Hi Andy, my comment had no value. What I ment was that SMART is a great solution for the problem I have, but I want to do it everywhere and at anytime without...
Dietmar, You can tee your output from dd quite easily. The command line looks like this: dd if=/dev/hdX | tee /mnt/location1 | dd of=/dev/tapedevice A second...
Randall Shane
rshane@...
Aug 2, 2004 9:18 am
712
Hi Randall, I know. Thats not the problem. What if the capacity of the tape device is lower than the drive to be imaged? Thats the problem I have. The dd to...
Dietmar, Let me see if I have this correct, you want to image from a single drive to another drive and also to a tape with less capacity that the drive (?)....
Randall Shane
rshane@...
Aug 2, 2004 10:43 am
714
hallo dietmar, have you tried to pipe the output of dd into gzip? for example: # dd if=/dev/hda1 bs=512 | gzip -9 > /safe/place/hda1.dd.gz that results in a...
metax@...
Aug 2, 2004 10:54 am
715
Hi Klemens, hi Randall! Compession is unfortunately not enough and to buy a larger tape is not the most desireable solution. The costs for tapes with 400 GB or...
Is your tape drive a plain old single tape drive or an autochanger? ... From: "Dietmar Mauersberger" <news@...> To: <linux_forensics@yahoogroups.com>...
Dietmar, do you need the entire drive (i.e. unallocated space) to be backed up? if not you can save some space by only backing up the files you want by using ...
... Hash: SHA1 Why not try DUMP ? With the correct paramters, it can automaticaly split the data between several tapes. []s ... - -- Rodrigo Barbosa...
Sony Pictures Entertainment is sponsoring two training labs in conjunction with ASR Data for the SMART Linux-based forensics software. The lab time, ...
... Perhaps cpio can be used here to handle the archiving. It accepts a list of files on standard input and archives the files to the output medium. Cpio will...
Hi *, thank you for all your sugestions. A colleague worked on something like the following script. Thanks to Thomas!!! #!/usr/bin/perl -w use strict; my...
... Not bad. However, it looks more like a "program" than a "script" to me. <g> Also, I doubt that a Perl script banging out blocks to the tape and (large ...
Hi Gary, ... There is a message to ask for the tape change and to press a key if done. It was in german, so I deleted it and it looks incomplete now. ... ...
... I haven't had to do this for a while, but the procedure is something like so: 1) Create loop devices associated with your raw *volume* (not disk) chunks. ...
Anyone else run into this problem and have a solution for me? I ran strings against a sleuthkit rip of unallocated data on an ntfs drive. I am trying to use...
... I have not had the problem for a long while now, but the former solution was to use 'tr' and change control chars to newlines in the input stream and send...
You are correct and that is (as usual) a great answer. I have found that the chunks must be integral exponents of 1024 byte blocks AND that it helps if loop.o...
I am having troubles with a particular suspect hard drive and Linux. I am getting the following information on boot: hdg: ST320413A, ATA DISK drive .... hdg:...
Hi Cory, thank you very much for that great piece of help!!! Of course I would be more than interested in your HOWTO :-)) It would solve the fat32 problems we...
from what I gather from kernel developers, those errors are the hard drive not being able to speak the same language (DMA-mode) as the kernel is expecting......
Okay...interesting. I changed distros (because I am a glutten for punishment) to Fedora Core 2 to see what happened. I got the same CRC errors upon boot...but...
Hello all, I'm new to the list and also new to forensics. Here's my question... How can you recover data from RAID 5 or RAID 0 arrays? For example: 2 hard...
Dorian, The company I am with has extensive experience and has successfully recovered data from numerous RAID-5 storage subsystems, and some prove extremely...
Steve Fowler
sfowler@...
Aug 5, 2004 8:30 pm
741
I was able to recover the system by buying the exact same model hard drives and imaging them from the drive images I created earlier. The problem made me...
I was able to recover the system by buying the exact same model hard drives and imaging them from the drive images I created earlier. The problem made me...
Having problems with message search?
Fill out this form to ensure your group is one of the first to be migrated to the new message search system.
