On 19/05/12 11:43, Stuart Bird wrote:
If you are not fussy about the container format you could use the "libewf" (http://sourceforge.net/projects/libewf/) set of tools to do what you want.

"ewf" refers to the Expert Witness Compression format which is used extensively in the digital forensic field. It's basically a compressed container with additional metadata built into the format. There are about 9 compression levels to choose from!

"sudo apt-get install ewf-tools libewf-dev" should get you a working set of tools. The two you will need to look at are "ewfacquire" and "ewfmount". There are man pages for all of the tools.


Thanks, this looks like a good way to do what I want.

I also found cloop-utils which allows for a compressed image to be loop mounted, together with tools to convert images (well strictly speaking the image from dd is "the same" as a raw hard disk as far as the operating system is concerned so converting an image is the same as creating a new image from hard disk).

EWF looks for flexible, although I don't think I'll need the flexibility. It looks more interesting though!

--
Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450
Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER


_______________________________________________
Peterboro mailing list
Peterboro@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/peterboro

Reply via email to