Presumably the imaging process is not completing, or at least not doing so
cleanly. If you are using dd try adding the conv=noerror option. Check man
dd for details.
HTH,
-Enda.
----- Original Message -----
From: <sec...@hu...>
To: <sle...@li...>
Sent: Wednesday, August 11, 2004 3:57 AM
Subject: [sleuthkit-users] Imaging a formatted CDRW for direct drives
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Here's a problem...
>
> I have some CDRW's that were used/formatted for direct drives on Windows.
> The software to read/write was either Adaptec Direct CD Wizard 3.01X
> or Roxio. You probably get the picture.
>
> I need to image them to find what data was on them before.
>
> I am resigned to the fact that due to possible corruption (a fact I have
> not proven yet) that I might end up looking at the image in a hexeditor.
>
> Here's the problem...
>
> Two discs have now been subsequently formatted as a ISO-9660 CDR data
> disk (the discs are all Imation CD-RW discs). One of them only has a
> 14 MB image now except I know there was more data there on previous
formattings.
>
> Attempting to image the disk with dd on linux fails to grab anything
> other than the current 14 MB ISO-9660 image.
>
> [1.] Is there a way with dd to image any other data on the disk(s)?
>
> Secondly, some of the discs now appear unformatted although they had
> previously been used as CDRW/CDR discs.
>
> [2.] Is there a way to image these discs to extract any data that once
> resided on them?
>
> Please tell me my only option is *NOT* an electron microscope.
>
> Thanks list.
> -----BEGIN PGP SIGNATURE-----
> Note: This signature can be verified at https://www.hushtools.com/verify
> Version: Hush 2.4
>
> wkYEARECAAYFAkEZitYACgkQRBFe1uc9INre3QCgtpuB0/j00izcTCjwCCsii4H4hZsA
> oLnxCd8UIF+KWwgFQQZm10Jhvm07
> =7wVO
> -----END PGP SIGNATURE-----
>
>
>
>
> Concerned about your privacy? Follow this link to get
> secure FREE email: http://www.hushmail.com/?l=2
>
> Free, ultra-private instant messaging with Hush Messenger
> http://www.hushmail.com/services-messenger?l=434
>
> Promote security and make money with the Hushmail Affiliate Program:
> http://www.hushmail.com/about-affiliate?l=427
>
>
> -------------------------------------------------------
> SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
> 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
> Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
> http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
>
|
