Re: drive integrity check problems

From: crazytrain (subscribeat_private)
Date: Sun Aug 10 2003 - 12:31:29 PDT

  • Next message: Sakaba: "Re: Using dd.exe to make forensic images of NTFS drives"

    Michael
    
    yes, the drive has at least one bad sector on it, which is why both
    programs puke (until you force 'dd' to go beyond the bad media).
    
    SMART (www.asrdata.com) handles bad sectors rather nicely.   Will record
    an md5 value for the good sectors, then a separate md5 for the bad
    sector(s), then another md5 for the remaining good, then an overall md5
    value.   
    
    regards,
    
    farmerdude
    
    
    On Sat, 2003-08-09 at 10:53, Michael Scott wrote:
    > Hi,
    > 
    > A beginning analyst I needs some advice. please.
    > 
    > I have imaged a very old Windows FAT drive (3.7Gb) and tried to verfiy the
    > original physical drive integrity before imaging in RH Linux by hashing:
    > 
    > # md5sum /dev/hdd
    > 
    > I get an error:  File Input/Output Error some way into the hash calc.    Is
    > this indicative of bad sectors ?
    > I also get the same when I do a plain dd image , dd if=/dev/hdd.
    > 
    > By adding conv=noerror I can image the drive, ignoring errors and this
    > works,  fine albeit very slowly.
    > 
    > Any advice and knowledge much appreciated.
    > 
    > Many thanks
    > 
    > Michael
    > 
    > 
    > -----------------------------------------------------------------
    > This list is provided by the SecurityFocus ARIS analyzer service.
    > For more information on this free incident handling, management 
    > and tracking system please see: http://aris.securityfocus.com
    > 
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Aug 11 2003 - 12:26:20 PDT