Re: Forensics CD Toolkit for FreeBSD
From: Bruce M Simpson (bms_at_spc.org)
Date: 08/04/03
- Previous message: Fernando Gleiser: "Re: ipfw or ipf w/stateful behavior"
- In reply to: Joe Warner: "Re: Forensics CD Toolkit for FreeBSD"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 4 Aug 2003 17:30:06 +0100 To: Joe Warner <rootman22@comcast.net>
On Sun, Aug 03, 2003 at 12:59:31PM -0600, Joe Warner wrote:
> Yes, I've seen that all over the place from my searches on Google but I
> was hesitant about going any further with that because it said it's only
> been tested on FreeBSD 2.2.1, 3.4, and 4.4
A lot of the code in TCT is fairly portable. I remember TCT well from using
it on Solaris at a certain investment bank.
> Do you think I can run TCT from a CD?
Most of TCT depends on libc functions, I see no problem with running TCT
from CD if it's compiled and linked correctly for this purpose.
You may even wish to try compiling the tools as standalone binaries so that
they can be placed on smaller boot media.
BMS
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
- Previous message: Fernando Gleiser: "Re: ipfw or ipf w/stateful behavior"
- In reply to: Joe Warner: "Re: Forensics CD Toolkit for FreeBSD"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]