Re: Imaging Win2k with dd

From: David LaPorte (david_laporteat_private)
Date: Sat Mar 08 2003 - 06:33:12 PST

Next message: Harlan Carvey: "Win2K NTFS Change Journal"

Previous message: Pearse Mc Kiernan: "Imaging Win2k with dd"
In reply to: Pearse Mc Kiernan: "Imaging Win2k with dd"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

You've got your slashes backwards:

dd if=//./C: of=D:\images\DriveC.img

Think link may be useful:

http://www.cygwin.com/cygwin-ug-net/using-specialnames.html#AEN769

David

----- Original Message -----
From: "Pearse Mc Kiernan" <pearse_mckiernanat_private>
To: <forensicsat_private>
Sent: Wednesday, March 05, 2003 2:58 PM
Subject: Imaging Win2k with dd


> I am trying to image my Win2k box (RAID 5 across 3 disks) with dd.
> I type the following
> dd if=\\.\C: of=D:\images\DriveC.img
>
> and I get the following
> dd: \\.\C:: invalid argument.
>
> Can anyone point me in the right direction as where to look also I have
> tried it with the Volume{xxxxxxx} syntax and still get the same. But I was
> able to dd a disk in the CD-ROM with no problems.
>
>
> -----------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see: http://aris.securityfocus.com
>


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Harlan Carvey: "Win2K NTFS Change Journal"
Previous message: Pearse Mc Kiernan: "Imaging Win2k with dd"
In reply to: Pearse Mc Kiernan: "Imaging Win2k with dd"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Mar 08 2003 - 17:19:15 PST