Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move outputOnSSD from LocalConfig.txt to a command line parameter? #2103

Open
lfcnassif opened this issue Feb 29, 2024 · 4 comments
Open

Move outputOnSSD from LocalConfig.txt to a command line parameter? #2103

lfcnassif opened this issue Feb 29, 2024 · 4 comments
Labels

Comments

@lfcnassif
Copy link
Member

This is another old thought. I think that parameter is more related to the specific case and not to the user machine, since he/she may choose to create the case on different disks, depending on evidences size, current free space on local disks, if the case will be analyzed by him/her or by another examiner...

A no parameter --outputOnSSD switch was my first and preferred option. But a more verbose -outputOnSSD option accepting a boolean value would allow for backwards compatibility, reading the value from the old location if the new option is not specified in the command line.

Thoughts?

@wladimirleite
Copy link
Member

It makes sense to move this parameter to command line, but I would prefer the last option (if the parameter is not defined, use the setting from LocalConfig.txt).

@paulobreim
Copy link

I think staying in localconfig.txt is better because the trend is for SSD to become standard on computers, so it wouldn't make much sense to put this on the command line, as it would be the default.

In fact, I wanted to know one thing: In terms of software, what does the IPED do differently when it is an SSD?

@wladimirleite
Copy link
Member

I think staying in localconfig.txt is better because the trend is for SSD to become standard on computers, so it wouldn't make much sense to put this on the command line, as it would be the default.

Although using a SSD disk as output is becoming more common, there are still many cases when it is not the case. Having the option in LocalConfig.txt (to be used as default) and the option to use a command parameter to override it when desired seems a more flexible approach.

In fact, I wanted to know one thing: In terms of software, what does the IPED do differently when it is an SSD?

outputOnSSD: There are a few details, but it basically creates the index directly on the output folder (instead of creating it on the temporary folder and moving in the end), when enabled (i.e. output is on a SSD).

tempOnSSD: It basically enables the creation of temporary files for items, so each task won't need to read (and perhaps decompress) them again from a potentially slower disk.

@lfcnassif
Copy link
Member Author

tempOnSSD: It basically enables the creation of temporary files for items, so each task won't need to read (and perhaps decompress) them again from a potentially slower disk.

It also increases the number of index merge threads, making indexing faster.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants