#----------------------------------------------------------------------------\
				safari_wincache v1.0

			http://jafat.sourceforge.net
			Copyright 2007 - Jake Cunningham

#----------------------------------------------------------------------------\

Background:
===========

The Safari v3.x web browser on Windows (by default) stores cache data and 
metadata from each web site visited to the file:

C:\Documents and Settings\<USER>\Local Settings\Application Data\Apple Computer\Safari\cache.db

This PERL program parses the cache.db file and presents its contents 
in TAB delimited or HTML format.

The cache.db file is a SQLite v3 database file. More information on SQLite
can be found here: http://www.sqlite.org

This program will NOT work with Safari v3.x on OSX. Safari v3.x on OSX still 
uses the ~/Library/Cache/Safari/xx directory structure for its cache.


Installing:
============

This PERL script requires the DBD::SQLite perl module.

This script has been tested on: 

Linux (Perl 5.8.8)
OSX (Perl)
Windows (Active State Perl 5.8.8 Build 822)


Usage:
======

To output the cache metadata to STDOUT in TAB delimited format: 
(cache index, URL of cached data, date cached to the database)

$ safari_wincache.pl -f cache.db


To extract the cache data to files and output the cache metadata 
to an index.html file:

$ safari_wincache.pl -f -s ./cache_output

With this above command line, the script will create a directory named 
"cache_output". It will then extract the cached data and write it to
the directory with the filename being the cache index number. It will also 
write a HTML file named index.html which contains a table of the metadata 
associated with each entry and a link to the extracted cached data.
The investigator can then open the index.html file in a web browser, and
view the cached data and metadata.


Changes:
========
v1.0 - Initial public release (included with SFT 1.1)


TODO:
=======
Include additional metadata about the request sent to the website,
and additional metadata returned from the website in the output.

LICENSE:
========

safari_wincache.pl (Copyright 2007 Jake Cunningham) is distributed under 
the GNU GPL v2.

This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

#----------------------------------------------------------------------------\