On Tue, Apr 23, 2013 at 1:39 PM, ellanios82 <ellanios82@gmail.com> wrote:
probably best do from terminal :
~ maybe use "dd' :
something like :
dd if=/dev/[source-drive] of=/dev/[target-drive]
Add "bs=4K conv=noerror, sync" 4K can be as big as you want, but the default 512 bytes is smaller than the linux kernel pagesize and at least in some scenarios it makes the copy run dog slow. Also the default behavior of dd to a media error is to abort. You don't want that, so noerror says to continue even if you hit a media error. Sync is a modifier to noerror that says if a read error is encountered, pad the output with nulls to keep everything in sync. That is with just noerror an error in block 3 would get you: 1 2 4 5 For a filesystem with millions of blocks, have all the ones after the readerror offset by one makes it useless. With sync you get: 1 2 0 4 5 Obviously the block with an error is garbage but now the rest of the drive is properly aligned. fyi: If you want to save the output to a file instead of as a clone, then I suggest you use ewfacquire. It is specially designed to do that one job. It puts internal CRCs within the "image" and it can calculate various hashes to let you use ewfverify to check the overall consistency of the image. You use ewfexport to pull the data back out. ie. ewfexport image_file.E01 > /dev/sdb ewfacquire, ewfverify, and ewfexport all in the ewftools package which is part of OS 12.2 and 12.3 fyi2: guymager is a gui that can manage this process. I have it partially built in my OBS home project, but I've been happily ignoring it for about a year, so if someone with programming skills wants to branch it, fix it and SR it back to me, I'd be happy to at least push it into a devel project. I might even push it into factory. (I have the skills, I just haven't taken the time. Greg -- Greg Freemyer Chief Technology Officer Intelligent Avatar Corporation (678) 653-4860 Greg.Freemyer@gmail.com http://www.linkedin.com/in/gregfreemyer CNN/TruTV Aired Forensic Imaging Demo - http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retriev... -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org