Comments on: Forensic extraction of files from a browser memory cache

By: Clear2Go

Clear2Go — Sun, 29 May 2011 19:36:21 +0000

Hi Conrad,

Thanks for the sed command to do the translation!
-mike.

By: Conrad

Conrad — Sun, 29 May 2011 06:01:45 +0000

The above comment stripped out the pre tags. If the moderator could see them in the first sed commad andput them back in, then the comment about would be useful…

By: Conrad

Conrad — Sun, 29 May 2011 05:59:58 +0000

This is a slightly more compact and simpler command, which already takes care of the editing and the first column.

sed -n -e ‘//,//p’ untouched.part | awk ‘{print $2″ “$3″ “$4″ “$5″ “$6″ “$7″ “$8″ “$9″ “$10″ “$11″ “$12″ “$13″ “$14″ “$15″ “$16″ “$17}’ | xxd -p -r > untouched.mp3