|
Forensics
Linux, dd, and image file Apr 01 2003 04:31PM Sabol, Paul (PSABOL mgmmirage com) (6 replies) Re: Linux, dd, and image file Apr 02 2003 09:02AM Birger Toedtmann (btoedtmann exp-math uni-essen de) Re: Linux, dd, and image file Apr 02 2003 06:19AM Grega Bremec (gregab gbsoft org) (1 replies) Re: Linux, dd, and image file Apr 02 2003 03:28PM Brian Carrier (carrier cerias purdue edu) (1 replies) |
|
|
Privacy Statement |
DRIVE, and want to mount a PARTITION. IIRC, there are 63 blocks of 512 bytes
between the beginning of the disk and the beginning of the partition, so how
about losetup /dev/loop0 testing.bin -o 63
Maybe it's not 63 (though I think it is), but anyway this is the way to go.
Later you can mount it with no problem.
Regards
Pope
On Martes, 1 de Abril de 2003 18:31, Sabol, Paul wrote:
> Basically, I md5 the original drive, make a working directory on my Linux
> drive, and then 'dd if=/dev/hdc of=testing.bin conv=notrunc,noerror,sync".
> I then make a /mnt/windows directory to be used as the mount point and
> chmod 777 this directory.
>
> # losetup /dev/loop0 testing.bin
> # mount -r -t ntfs /dev/loop0 /mnt/windows
>
> mount: wrong fs type, bad option, bad superblock on /dev/loop0,
> or too many mounted file systems
>
> I am sure there are not too many mounted file systems, and I am sure the
> original drive from which the dd came was NTFS. I have ntfs compiled in
> the kernel. I'm using Red Hat 8.0 for this.
>
> Anyone have any ideas, or is what I am attempting even possible?
--
Luis Gomez Miralles
InfoEmergencias - Technical Department
Phone (+34) 654 24 01 34
Fax (+34) 963 49 31 80
lgomez (at) infoemergencias (dot) com [email concealed]
PGP Public Key available at http://www.infoemergencias.com/lgomez.asc
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
[ reply ]