I have a question on location information data obtained from an iPhone 4 that at first glance appears to show the phone in multiple locations at the same time!!!
Is there an explanation to account for the date and time being the same for different locations? There are over 14,000 files with multiple entries with the same date & time and they are the same format for Wi-fi as with cell site information.
Regards,
NSB
Looking at the file it looks as though the file gets updated in a big batch when the handset gets access to the internet. It keeps a big cache of locations in a separate file and then once it can render a MAC / Cell Tower to a lat/long it writes them to the consolidated.db
See this thread for a previous discussion on this
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=6758&postdays=0&postorder=asc&start=0
And Apple's official statement on the consolidated.db file
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=7571