Hi Andy, my comment had no value. What I ment was that SMART is a great solution for the problem I have, but I want to do it everywhere and at anytime without...
711
Randall Shane
rshane@...
Aug 2, 2004 9:18 am
Dietmar, You can tee your output from dd quite easily. The command line looks like this: dd if=/dev/hdX | tee /mnt/location1 | dd of=/dev/tapedevice A second...
712
Dietmar Mauersberger
mausburger
Aug 2, 2004 9:42 am
Hi Randall, I know. Thats not the problem. What if the capacity of the tape device is lower than the drive to be imaged? Thats the problem I have. The dd to...
713
Randall Shane
rshane@...
Aug 2, 2004 10:43 am
Dietmar, Let me see if I have this correct, you want to image from a single drive to another drive and also to a tape with less capacity that the drive (?)....
714
metax@...
Aug 2, 2004 10:54 am
hallo dietmar, have you tried to pipe the output of dd into gzip? for example: # dd if=/dev/hda1 bs=512 | gzip -9 > /safe/place/hda1.dd.gz that results in a...
715
Dietmar Mauersberger
mausburger
Aug 2, 2004 1:09 pm
Hi Klemens, hi Randall! Compession is unfortunately not enough and to buy a larger tape is not the most desireable solution. The costs for tapes with 400 GB or...
716
Enda Cronnolly
endacronnolly
Aug 2, 2004 2:27 pm
Is your tape drive a plain old single tape drive or an autochanger? ... From: "Dietmar Mauersberger" <news@...> To: <linux_forensics@yahoogroups.com>...
717
Dietmar Mauersberger
mausburger
Aug 2, 2004 2:40 pm
they are all old single tapes. DDS-4, DLT, SLR....
718
Joe Corrigan
WestsideCleve
Aug 2, 2004 3:22 pm
Dietmar, do you need the entire drive (i.e. unallocated space) to be backed up? if not you can save some space by only backing up the files you want by using ...
719
Rodrigo Barbosa
morcego.geo
Aug 2, 2004 3:32 pm
... Hash: SHA1 Why not try DUMP ? With the correct paramters, it can automaticaly split the data between several tapes. []s ... - -- Rodrigo Barbosa...
720
Enda Cronnolly
endacronnolly
Aug 2, 2004 5:25 pm
... Yeah, but without an autochanger he's going to have difficulties achieving his goal of doing it simultaneously to disk and tape. -Enda....
721
Raymond_Smith@...
raysmith46
Aug 2, 2004 10:39 pm
Sony Pictures Entertainment is sponsoring two training labs in conjunction with ASR Data for the SMART Linux-based forensics software. The lab time, ...
722
Gary Funck
garyfunck
Aug 2, 2004 11:58 pm
... Perhaps cpio can be used here to handle the archiving. It accepts a list of files on standard input and archives the files to the output medium. Cpio will...
723
Dietmar Mauersberger
mausburger
Aug 3, 2004 9:52 am
Hi *, thank you for all your sugestions. A colleague worked on something like the following script. Thanks to Thomas!!! #!/usr/bin/perl -w use strict; my...
724
Gary Funck
garyfunck
Aug 3, 2004 5:25 pm
... Not bad. However, it looks more like a "program" than a "script" to me. <g> Also, I doubt that a Perl script banging out blocks to the tape and (large ...
726
Dietmar Mauersberger
mausburger
Aug 4, 2004 8:27 am
Hi Gary, ... There is a message to ask for the tape change and to press a key if done. It was in german, so I deleted it and it looks incomplete now. ... ...
727
Altheide, Cory B. (IA...
digitalquincy
Aug 4, 2004 5:32 pm
... I haven't had to do this for a while, but the procedure is something like so: 1) Create loop devices associated with your raw *volume* (not disk) chunks. ...
728
Matt Kucenski
kucenskm
Aug 4, 2004 8:09 pm
Anyone else run into this problem and have a solution for me? I ran strings against a sleuthkit rip of unallocated data on an ntfs drive. I am trying to use...
729
IanC
devorg
Aug 4, 2004 8:29 pm
... I really do wish I was as experienced enough with nix to have experienced & know what your talking about,, but I'm not,, bud did see this: ...
730
Barry J. Grundy
grundy_b
Aug 4, 2004 8:31 pm
... I have not had the problem for a long while now, but the former solution was to use 'tr' and change control chars to newlines in the input stream and send...
731
Andrew Rosen
asrdata
Aug 4, 2004 9:00 pm
You are correct and that is (as usual) a great answer. I have found that the chunks must be integral exponents of 1024 byte blocks AND that it helps if loop.o...
732
Chris Poldervaart
chrispolderv...
Aug 4, 2004 10:24 pm
I am having troubles with a particular suspect hard drive and Linux. I am getting the following information on boot: hdg: ST320413A, ATA DISK drive .... hdg:...
735
Dietmar Mauersberger
mausburger
Aug 5, 2004 6:35 am
Hi Cory, thank you very much for that great piece of help!!! Of course I would be more than interested in your HOWTO :-)) It would solve the fat32 problems we...
736
Andrew Rosen
asrdata
Aug 5, 2004 12:28 pm
Hi Chris - You might try hdparm -iI /dev/hdg it may tell you something more. Alternatively, you could start "stepping down" various drive related ...
737
Joe Corrigan
WestsideCleve
Aug 5, 2004 2:15 pm
from what I gather from kernel developers, those errors are the hard drive not being able to speak the same language (DMA-mode) as the kernel is expecting......
738
Chris Poldervaart
chrispolderv...
Aug 5, 2004 3:27 pm
Okay...interesting. I changed distros (because I am a glutten for punishment) to Fedora Core 2 to see what happened. I got the same CRC errors upon boot...but...
739
dorianwarrior
Aug 5, 2004 8:06 pm
Hello all, I'm new to the list and also new to forensics. Here's my question... How can you recover data from RAID 5 or RAID 0 arrays? For example: 2 hard...
740
Steve Fowler
sfowler@...
Aug 5, 2004 8:30 pm
Dorian, The company I am with has extensive experience and has successfully recovered data from numerous RAID-5 storage subsystems, and some prove extremely...
741
dorianwarrior
Aug 5, 2004 9:31 pm
I was able to recover the system by buying the exact same model hard drives and imaging them from the drive images I created earlier. The problem made me...
742
dorianwarrior
Aug 5, 2004 9:34 pm
I was able to recover the system by buying the exact same model hard drives and imaging them from the drive images I created earlier. The problem made me...
