Notifications
Clear all

mozilla history

13 Posts
7 Users
0 Likes
904 Views
(@forenz)
Posts: 47
Eminent Member
Topic starter
 

I'm using FTK and looking in the directory

mozilla firefox\profiles\yt3aeg8u.default\

of an image and can see two "chache" folders. When i highlight these i can go through the cached images for firefox, like the equivalent of IE TIF images i guess. However this is all i can see, and if i expand the cache folders, there are files beneath which seem to have randomly generated names, but when i highlight these i see nothing.

I want to see all sites that have been visited via firefox, not just cached images; how do i view mozilla browsing history?

Help really appreciated, sorry about the basic question, thankyou.

 
Posted : 03/10/2007 6:42 pm
(@juddlawr)
Posts: 8
Active Member
 

I like Cache View for viewing Mozilla caches.

Export the folder and point Cache View at it.

Available here - TuCows - Cache View

 
Posted : 03/10/2007 8:26 pm
(@bithead)
Posts: 1206
Noble Member
 

I want to see all sites that have been visited via firefox, not just cached images; how do i view mozilla browsing history?

The history information for Firefox is stored in the HISTORY.DAT file. FTK parses out the data and presents it in an HTML view. HISTORY.DAT includes Visit Count, First Visit Date and Last Visit Date. If you see a notation TYPED in HISTORY.DAT, that means the user typed the address in the browser. HISTORY.DAT is found in the user's Profile folder.

 
Posted : 03/10/2007 8:36 pm
(@forenz)
Posts: 47
Eminent Member
Topic starter
 

The history information for Firefox is stored in the HISTORY.DAT file. FTK parses out the data and presents it in an HTML view.

Cheers bithead, but how do i view this information in FTK? i was expecting a file i could click and i would have every website visited from the cache files, isn't this the case?

 
Posted : 03/10/2007 8:58 pm
(@bithead)
Posts: 1206
Noble Member
 

Cheers bithead, but how do i view this information in FTK?

You browse to the file in the Overview or Explore tab and click on it and view it with the Native File Viewer.

i was expecting a file i could click and i would have every website visited from the cache files, isn't this the case?

That is what you see in HISTORY.DAT. The History is partially based on the Cache. History is stored for nine days by default. Cache is based on the amount of space you have allocated. The Cache contains the files (HTML, image files, scripts, etc.) stored by viewing websites. Depending on the amount of space allocated there may be items in the history that are not in the Cache. The Cache also does not show you Visit Count, First Visit Date and Last Visit Date. That is what is in the History.

 
Posted : 03/10/2007 9:31 pm
(@csericks)
Posts: 99
Trusted Member
 

If the subject has Mozilla configured to clear history and data upon exit, is there any residual data left that can be captured/reviewed?

Thanks, in advance, for your help.

Sean

 
Posted : 03/10/2007 11:20 pm
(@bithead)
Posts: 1206
Noble Member
 

If the subject has Mozilla configured to clear history and data upon exit, is there any residual data left that can be captured/reviewed?

Just like all other data it is there until it is overwritten. It is not as pretty or as easy as loading the History file, but that does not mean it does not exist.

 
Posted : 04/10/2007 12:38 am
dfarmer03
(@dfarmer03)
Posts: 38
Eminent Member
 

Netscape and Firefox both store web history in a history.dat file, which is in ASCII format and plainly visible when opened (including with ftk). The location for the history.dat file in Firefox is C\Documents and Settings\User Profile\Application Data\Mozilla\Firefox\Profiles\x.default\ and Netscape is C\Documents and Settings\derrick.farmer\ Application Data\Netscape\NSB\Profiles\x.default\.

Hope that helps.

Derrick

 
Posted : 04/10/2007 1:01 am
(@forenz)
Posts: 47
Eminent Member
Topic starter
 

You browse to the file in the Overview or Explore tab and click on it and view it with the Native File Viewer.

I click the cache file so it is highlighted then click "view files in native format" but still all i see is a small amount of hex and then cached graphics and html in the window below.
I can't actually see a history.dat file to click on and do this with.
I know i should be able to see the history in a way clearly presented by FTK…

 
Posted : 04/10/2007 2:28 pm
(@strobak)
Posts: 35
Eminent Member
 

I click the cache file so it is highlighted then click "view files in native format" but still all i see is a small amount of hex and then cached graphics and html in the window below.
I can't actually see a history.dat file to click on and do this with.
I know i should be able to see the history in a way clearly presented by FTK…

I have the same problem/thoughts, what are we missing?

 
Posted : 04/10/2007 4:30 pm
Page 1 / 2
Share: