Re: [sleuthkit-users] Road Machine, Imaging, and Processor Speed?
Brought to you by:
carrier
From: <for...@kr...> - 2003-06-14 20:20:20
|
On l=F8rdag, jun 14, 2003, at 16:50 Europe/Copenhagen, Rich Thompson=20 wrote: > Hey, Hi there > > I need to put together a portable imaging kit. > Obviously I will use a laptop (w/ Linux), but question > is on CPU speed. I realize CPU speed is very > important for my analysis station (searching etc...), > but how important is a faster processor to making a dd > image for take back to the lab? why laptop? - see below > > Budget is limited, but I don't want to shoot myself in > the foot either. I use a 3.06ghz P4 w/ 1gb ram as my > analysis machine and it hauls butt on everything > (although, I do want to build a dual cpu machine - I > hear they really crank on searching!) What is > everyone else using for their road machines? > > Does anyone have any preferences or experience with > low, mid, and max speed laptops? Or, for that matter, > any opinions on using an Apple laptop to make dd > images to take back? I personally decided to buy a small EPIA machine for use in forensics - which can use ordinary 3.5" harddisk! They cost about one third of a laptop and I assume that the 3.5" disks are faster than most laptop drives anyway. The machine is based on a small Epia M 10000 Nehemiah 1GHz processor, 512MB memory and 80GB disk and a Morex Cubid 2688r=A0 63.5mm(H) x 273mm(D) x 295mm(B) This machine can also handle being transported better than laptops - can stand more abuse, compared to a laptop IMHO. The plans are for bringing it to the customer, and do initial analysis on it. I am sorry for not having any hard facts, but maybe I should run the honeynet challenge through the machine. Best regards -- Henrik Lund Kramsh=F8j, cand.scient, CISSP e-mail: hl...@se..., tlf: 2026 6000 www.security6.net - IPv6, sikkerhed, netv=E6rk og UNIX |