Guys - I've no objection to anything that's been said on this thread - good ideas all. But this is the one area (preservation of image files to R-CD and reconstructing the at a later date) where Linux fails a bit...How about the old pre-linux solution: embellished at the request of Scott! <<GG>> In the pre-linux days, I would have booted from a floppy with a neutered version of DOS or Win 9X (command.com and io.sys altered with a hex editor to re-direct calls away from the hard disk and prevent the mounting of a compressed volume), a copy of a write blocking utility like Gord Hama's HDL, and a copy of SafeBack from then the Sydex company and created 600 meg chunk image files to some alternative media. (Safeback would see SCSI tape and external drives like a Jaz, my preference was another hard disk mounted in the system as a slave.) Those image files would fit nicely on an R-CD, and Safeback could then be used to re-construct the image on a same size or larger disk than the original. Safeback is easy to use, not a bank buster, and gives you a restored image that you can then mount an then tear apart in any manner you choose! $0.02 aus Dave Ausdenmoore 513.946.6688 (office) 1000 Sycamore St. Rm 110 513.470.0986 (cellular) Cincinnati, Oh 45202 513.269.1336 (pager) daussieat_private (personal) aussieat_private (business) "Keep your focus on Providence, and Fear nothing" - Kyriacos C. Markides, on the Attack on America, 10/1/2001 ----- Original Message ----- From: "adam" <adamdat_private> To: "Neil Long" <neil.long@computing-services.oxford.ac.uk> Cc: <forensicsat_private> Sent: Tuesday, October 16, 2001 6:16 PM Subject: Re: Re-constructing disks > > If your writing out to a harddisk then you can perform the whole > operation using dd. > say your image size is 629,153,280 bytes in size, > > dd if=/cdrom/image.001 of=/dev/sda bs=512 > umount /cdrom > *load new cd* > mount /cdrom > dd if=/cdrom/image.002 of=/dev/sda bs=512 seek=1228815 > umount /cdrom > *load cd* > mount /cdrom > dd if=/cdrom/image.003 of=/dev/sda bs=512 seek=2457630 > > and so on, you could do the whole thing in a shell script that ejects the > cdrom and then pauses and beeps so you can load the new one and press any > key to continue if you'd like. It is alot easier if you have all the > images on a partition. A CD tower or dukebox could be a good option. > > Hope it helps > Adam > > Technical Consultant > ----------------------------------------------------------------------- > FORENSIC DATA SERVICES PTY LIMITED > http://www.forensicdata.com.au > ------------------------------------------------------------------------ > The information contained in this e-mail is confidential and is > intended solely for the addressee. If you received this e-mail by > mistake please notify us immediately and delete all copies of this > message. You must not disclose or use in any way the information in the > e-mail. It is the responsibility of the recipient to virus scan this > e-mail and any attachments included. > > On Tue, 16 Oct 2001, Neil Long wrote: > > > Hello > > > > Disks keep getting bigger :-( > > > > It is straight forward to split up a large disk in to CD-R size chunks but > > am I missing something painfully obvious for a reconstruction of a disk from > > said CD-Rs? I assume you need a large holding disk in order to > > > > cat img.1 img.2 img.3 etc etc > /dev/disk-whatever (or using | dd > > of=/dev/disk and options to maintain blocksizes, etc) > > > > [gzip, zcat, etc could be used to reduce the image sizes but becomes > > somewhat hard to predict with regard to compressibility without a dry-run] > > > > Is there any easy way to append from individual CDs to a device file? > > > > Feel free to point out the painfully obvious and any hints as to what to do > > as disks get way too big ;-) > > > > Cheers > > Neil > > > > > > ----------------------------------------------------------------- > > This list is provided by the SecurityFocus ARIS analyzer service. > > For more information on this free incident handling, management > > and tracking system please see: http://aris.securityfocus.com > > > > > ----------------------------------------------------------------- > This list is provided by the SecurityFocus ARIS analyzer service. > For more information on this free incident handling, management > and tracking system please see: http://aris.securityfocus.com > > Dave Ausdenmoore 513.946.6688 (office) 1000 Sycamore St. Rm 110 513.470.0986 (cellular) Cincinnati, Oh 45202 513.269.1336 (pager) daussieat_private (personal) aussieat_private (business) "Keep your focus on Providence, and Fear nothing" - Kyriacos C. Markides, on the Attack on America, 10/1/2001 ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Oct 17 2001 - 11:33:09 PDT