# Cannot determine partition type

**URL:** <https://sleuthkit.discourse.group/t/cannot-determine-partition-type/212>\
**Category:** The Sleuth Kit Help\
**Created:** [August 18, 2019, 1:21pm UTC](https://sleuthkit.discourse.group/t/cannot-determine-partition-type/212 "2019-08-18T13:21:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jon](https://avatars.discourse-cdn.com/v4/letter/j/3bc359/32.png) [@Jon](https://sleuthkit.discourse.group/u/Jon)\
**Post date:** [August 18, 2019, 1:21pm UTC](https://sleuthkit.discourse.group/t/cannot-determine-partition-type/212/1 "2019-08-18T13:21:05Z")

</div>

Hello!

_parted -l:_  
**Model: SanDisk Cruzer Blade (scsi)**  
**Disk /dev/sdb: 4005MB**  
**Sector size (logical/physical): 512B/512B**  
**Partition Table: msdos**  
\*\*Disk Flags: \*\*

**Number Start End Size Type File system Flags**  
\*\* 1 65,5kB 4005MB 4004MB primary fat32 boot\*\*

_mmls -V:_  
**The Sleuth Kit ver 4.6.7**

_fdisk -l:_  
**/dev/sdb1 \* 128 7821311 7821184 3,7G b W95 FAT32**

_sha1sum /dev/sdb1 \> /home/jon/Desktop/usb-copy.sha1:_  
_dd if=/dev/sdb1 of=/home/jon/Desktop/usb-copy.dd conv=noerror,sync:_  
_sha1sum /home/jon/Desktop/usb-copy.dd:_

**Comparation Hash OK!**

_mmls usb-copy.dd:_  
**Cannot determine partition type**

HELP?

_uname -a:_  
**Linux jon 3.16.0-10-amd64 #1 SMP Debian 3.16.70-1 (2019-07-22) x86\_64 GNU/Linux**

---

<div class="post-metadata">

**Author:** ![JessicaAmie](https://avatars.discourse-cdn.com/v4/letter/j/b5ac83/32.png) [@JessicaAmie](https://sleuthkit.discourse.group/u/JessicaAmie)\
**Post date:** [August 19, 2019, 2:12pm UTC](https://sleuthkit.discourse.group/t/cannot-determine-partition-type/212/2 "2019-08-19T14:12:56Z")

</div>

It looks like you have done an image of only partition1 not the whole device. Try imaging the whole device instead.

# dd if=/dev/sdb of=[output path] conv=noerror,sync

Then try running mmls on the image.

You can probably run fls directly on the image you’ve created as you only have the partition imaged.

$ fls usb-copy.dd

Best regards  
Jessica

---

<div class="post-metadata">

**Author:** ![pavan\_teja](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/pavan_teja/32/1563_2.png) [@pavan\_teja](https://sleuthkit.discourse.group/u/pavan_teja)\
**Post date:** [February 3, 2022, 8:43am UTC](https://sleuthkit.discourse.group/t/cannot-determine-partition-type/212/3 "2022-02-03T08:43:34Z")

</div>

Hey! Jessica, I am getting the error “Cannot determine the File System Type” when I tried to look out the File System details for a forensic image.

 ![dtf](https://global.discourse-cdn.com/free1/uploads/sleuthkit/original/2X/e/edb23d3506c0569b4cd3fbf5fe361801eef476c0.png)

Can you please help me out ?

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [February 3, 2022, 1:53pm UTC](https://sleuthkit.discourse.group/t/cannot-determine-partition-type/212/4 "2022-02-03T13:53:52Z")

</div>

If this is a full disk image then you will need to tell fsstat where the partition starts in order to get the stats on it. I would suggest using mmls to get the partition list first. Once you have the offset of the partition then use the -o option in fsstat.