Can not export C:\$Extend$J
present4n6 opened this issue · comments
I tried export $UsnJrnl and $J with tscopy.
But error occurred in (def __parse_attribute_data( self, attribute ):) method.
present4n6, can you provide the command you used to run this and the output, also please run with the "--debug" flag for more verbose error messages and finally if you are comfortable with sharing the "mft.pickle" file. This will contain metadata for the NTFS dirs and files that it's parse looking for the file to copy.
Thanks
python2 tscopy.py --debug -f "C:\$Extend\$UsnJrnl:$J" -o .
2022-03-25 10:44:47,260 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl:$J'
2022-03-25 10:44:47,262 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl:$J'
2022-03-25 10:44:47,262 - tscopy - DEBUG - Target Drive \.\C:
2022-03-25 10:44:47,262 - tscopy - DEBUG - DriveLetter C
2022-03-25 10:44:47,858 - tscopy - INFO - Copying C:$Extend$UsnJrnl:$J to .$Extend$UsnJrnl:$J
2022-03-25 10:44:47,862 - tscopy - ERROR - File Not Found
2022-03-25 10:44:47,868 - tscopy - INFO - Job Took 0.6089999675750732 seconds
python2 tscopy.py --debug -f "C:\$Extend\$UsnJrnl\$J" -o .
2022-03-25 10:45:09,711 - tscopy - DEBUG - Using Pickle file: .\mft.pickle
2022-03-25 10:45:09,717 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl\$J'
2022-03-25 10:45:09,717 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl\$J'
2022-03-25 10:45:09,717 - tscopy - DEBUG - Target Drive \.\C:
2022-03-25 10:45:09,717 - tscopy - DEBUG - DriveLetter C
2022-03-25 10:45:10,289 - tscopy - INFO - Copying C:$Extend$UsnJrnl$J to .$Extend$UsnJrnl$J
2022-03-25 10:45:10,290 - tscopy - ERROR - File Not Found
2022-03-25 10:45:10,292 - tscopy - INFO - Job Took 0.5810000896453857 seconds
python2 tscopy.py --debug -f "C:\$Extend\$UsnJrnl$J" -o .
2022-03-25 10:46:11,762 - tscopy - DEBUG - Using Pickle file: .\mft.pickle
2022-03-25 10:46:11,763 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl$J'
2022-03-25 10:46:11,763 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl$J'
2022-03-25 10:46:11,763 - tscopy - DEBUG - Target Drive \.\C:
2022-03-25 10:46:11,766 - tscopy - DEBUG - DriveLetter C
2022-03-25 10:46:12,325 - tscopy - INFO - Copying C:$Extend$UsnJrnl$J to .$Extend$UsnJrnl$J
2022-03-25 10:46:12,325 - tscopy - ERROR - File Not Found
2022-03-25 10:46:12,326 - tscopy - INFO - Job Took 0.5659999847412109 seconds
(dp0
S'C'
p1
g0
sI5
(dp2
S'children'
p3
(dp4
S'$logfile'
p5
(dp6
g3
(dp7
sS'name'
p8
g5
sS'seq_num'
p9
L2L
ssS'$secure'
p10
(dp11
g3
(dp12
sg8
g10
sg9
L9L
ssS'$extend'
p13
(dp14
g3
(dp15
V$usnjrnl
p16
(dp17
g3
(dp18
sg8
g16
sg9
L58101L
ssV$quota
p19
(dp20
g3
(dp21
sg8
g19
sg9
L24L
ssV$rmmetadata
p22
(dp23
g3
(dp24
sg8
g22
sg9
L27L
ssV$reparse
p25
(dp26
g3
(dp27
sg8
g25
sg9
L26L
ssV$objid
p28
(dp29
g3
(dp30
sg8
g28
sg9
L25L
ssV$deleted
p31
(dp32
g3
(dp33
sg8
g31
sg9
L29L
sssg8
g13
sg9
L11L
ssS'$volume'
p34
(dp35
g3
(dp36
sg8
g34
sg9
L3L
ssV.
p37
(dp38
g3
(dp39
sg8
g37
sg9
L5L
ssS'$boot'
p40
(dp41
g3
(dp42
sg8
g40
sg9
L7L
ssS'$attrdef'
p43
(dp44
g3
(dp45
sg8
g43
sg9
L4L
ssS'$mftmirr'
p46
(dp47
g3
(dp48
sg8
g46
sg9
L1L
ssS'$recycle.bin'
p49
(dp50
g3
(dp51
sg8
g49
sg9
L500106L
ssS'$bitmap'
p52
(dp53
g3
(dp54
sg8
g52
sg9
L6L
ssS'$badclus'
p55
(dp56
g3
(dp57
sg8
g55
sg9
L8L
ssS'$mft'
p58
(dp59
g3
(dp60
sg8
g58
sg9
L0L
sssg8
S''
p61
sg9
I5
ss.
(dp0
S'C'
p1
g0
sI5
(dp2
S'children'
p3
(dp4
S'$logfile'
p5
(dp6
g3
(dp7
sS'name'
p8
g5
sS'seq_num'
p9
L2L
ssS'$secure'
p10
(dp11
g3
(dp12
sg8
g10
sg9
L9L
ssS'$extend'
p13
(dp14
g3
(dp15
V$usnjrnl
p16
(dp17
g3
(dp18
sg8
g16
sg9
L58101L
sssg8
g13
sg9
L11L
ssS'$volume'
p19
(dp20
g3
(dp21
sg8
g19
sg9
L3L
ssV.
p22
(dp23
g3
(dp24
sg8
g22
sg9
L5L
ssS'$boot'
p25
(dp26
g3
(dp27
sg8
g25
sg9
L7L
ssS'$attrdef'
p28
(dp29
g3
(dp30
sg8
g28
sg9
L4L
ssS'$mftmirr'
p31
(dp32
g3
(dp33
sg8
g31
sg9
L1L
ssS'$recycle.bin'
p34
(dp35
g3
(dp36
sg8
g34
sg9
L500106L
ssS'$bitmap'
p37
(dp38
g3
(dp39
sg8
g37
sg9
L6L
ssS'$badclus'
p40
(dp41
g3
(dp42
sg8
g40
sg9
L8L
ssS'$mft'
p43
(dp44
g3
(dp45
sg8
g43
sg9
L0L
sssg8
S''
p46
sg9
I5
ss.
(dp0
S'C'
p1
g0
sI5
(dp2
S'children'
p3
(dp4
S'$logfile'
p5
(dp6
g3
(dp7
sS'name'
p8
g5
sS'seq_num'
p9
L2L
ssS'$secure'
p10
(dp11
g3
(dp12
sg8
g10
sg9
L9L
ssS'$extend'
p13
(dp14
g3
(dp15
V$usnjrnl
p16
(dp17
g3
(dp18
sg8
g16
sg9
L58101L
ssV$quota
p19
(dp20
g3
(dp21
sg8
g19
sg9
L24L
ssV$rmmetadata
p22
(dp23
g3
(dp24
sg8
g22
sg9
L27L
ssV$reparse
p25
(dp26
g3
(dp27
sg8
g25
sg9
L26L
ssV$objid
p28
(dp29
g3
(dp30
sg8
g28
sg9
L25L
ssV$deleted
p31
(dp32
g3
(dp33
sg8
g31
sg9
L29L
sssg8
g13
sg9
L11L
ssS'$volume'
p34
(dp35
g3
(dp36
sg8
g34
sg9
L3L
ssV.
