Re: [sleuthkit-users] Re: sleuthkit-users digest, Vol 1 #293 - 5 msgs

[DELHOMME O. DGPN-DCPJ-P. <Oli...@in...>]

(...)
>=20
> dd if=3D/dev/fd0 of=3D/path/to/wherever/you/want/the/floppy/image

--=20
Olivier DELHOMME
DCPJ / SDPTS / SITT / LATS

Tel +33 (0) 4.72.86.84.60
Fax +33 (0) 4.72.86.85.24
 bs=3D1
> conv=3Dnoerror
> mount -o loop /path/to/wherever/you/want/the/floppy/image /mnt/floppy

Please note that in case of an error you will miss 1 byte and the rest of
the data will be shifted. To avoid this you could use the option 'sync' to
the conv option parameter :

dd if=3D/dev/fd0 of=3D/path/to/wherever/you/want/the/floppy/image ibs=3D1 obs=3D1
conv=3Dsync,noerror

Should work better. When an error is found, the byte that was not read is
replaced by a 0x00. This ensures the filesystem integrity (files are locate=
d
were expected).

Note that imaging a floppy disk with this method can take several days if
the number of errors is very important.


--=20
Olivier DELHOMME
DCPJ / SDPTS / SITT / LATS

Tel +33 (0) 4.72.86.84.60
Fax +33 (0) 4.72.86.85.24

"Quand la v=E9rit=E9 n'est pas libre, la libert=E9 n'est pas vraie."

                                 [ Jacques Pr=E9vert ]