unable to mount fs for forensics

From: Susan Chan Lee (susan.leeat_private)
Date: Thu Dec 26 2002 - 21:59:09 PST

  • Next message: Robinson, Sonja: "RE: Incident Response Guidelines"

    Hi All
    
    Having some problems mounting a filesystem which I imaged using dd for
    forensic testing. The below is what I am doing with little success:
    
    1. dd the partition in question by - dd if=/dev/hda1
    of=/forensics/images/hda1.dd
    2. create a mount point - mkdir /mnt/boot
    3. mounting the dd'ed fs with no success (tried a few variations):
    
    # mount -o ro,loop,nodev,noexec forensics/images/hda1.dd mnt/boot
    mount: wrong fs type, bad option, bad superblock on /dev/loop0,
           or too many mounted file systems
    
    # mount -o ro,loop=/dev/loop1 forensics/images/hda1.dd /mnt/boot
    mount: wrong fs type, bad option, bad superblock on /dev/loop1,
           or too many mounted file systems
    
    As you can see I keep getting this wrong fs type error on both loop0 and
    loop1. 
    
    Any help appreciated.
    
    Thanks
    Susan
    
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Sun Dec 29 2002 - 10:46:57 PST