not
happen. Most likely there is not something seriously wrong with output,
only the current attribute for a given lsn may be incorrectly detected. To
solve this I would need a copy of your $LogFile (and I can not guarantee
that I am able to solve it). But I can promise to give it a try. If this is
acceptable, is up to you to decide.

If is of course possible to recompile it, with that message box commented

On 7 February 2015 at 12:24, fcano notifications@github.com wrote:

Hi,

Thanks for such a great tool.

During the parsing of a $LogFile/$MFT file I get multiple errors like the
following:

[image: clipboard02]
https://cloud.githubusercontent.com/assets/1067339/6091921/322c8fb8-aec4-11e4-9270-9334d5883ae5.png

[image: clipboard03]
https://cloud.githubusercontent.com/assets/1067339/6091922/3628f142-aec4-11e4-9458-b5165d074bde.png

What does this mean? How I can avoid them?


Reply to this email directly or view it on GitHub
#1.

Regards,
Joakim

Thanks very much but I can't share this $LogFile. Maybe if I find in another $LogFile the same issue I could send it to you just to help in preventing this message to appearfor other people too :)

Thanks very much!