[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#796393: Help with forensics-colorize



Hey.

Sorry for the delay...


On Sat, 2015-08-22 at 13:06 -0300, Eriberto Mota wrote:
> So, as I think that you know forensics-colorize better than I
Well that's extreme exaggeration... I merely stumbled once over it when
I went on Jesse's homepage after the md5deep->hashdeep migration...


> Description: show differences between files using color graphics
>  forensics-colorize is a set of tools to visually compare large 
> files, as
>  filesystem images, creating graphics of them. It is intuitive 
> because the
>  produced graphics provide a quick and perfect sense about the 
> percentage
>  of changes between two files.
>  .
>  Comparing large textual files using a simple diff can produce a very 
> big
>  result in lines, causing confusion. On the other hand, diff is 
> improper
>  to compare binary files.
>  .
>  This package provides two command line programs: filecompare and 
> colorize.
>  The filecompare command is used to create a special and auxiliary 
> input
>  file for colorize. The colorize command will generate an intuitive 
> graphic
>  that will make easier to perceive the level of changes between the 
> files.

As far as I can tell, this pretty well describes what the thing does
:-)


> Feel free to test the package if you have time. I attached an amd64
> package and the source code, if needed, is at
> http://mentors.debian.net/package/forensics-colorize.

I can't promise that I'll find time to have deeper a look at this after
until my vacation (which is the reason for my long delay in
answering)... I'm about to head into one month of scuba diving
vacation...and super busy with last preparations :-)

At a first glance though, everything looks ok, the only thing I'd
change:
I wouldn't suggest sxiv as image viewer (or does the program actually
invoke it (or any image viewer)[0]?
IMHO an image viewer is something such basic, that it doesn't justify a
suggest/recommends (unless the program would really invoke it from
code, e.g. as gnupg can make use of xloadimage).
Everyone uses it's own preferred viewer anyway...

For full perfectionism:
You refer to the blog in README.Debian:
Best would of course be, if one would ask Jesse whether that text is
free as well, and one would push is as documentation proper to upstream
;-)



Thanks for your great work so far :-)
Chris.

Attachment: smime.p7s
Description: S/MIME cryptographic signature


Reply to: