you could try partimage, that will give the option of auto splitting
Hi everyone - I am new to Linux . . . here is what I am trying to do. I need to image a 17 Gig hard drive that is FAT32 (has Windows ME on it). I am using the PSK version of Knoppix to do the imaging. My target drive is a FAT32 formatted hard disk that is partitioned several times - All FAT32. I am using the following command:
dcfldd if=/dev/hda1 of=/mnt/hdb1/image.dd conv=noerror,sync hashwindow=0 hashlog= hash.txt
This stops after 2 Gigs of copying due to the FAT32 file size limit being exceeded. How do I get around this? If I am imaging a FAT32 drive, does the drive I am copying to also need to be FAT32 file system (as opposed to linux file system, or some other file system that supports image files of 20 Gigs or more)? Is it even possible with any filesystem to create a 17 Gig image file?
Also, for you forensic experts, what is the advantage of imaging a drive over just cloning it? In other words, why would I want to create an image as opposed to a bit-for-bit copy of one drive to another? All of the forensic material I have refers to image files rather than a cloned copy of the hard disk. Why is that?
Also, when imaging a drive, is it better to image it partition by partition or to just image the entire drive into one image file - all partitions included?
Thanks so much in advance.
Brian
you could try partimage, that will give the option of auto splitting
eh? the filesizelimit is 4G NOT 2g.
there is something wrong here.
you could use a ext2/3 filesystem and store the entire image there, there is NO need for the image of a fat32 to be on a fat32 disk.
Yes, but I've also met a 2 gig barrier for FAT32Originally Posted by OErjan
if it is the mount bin that messes up that must be if you have not given fat=32 in the mount option, i think it is older versions of dd that has the limitation, should be fixed by now.
Cisco (SG100D-05-UK) 5-Ports External Ethernet Switch
$40.00
Cisco SG110 24 Port Gigabit Ethernet Switch w/ 2 x SFP SG110-24
$117.00
8 Ports Unmanaged Industrial Ethernet Switch Network Gigabit Ethernet Switch
$85.00
HP Procurve 2824 24 Gigabit Ports 10/100/1000 External Managed Switch J4903A
$74.99
Juniper Networks EX3300-48P 48-Port PoE+ 4x SFP+ Network Switch w/ Power Cord
$43.95
New Linksys SE3005 5-port Gigabit Ethernet Switch
$18.99
New 10/100 Mbps 8 Ports Fast Ethernet LAN Desktop RJ45 Network Switch Hub
$11.49
NetGear ProSafe GS748T V4 48-Port Gigabit Smart Switch w/ Ears + Cord
$30.00
ARUBA J9772A 2530-48G PoE+ 48 PORT ETHERNET SWITCH W/ RACK EARS J9772-60301
$132.30
Fortinet FortiSwitch FS-124D-POE 24 Port Gigabit Ethernet Switch UNREGISTERED
$99.97