p37
(dp38
g3
(dp39
sg8
g37
sg9
L5L
ssS'$boot'
p40
(dp41
g3
(dp42
sg8
g40
sg9
L7L
ssS'$attrdef'
p43
(dp44
g3
(dp45
sg8
g43
sg9
L4L
ssS'$mftmirr'
p46
(dp47
g3
(dp48
sg8
g46
sg9
L1L
ssS'$recycle.bin'
p49
(dp50
g3
(dp51
sg8
g49
sg9
L500106L
ssS'$bitmap'
p52
(dp53
g3
(dp54
sg8
g52
sg9
L6L
ssS'$badclus'
p55
(dp56
g3
(dp57
sg8
g55
sg9
L8L
ssS'$mft'
p58
(dp59
g3
(dp60
sg8
g58
sg9
L0L
sssg8
S''
p61
sg9
I5
ss.
present4n6 Try the following. I didn't set up TScopy to copy the individual ADS. If you point it to the root it will copy the root file and all ADS
python2 tscopy.py --debug -f "C:$Extend$UsnJrnl" -o .
Note: if the file size is 0 the no new file will be created
I tried already that command.
But, $J doesn't exported, Only $Max was exported.
python2 TScopy.py --debug -f "C:$Extend$UsnJrnl" -o .
2022-03-25 11:15:28,546 - tscopy - DEBUG - Using Pickle file: .\mft.pickle
2022-03-25 11:15:28,549 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl'
2022-03-25 11:15:28,549 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl'
2022-03-25 11:15:28,549 - tscopy - DEBUG - Target Drive \.\C:
2022-03-25 11:15:28,549 - tscopy - DEBUG - DriveLetter C
2022-03-25 11:15:29,167 - tscopy - INFO - Copying C:$Extend$UsnJrnl to .$Extend$UsnJrnl
2022-03-25 11:15:29,167 - tscopy - DEBUG - parse_fle_record 0x e2f5
2022-03-25 11:15:29,170 - tscopy - DEBUG - Parsing Attribute 0x10
2022-03-25 11:15:29,170 - tscopy - DEBUG - Parsing Attribute 0x20
2022-03-25 11:15:29,170 - tscopy - DEBUG - ATTRIBUTE_LIST HAS BEEN FOUND getting the File 0x(0000e2f5)!!!!
2022-03-25 11:15:29,170 - tscopy - DEBUG - parse_fle_record 0x 2f3a9
2022-03-25 11:15:29,173 - tscopy - DEBUG - Parsing Attribute 0x80
2022-03-25 11:15:29,174 - tscopy - DEBUG - non_resident 1
2022-03-25 11:15:29,174 - tscopy - DEBUG - parse_fle_record 0x 4cf45
2022-03-25 11:15:29,176 - tscopy - DEBUG - Parsing Attribute 0x80
2022-03-25 11:15:29,177 - tscopy - DEBUG - non_resident 1
2022-03-25 11:15:29,177 - tscopy - DEBUG - Parsing Attribute 0x30
2022-03-25 11:15:29,178 - tscopy - DEBUG - Parsing Attribute 0x80
2022-03-25 11:15:29,178 - tscopy - DEBUG - non_resident 0
2022-03-25 11:15:29,178 - tscopy - DEBUG - GetFile:: fullpath edit .$Extend$UsnJrnl_ADS_$Max
2022-03-25 11:15:29,180 - tscopy - DEBUG - GetFile:: file size 32
2022-03-25 11:15:29,180 - tscopy - INFO - Job Took 0.6340000629425049 seconds
present4n6, A new version has been pushed that should correct your issue. Please let me know if this doesn't work.
