Support Forums

Welcome to Support Forums Sign in | Join | Help
in
Home Forums

Issues performing analysis

Last post 05-29-2007, 3:35 PM by Chris. 3 replies.
Sort Posts: Previous
  • Issues performing analysis

     05-27-2007, 5:01 AM

    • Joined on 04-20-2006
    • Northern VA
    • Posts 35
    • Top 10 Contributor
    Reading one of the previous posts, there seems to be issues with I/O and the USB bus.  I've experienced issues recently with searches that ran 8+ hrs and then simply hung without completing.  Using other tools, the search using the same set of keywords completed in under 2 1/2 hrs. 

    I have noticed that if I trimmed the keyword search and re-ran it, I actually got results.

    PD IR 4.91, dd split image on a USB 2.0 removable storage device.

    Would this be something with the USB bus?

    Thanks,

    Harlan
  • Re: Issues performing analysis

     05-27-2007, 8:49 AM

    Harlan,

    Unlikely, but not out of the question. In the case above there were much more dramatic symptoms related to poor performing I/O.  I think Alex has been working on your issue. I’ll check into it.

    With The popularity and sheer volume of USB devices out today, we have seen a great number of flakey performers.  A great deal of our troubleshooting, testing and development has been focused in this area.  In the labs with many cables, controllers, etc to swap out these problems are more easily overcome. Somewhat unique to our industry, identifying this type of issue is complicated by each case having vastly diverse data sets.

    Of course in the real world, users don’t always have the luxury of a large lab to work from, so we continue to try to focus on two things:

    1.       Providing better input/error checking.

    2.       Create tools to help us more quickly identify where the issue is.

    These goals are not the type of goals you can meet and move on.  The goals require constant focus and continual improvement. Frustrating at best, but we are committed to the process.

  • Re: Issues performing analysis

     05-29-2007, 1:05 PM

    • Joined on 04-20-2006
    • Northern VA
    • Posts 35
    • Top 10 Contributor
    Chris,

    Thanks for the response.  I understand issues with flaky drivers, etc., but what I don't understand is how I can run a 2 1/2 hr search using EnCase, then switch over and use FTK for PST parsing, and then run a search with ProDiscover and have it hang for 10 hrs.

    Wouldn't a flaky performer apply to everyone?

    Harlan
  • Re: Issues performing analysis

     05-29-2007, 3:35 PM

    Harlan,

    Agree, that's way I said it was "unlikely" in your case.

View as RSS news feed in XML