Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

psteal progress / status

See original GitHub issue

Is there a way to provide “remaining time” to process a volume ?

Command line and arguments:

psteal.py --source /data/image/image.E01 -w /data/plaso/l2t.txt

Plaso version:

plaso - version 20200121

Operating system Plaso is running on:

ubuntu 18.04

Installation method:

sudo apt-get install python-plaso plaso-tools

Issue Analytics

State:
Created 3 years ago
Comments:21 (11 by maintainers)

Top GitHub Comments

1reaction

joachimmetzcommented, Jul 4, 2020

Is there a way to just process vss separately.

Yes, from psteal.py --help:

  --vss_only, --vss-only
                        Do not process the current volume if Volume Shadow Snapshots (VSS) have been selected.
  --vss_stores VSS_STORES, --vss-stores VSS_STORES
                        Define Volume Shadow Snapshots (VSS) (or stores that need to be processed. A range of stores can be defined as: "3..5". Multiple stores can be defined as: "1,3,5" (a list of comma separated values). Ranges and
                        lists can also be combined as: "1,3..5". The first store is 1. All stores can be defined as: "all".

0reactions

siftusercommented, Jul 5, 2020

Thanks ton @joachimmetz