Thank you for your efforts. But still an error occurs in $J
C:\Users\present\Downloads\tscopy-master\tscopy-master>python2 tscopy.py -f "C:$Extend$UsnJrnl" -o test --debug
2022-04-02 12:15:35,108 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl'
2022-04-02 12:15:35,108 - tscopy - DEBUG - filename 'C:\$Extend\$UsnJrnl'
2022-04-02 12:15:35,108 - tscopy - DEBUG - Target Drive \.\C:
2022-04-02 12:15:35,109 - tscopy - DEBUG - DriveLetter C
2022-04-02 12:15:35,388 - tscopy - INFO - Copying C:$Extend$UsnJrnl to test$Extend$UsnJrnl
2022-04-02 12:15:35,397 - tscopy - DEBUG - GetFile:: fullpath edit test$Extend$UsnJrnl
2022-04-02 12:15:35,397 - tscopy - DEBUG - parse_fle_record 0x00015a56
2022-04-02 12:15:35,401 - tscopy - DEBUG - Parsing Attribute 0x10
2022-04-02 12:15:35,401 - tscopy - DEBUG - Parsing Attribute 0x20
2022-04-02 12:15:35,401 - tscopy - DEBUG - ATTRIBUTE_LIST HAS BEEN FOUND getting the File 0x(00015a56)!!!!
2022-04-02 12:15:35,401 - tscopy - DEBUG - parse_fle_record 0x00077bb2
2022-04-02 12:15:35,403 - tscopy - DEBUG - Parsing Attribute 0x80
2022-04-02 12:15:35,403 - tscopy - DEBUG - Attribute File Name $J
2022-04-02 12:15:35,404 - tscopy - DEBUG - non_resident 1
2022-04-02 12:15:35,404 - tscopy - DEBUG - parse_attribute_data:: Sparsed file segment detected length( 00487b10 ) lengthx4096 (487b10000)
2022-04-02 12:15:35,404 - tscopy - ERROR - Failed to get file $J
Traceback (most recent call last):
File "C:\Users\present\Downloads\tscopy-master\tscopy-master\TScopy\tscopy.py", line 696, in __parse_attribute_data
fd_out.write("\x00"*chunch_sz)
MemoryError
2022-04-02 12:15:35,404 - tscopy - DEBUG - parse_fle_record 0x000f4ca2
2022-04-02 12:15:35,411 - tscopy - DEBUG - Parsing Attribute 0x80
2022-04-02 12:15:35,411 - tscopy - DEBUG - Attribute File Name $J
2022-04-02 12:15:35,411 - tscopy - DEBUG - non_resident 1
2022-04-02 12:15:35,414 - tscopy - DEBUG - parse_attribute_data:: Sparsed file segment detected length( 000574f0 ) lengthx4096 (574f0000)
2022-04-02 12:15:36,996 - tscopy - DEBUG - GetFile:: cluster_offset( 022215c9 ) length( 00000060 )
2022-04-02 12:15:36,996 - tscopy - DEBUG - readsize 00060000 cnt 574f0000 init_sz 00000000
2022-04-02 12:15:36,996 - tscopy - DEBUG - readsize -574f0000 cnt 574f0000 init_sz 00000000
2022-04-02 12:15:40,785 - tscopy - DEBUG - GetFile:: cluster_offset( 01e0a193 ) length( 0000008d )
2022-04-02 12:15:40,785 - tscopy - DEBUG - readsize 0008d000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,785 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,786 - tscopy - DEBUG - GetFile:: cluster_offset( 05e75813 ) length( 00000073 )
2022-04-02 12:15:40,786 - tscopy - DEBUG - readsize 00073000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,786 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,786 - tscopy - DEBUG - GetFile:: cluster_offset( 066e98e8 ) length( 00000080 )
2022-04-02 12:15:40,786 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,786 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,788 - tscopy - DEBUG - GetFile:: cluster_offset( 06c79674 ) length( 00000080 )
2022-04-02 12:15:40,788 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,788 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,788 - tscopy - DEBUG - GetFile:: cluster_offset( 06e03e54 ) length( 00000080 )
2022-04-02 12:15:40,789 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,789 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,789 - tscopy - DEBUG - GetFile:: cluster_offset( 072222b8 ) length( 00000080 )
2022-04-02 12:15:40,789 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,789 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,789 - tscopy - DEBUG - GetFile:: cluster_offset( 052e9e30 ) length( 00000080 )
2022-04-02 12:15:40,790 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,792 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,792 - tscopy - DEBUG - GetFile:: cluster_offset( 0509366c ) length( 00000080 )
2022-04-02 12:15:40,792 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,792 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,792 - tscopy - DEBUG - GetFile:: cluster_offset( 052ed285 ) length( 00000080 )
2022-04-02 12:15:40,793 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,793 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,793 - tscopy - DEBUG - GetFile:: cluster_offset( 04508524 ) length( 00000080 )
2022-04-02 12:15:40,793 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,795 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,795 - tscopy - DEBUG - GetFile:: cluster_offset( 04217a50 ) length( 00000080 )
