±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35734
New Yesterday: 1 Visitors: 97

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

IEF Report Viewer Hanging/Pausing Problems

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Chris55728
Senior Member
 

IEF Report Viewer Hanging/Pausing Problems

Post Posted: Jan 29, 19 13:30

We've had a problem with IEF Report Viewer (IEFRV) where you can be reviewing output and for no apparent reason IEFRV will just hang/pause and eventually come back to life, most of the time.

I had a look into this using Process Monitor and it turns out IEFRV is reading the source E01 files as it requires access to these for the HEX and TEXT views within IEFRV. It would appear that the length of time that IEFRV hangs/pauses depends on the number of E01 files present.

If you're not too worried about viewing the data in HEX or TEXT view there is a workaround that can sever the link between IEFRV and the source E01 files.

Open the IEFCase.ief6 file in an SQLite browser.

Open the Sources table.

Change the SourceType entry from 1 to 0. It can be anything other than 1 but 0 seems most appropriate.

Write the changes and save everything.

When you next open IEFRV you won't be able to view the HEX or TEXT but you won't have problems with IEFRV hanging.

Hope this helps people.  
 

Page 1 of 1