Difference between revisions of "Dc3dd"
m (Added external links) |
(Added comparisons) |
||
| Line 9: | Line 9: | ||
{{expand}} | {{expand}} | ||
'''dc3dd''' is a patched version of [[dd|GNU dd]] with added features for computer forensics. It was developed at the [[DoD Cyber Crime Center]] by [[Jesse Kornblum]]. | '''dc3dd''' is a patched version of [[dd|GNU dd]] with added features for computer forensics. It was developed at the [[DoD Cyber Crime Center]] by [[Jesse Kornblum]]. | ||
| + | |||
| + | == Comparison to GNU dd == | ||
| + | The following features are available in dc3dd that are ''not'' found in [[dd|GNU dd]]: | ||
| + | * On the fly [[hashing]] with multiple algorithms ([[MD5]], [[SHA-1]], [[SHA-256]], and [[SHA-512]]) with variable sized piecewise hashing | ||
| + | * Able to write errors directly to a file | ||
| + | * Combined error log. Groups errors together (e.g. <tt> Had 1,023 'Input/ouput errors' between offsets 512-65536' </tt>) | ||
| + | * Pattern wiping. Wipe output files with a single hex digit or a text pattern | ||
| + | * Verify mode | ||
== Comparison to dcfldd == | == Comparison to dcfldd == | ||
| − | Although there are definitely similarities between dc3dd and [[dcfldd]], the programs are based on slightly different code bases and have different feature sets. | + | Although there are definitely similarities between dc3dd and [[dcfldd]], the programs are based on slightly different code bases and have different feature sets. dcfldd is a fork of GNU dd, whereas dc3dd is a patch to the current version. This means that dc3dd will be updated every time GNU dd is updated, whereas dcfldd has its own release schedule. Certain features added to GNU dd after dcfldd forked, such as direct input/output mode, are not found in dcfldd. |
| + | |||
| + | On the other hand, dcfldd supports more hashing algorithms than dc3dd, allows the user greater control over how hashes are displayed, supports wiping output files with random patterns, and is supported on the [[Cygwin]] platform. | ||
== See Also == | == See Also == | ||
Revision as of 19:07, 19 December 2007
| dc3dddd | |
|---|---|
| Maintainer: | Jesse Kornblum |
| OS: | Linux,BSD,Solaris,Mac OS X |
| Genre: | Disk imaging |
| License: | GPL |
| Website: | http://dc3dd.sf.net/ |
|
|
Please help to improve this article by expanding it.
|
dc3dd is a patched version of GNU dd with added features for computer forensics. It was developed at the DoD Cyber Crime Center by Jesse Kornblum.
Comparison to GNU dd
The following features are available in dc3dd that are not found in GNU dd:
- On the fly hashing with multiple algorithms (MD5, SHA-1, SHA-256, and SHA-512) with variable sized piecewise hashing
- Able to write errors directly to a file
- Combined error log. Groups errors together (e.g. Had 1,023 'Input/ouput errors' between offsets 512-65536' )
- Pattern wiping. Wipe output files with a single hex digit or a text pattern
- Verify mode
Comparison to dcfldd
Although there are definitely similarities between dc3dd and dcfldd, the programs are based on slightly different code bases and have different feature sets. dcfldd is a fork of GNU dd, whereas dc3dd is a patch to the current version. This means that dc3dd will be updated every time GNU dd is updated, whereas dcfldd has its own release schedule. Certain features added to GNU dd after dcfldd forked, such as direct input/output mode, are not found in dcfldd.
On the other hand, dcfldd supports more hashing algorithms than dc3dd, allows the user greater control over how hashes are displayed, supports wiping output files with random patterns, and is supported on the Cygwin platform.