2022-04-02 12:15:40,795 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,796 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,796 - tscopy - DEBUG - GetFile:: cluster_offset( 04c1ddc4 ) length( 00000080 )
2022-04-02 12:15:40,796 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,796 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,796 - tscopy - DEBUG - GetFile:: cluster_offset( 05136be0 ) length( 00000080 )
2022-04-02 12:15:40,796 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,796 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,798 - tscopy - DEBUG - GetFile:: cluster_offset( 0513a86c ) length( 00000080 )
2022-04-02 12:15:40,798 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,798 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,799 - tscopy - DEBUG - GetFile:: cluster_offset( 010a9f76 ) length( 00000080 )
2022-04-02 12:15:40,799 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,799 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,799 - tscopy - DEBUG - GetFile:: cluster_offset( 015c650c ) length( 00000080 )
2022-04-02 12:15:40,799 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,799 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,801 - tscopy - DEBUG - GetFile:: cluster_offset( 046f079d ) length( 00000087 )
2022-04-02 12:15:40,801 - tscopy - DEBUG - readsize 00087000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,801 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,802 - tscopy - DEBUG - GetFile:: cluster_offset( 014ca7b4 ) length( 00000079 )
2022-04-02 12:15:40,802 - tscopy - DEBUG - readsize 00079000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,802 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,802 - tscopy - DEBUG - GetFile:: cluster_offset( 06ea8d1f ) length( 00000085 )
2022-04-02 12:15:40,802 - tscopy - DEBUG - readsize 00085000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,802 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,803 - tscopy - DEBUG - GetFile:: cluster_offset( 038a8990 ) length( 0000007b )
2022-04-02 12:15:40,803 - tscopy - DEBUG - readsize 0007b000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,803 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,805 - tscopy - DEBUG - GetFile:: cluster_offset( 050b08e9 ) length( 00000080 )
2022-04-02 12:15:40,805 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,805 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,806 - tscopy - DEBUG - GetFile:: cluster_offset( 0529c510 ) length( 00000098 )
2022-04-02 12:15:40,806 - tscopy - DEBUG - readsize 00098000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,808 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,808 - tscopy - DEBUG - GetFile:: cluster_offset( 073acb4c ) length( 00000068 )
2022-04-02 12:15:40,808 - tscopy - DEBUG - readsize 00068000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,809 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,809 - tscopy - DEBUG - GetFile:: cluster_offset( 0596f4d7 ) length( 00000080 )
2022-04-02 12:15:40,809 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,809 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,809 - tscopy - DEBUG - GetFile:: cluster_offset( 05a08671 ) length( 00000080 )
2022-04-02 12:15:40,809 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,811 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,811 - tscopy - DEBUG - GetFile:: cluster_offset( 06f89a57 ) length( 00000080 )
2022-04-02 12:15:40,811 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,812 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,812 - tscopy - DEBUG - GetFile:: cluster_offset( 06705b85 ) length( 00000080 )
2022-04-02 12:15:40,812 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,812 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,812 - tscopy - DEBUG - GetFile:: cluster_offset( 06730457 ) length( 00000080 )
2022-04-02 12:15:40,812 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,813 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,813 - tscopy - DEBUG - GetFile:: cluster_offset( 061eb842 ) length( 0000008e )
2022-04-02 12:15:40,813 - tscopy - DEBUG - readsize 0008e000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,813 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,815 - tscopy - DEBUG - GetFile:: cluster_offset( 057868b5 ) length( 00000072 )
