[sleuthkit-users] Why is block size important

[<Fra...@ps...>]

This is a two part question...

Why is block size important when imaging a drive or partition?  (ie.  dd 
if=/dev/hda of=./hda.dd bs=2k, provides a file in blocks of 2048-bytes)

Also, how do you know which block size to use for the image?

Frank Kenisky IV, CISSP, CISA, CISM 
Information Technical Security Specialist 
(210) 301-6433 or (210) 887-6985