> -----Original Message----- > From: Susan Chan Lee [mailto:susan.leeat_private] > Sent: 27. prosinac 2002 6:59 > To: forensicsat_private > Subject: unable to mount fs for forensics > > > Hi All > > Having some problems mounting a filesystem which I imaged using dd for > forensic testing. The below is what I am doing with little success: > > 1. dd the partition in question by - dd if=/dev/hda1 > of=/forensics/images/hda1.dd > 2. create a mount point - mkdir /mnt/boot > 3. mounting the dd'ed fs with no success (tried a few variations): Hi Susan, Add bs=1024 while making image using dd, so full command will be: # dd bs=1024 if=/dev/hda1 of=image Default block size for dd is 512 bytes IIRC, so that's why you have problems with mount commands. Best regards, Bojan Zdrnja ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Sun Dec 29 2002 - 17:42:25 PST