Hello,
first I apologized for my bumpy english.
This question is not SleuthKit/Autopsy releated, but I think here are
many people, who handling with forensics.
I have a problem with md5sum.
I have created an image from /dev/sdb1 with dd_rescue (dd_rescue -v
/dev/sdb1 /mnt//hda1/sdb1.dd).
After that I want to know the md5 hash value of the source and the
target file and wrote at the commandline the following:
"md5sum /dev/sdb1" and "md5sum /mnt/hda1/sdb1.dd" but the output was
not, what I expected:
Output:
1. "/dev/sdb1: Erfolg" (I use the german language pack, but in english
it could be: "/dev/sdb1: success")
2. "/mnt/hda1/sdb1.dd: Erfolg"
Before I had made an image of /dev/sdb and there was a correct output:
"980710470hjhj09820701 /dev/sdb" (the hash is not real, for this mail I
wrote random letters and numbers, because I have forgotten the real hash
value ;-) ).
If I create a file in /dev/hda1 with "touch test" and then "md5sum test"
it works fine and give me the hash value.
So my question is: Why creates md5sum at once the output:
"/mnt/hda1/sdb1.dd: Erfolg" and other time "hkhkjfizo8965kgi778 test"
Greetings from Berlin
Guido Metzner
www.guframe.de
|
