"Carlos E. R." <robin.listas@telefonica.net> wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Tuesday, 2013-04-23 at 16:07 -0400, Greg Freemyer wrote:
That is with just noerror an error in block 3 would get you:
1 2 4 5
For a filesystem with millions of blocks, have all the ones after the readerror offset by one makes it useless. With sync you get:
1 2 0 4 5
Obviously the block with an error is garbage but now the rest of the drive is properly aligned.
I like that explanation.
In those cases, though, I prefer to use "dd_rescue", or rather, the script "dd_rhelp".
fyi: If you want to save the output to a file instead of as a clone, then I suggest you use ewfacquire. It is specially designed to do that one job. It puts internal CRCs within the "image" and it can calculate various hashes to let you use ewfverify to check the overall consistency of the image. You use ewfexport to pull the data back out.
Interesting.
I'll have a look at that. For 12.1 and 11.4 it is in the security repo.
If you have questions about any of the ewftools, feel free to ask me. I packaged them. The upstream dev (Joachim Metz) works for Google and has a number of security libraries/tools that I am in the middle of packaging for OS 13.1. The most intriguing is libvshadow that parses the volume shadow copies inside a ntfs filesystem image. They all work with images made via ewf acquire or with raw (pure dd) images. Greg -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org