On 4/1/2003 11:31 AM, Sabol, Paul wrote: >then 'dd if=/dev/hdc of=testing.bin conv=notrunc,noerror,sync". > > I think there may be two errors happening here. First, you're taking an image of the drive as a whole, not a specific partition. Next try time using the flag if=/dev/hdc1. Secondly, to mount an image via loopback, here's the command you need: # mount -o loop -t ntfs testing.bin /mnt/windows Hope this helps! -- SA Jesse Kornblum Chief, Computer Investigations and Operations Air Force Office of Special Investigations DSN 857-1143 Commercial 240-857-1143 Fax 857-0963 STU-III 857-0965 email: jesse.kornblumat_private siprnet: jesse.kornblumat_private http://afosi-web/xos/xosi/ ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Apr 02 2003 - 05:00:33 PST