Re: [sleuthkit-users] Re: sleuthkit-users digest, Vol 1 #293 - 5 msgs
Brought to you by:
carrier
|
From: DELHOMME O. DGPN-DCPJ-P. <Oli...@in...> - 2005-04-27 11:32:48
|
(...)
>=20
> dd if=3D/dev/fd0 of=3D/path/to/wherever/you/want/the/floppy/image
--=20
Olivier DELHOMME
DCPJ / SDPTS / SITT / LATS
Tel +33 (0) 4.72.86.84.60
Fax +33 (0) 4.72.86.85.24
bs=3D1
> conv=3Dnoerror
> mount -o loop /path/to/wherever/you/want/the/floppy/image /mnt/floppy
Please note that in case of an error you will miss 1 byte and the rest of
the data will be shifted. To avoid this you could use the option 'sync' to
the conv option parameter :
dd if=3D/dev/fd0 of=3D/path/to/wherever/you/want/the/floppy/image ibs=3D1 obs=3D1
conv=3Dsync,noerror
Should work better. When an error is found, the byte that was not read is
replaced by a 0x00. This ensures the filesystem integrity (files are locate=
d
were expected).
Note that imaging a floppy disk with this method can take several days if
the number of errors is very important.
--=20
Olivier DELHOMME
DCPJ / SDPTS / SITT / LATS
Tel +33 (0) 4.72.86.84.60
Fax +33 (0) 4.72.86.85.24
"Quand la v=E9rit=E9 n'est pas libre, la libert=E9 n'est pas vraie."
[ Jacques Pr=E9vert ]
|