2022-04-02 12:15:40,815 - tscopy - DEBUG - readsize 00072000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,815 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,815 - tscopy - DEBUG - GetFile:: cluster_offset( 03e7b13f ) length( 00000080 )
2022-04-02 12:15:40,815 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,815 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,816 - tscopy - DEBUG - GetFile:: cluster_offset( 0423901b ) length( 0000008f )
2022-04-02 12:15:40,816 - tscopy - DEBUG - readsize 0008f000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,816 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,818 - tscopy - DEBUG - GetFile:: cluster_offset( 05a63e20 ) length( 00000071 )
2022-04-02 12:15:40,818 - tscopy - DEBUG - readsize 00071000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,818 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,819 - tscopy - DEBUG - GetFile:: cluster_offset( 05a9a131 ) length( 00000080 )
2022-04-02 12:15:40,819 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,819 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,819 - tscopy - DEBUG - GetFile:: cluster_offset( 05b5b7ae ) length( 00000080 )
2022-04-02 12:15:40,819 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,819 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,821 - tscopy - DEBUG - GetFile:: cluster_offset( 05b76599 ) length( 00000080 )
2022-04-02 12:15:40,822 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,822 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,822 - tscopy - DEBUG - GetFile:: cluster_offset( 06d18cd3 ) length( 00000080 )
2022-04-02 12:15:40,822 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,823 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,823 - tscopy - DEBUG - GetFile:: cluster_offset( 06d31ce8 ) length( 00000080 )
2022-04-02 12:15:40,823 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,825 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,825 - tscopy - DEBUG - GetFile:: cluster_offset( 06d3b350 ) length( 00000080 )
2022-04-02 12:15:40,825 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,825 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,825 - tscopy - DEBUG - GetFile:: cluster_offset( 06d58acd ) length( 00000080 )
2022-04-02 12:15:40,825 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,826 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,826 - tscopy - DEBUG - GetFile:: cluster_offset( 04df61ad ) length( 00000080 )
2022-04-02 12:15:40,826 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,826 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,828 - tscopy - DEBUG - GetFile:: cluster_offset( 04e1109d ) length( 00000080 )
2022-04-02 12:15:40,828 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,828 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,828 - tscopy - DEBUG - GetFile:: cluster_offset( 04e38a5b ) length( 00000080 )
2022-04-02 12:15:40,828 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,828 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,829 - tscopy - DEBUG - GetFile:: cluster_offset( 03b61beb ) length( 00000085 )
2022-04-02 12:15:40,829 - tscopy - DEBUG - readsize 00085000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,829 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,831 - tscopy - DEBUG - GetFile:: cluster_offset( 04945b06 ) length( 0000007b )
2022-04-02 12:15:40,831 - tscopy - DEBUG - readsize 0007b000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,831 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,832 - tscopy - DEBUG - GetFile:: cluster_offset( 062a44c5 ) length( 00000080 )
2022-04-02 12:15:40,832 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,832 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,832 - tscopy - DEBUG - GetFile:: cluster_offset( 062bf892 ) length( 00000080 )
2022-04-02 12:15:40,832 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,832 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,834 - tscopy - DEBUG - GetFile:: cluster_offset( 062d66d7 ) length( 00000080 )
2022-04-02 12:15:40,834 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,834 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,835 - tscopy - DEBUG - GetFile:: cluster_offset( 04636adf ) length( 00000080 )
2022-04-02 12:15:40,835 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,835 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,835 - tscopy - DEBUG - GetFile:: cluster_offset( 0554f73b ) length( 00000080 )
2022-04-02 12:15:40,836 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,838 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,838 - tscopy - DEBUG - GetFile:: cluster_offset( 05591700 ) length( 00000080 )
2022-04-02 12:15:40,838 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,838 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,838 - tscopy - DEBUG - GetFile:: cluster_offset( 05055cf5 ) length( 00000080 )
2022-04-02 12:15:40,838 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,838 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,839 - tscopy - DEBUG - GetFile:: cluster_offset( 03d3bbe6 ) length( 00000080 )
2022-04-02 12:15:40,839 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,839 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,841 - tscopy - DEBUG - GetFile:: cluster_offset( 04f5efba ) length( 00000080 )
2022-04-02 12:15:40,841 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,841 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,842 - tscopy - DEBUG - GetFile:: cluster_offset( 03fc55e1 ) length( 00000080 )
2022-04-02 12:15:40,842 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,842 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,842 - tscopy - DEBUG - GetFile:: cluster_offset( 04005954 ) length( 00000080 )
2022-04-02 12:15:40,842 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,842 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,844 - tscopy - DEBUG - GetFile:: cluster_offset( 00a0c654 ) length( 00000080 )
2022-04-02 12:15:40,844 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,844 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,845 - tscopy - DEBUG - GetFile:: cluster_offset( 04d92f91 ) length( 0000009f )
2022-04-02 12:15:40,845 - tscopy - DEBUG - readsize 0009f000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,845 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,845 - tscopy - DEBUG - GetFile:: cluster_offset( 04d9a32c ) length( 00000061 )
2022-04-02 12:15:40,845 - tscopy - DEBUG - readsize 00061000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,845 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,846 - tscopy - DEBUG - GetFile:: cluster_offset( 040332b0 ) length( 00000300 )
2022-04-02 12:15:40,846 - tscopy - DEBUG - readsize 00300000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,846 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,848 - tscopy - DEBUG - GetFile:: cluster_offset( 06b27dfd ) length( 00000080 )
2022-04-02 12:15:40,848 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,848 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,848 - tscopy - DEBUG - GetFile:: cluster_offset( 04011384 ) length( 00000080 )
2022-04-02 12:15:40,848 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,848 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,849 - tscopy - DEBUG - GetFile:: cluster_offset( 0241de60 ) length( 00000080 )
2022-04-02 12:15:40,849 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,849 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,851 - tscopy - DEBUG - GetFile:: cluster_offset( 00bae2bc ) length( 00000080 )
2022-04-02 12:15:40,851 - tscopy - DEBUG - readsize 00080000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,851 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,852 - tscopy - DEBUG - GetFile:: cluster_offset( 0401f0a0 ) length( 00000084 )
2022-04-02 12:15:40,852 - tscopy - DEBUG - readsize 00084000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,852 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,854 - tscopy - DEBUG - GetFile:: cluster_offset( 03d12ad4 ) length( 0000007d )
2022-04-02 12:15:40,854 - tscopy - DEBUG - readsize 0007d000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,854 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,855 - tscopy - DEBUG - GetFile:: cluster_offset( 047ce989 ) length( 0000007f )
2022-04-02 12:15:40,855 - tscopy - DEBUG - readsize 0007f000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,855 - tscopy - DEBUG - readsize 00000000 cnt 00000000 init_sz 00000000
2022-04-02 12:15:40,855 - tscopy - DEBUG - Parsing Attribute 0x30
2022-04-02 12:15:40,855 - tscopy - DEBUG - Parsing Attribute 0x80
2022-04-02 12:15:40,857 - tscopy - DEBUG - Attribute File Name $Max
2022-04-02 12:15:40,857 - tscopy - DEBUG - non_resident 0
2022-04-02 12:15:40,858 - tscopy - INFO - Job Took 5.751999855041504 seconds
present4n6, the default chunk size was too large and used up existing ram. Limited it to the 4096 which should work on all systems.
um.... That's mean can't run in my system?
no it should run now. Sorry was explaining why you had the prior error.