Dcfldd - Revision history

Roa: typo in sourcedrive

2011-06-19T23:08:29Z

typo in sourcedrive

2009-08-01T22:18:36Z

‎Example: Avoid long lines

2008-03-19T15:28:12Z

2007-04-07T22:35:05Z

Added raw image files

2007-02-27T20:00:48Z

Changed author name

2006-05-06T15:51:12Z

2006-05-06T15:38:26Z

2006-05-06T15:31:14Z

2006-04-23T18:35:29Z

2006-04-23T18:28:03Z

Category: GPL.

@@ Line 22: / Line 22: @@
 ==Example==
 '''Unix/Linux'''
-  dcfldd if=/dev/sourcedirve hash=md5,sha256 hashwindow=10G md5log=md5.txt sha256log=sha256.txt \
+  dcfldd if=/dev/sourcedrive hash=md5,sha256 hashwindow=10G md5log=md5.txt sha256log=sha256.txt \
          hashconv=after bs=512 conv=noerror,sync split=10G splitformat=aa of=driveimage.dd
 This command will read ten Gigabytes from the source drive and write that to a file called driveimage.dd.aa.  It will also calculate the [[MD5]] hash and the sha256 hash of the ten Gigabyte chunk.  It will then read the next ten gigs and name that driveimage.dd.ab.  The md5 hashes will be stored in a file called md5.txt and the sha256 hashes will be stored in a file called sha256.txt.  The block size for transferring has been set to 512 bytes, and in the event of read errors, dcfldd will write zeros.

@@ Line 22: / Line 22: @@
 ==Example==
 '''Unix/Linux'''
-  dcfldd if=/dev/sourcedirve hash=md5,sha256 hashwindow=10G md5log=md5.txt sha256log=sha256.txt hashconv=after bs=512 conv=noerror,sync split=10G splitformat=aa of=driveimage.dd
+  dcfldd if=/dev/sourcedirve hash=md5,sha256 hashwindow=10G md5log=md5.txt sha256log=sha256.txt \
 This command will read ten Gigabytes from the source drive and write that to a file called driveimage.dd.aa.  It will also calculate the [[MD5]] hash and the sha256 hash of the ten Gigabyte chunk.  It will then read the next ten gigs and name that driveimage.dd.ab.  The md5 hashes will be stored in a file called md5.txt and the sha256 hashes will be stored in a file called sha256.txt.  The block size for transferring has been set to 512 bytes, and in the event of read errors, dcfldd will write zeros.

@@ Line 8: / Line 8: @@
 }}
-'''dcfldd''' is an enhanced version of [[dd]]. It has some useful features for forensic [[investigator]]s:
+'''dcfldd''' is an enhanced version of [[dd]] developed by the U.S. Department of [[Defense Computer Forensics Lab]]. It has some useful features for forensic [[investigator]]s such as:
 * On-the-fly [[hash]]ing of the transmitted data.
@@ Line 15: / Line 15: @@
 * Verification that the image is identical to the original drive, bit-for-bit.
 * Simultaneous output to more than one file/disk is possible.
-* The output can be splitted into multiple files.
+* The output can be split into multiple files.
 * Logs and data can be piped into external applications.
 The program only produces [[raw image file|raw image files]].

← Older revision		Revision as of 22:35, 7 April 2007
Line 17:		Line 17:
	* The output can be splitted into multiple files.		* The output can be splitted into multiple files.
	* Logs and data can be piped into external applications.		* Logs and data can be piped into external applications.
		+
		+	The program only produces [[raw image file\|raw image files]].

@@ Line 1: / Line 1: @@
 {{Infobox_Software |
    name = dcfldd |
-   maintainer = [[Nicholas Harbour]] |
+   maintainer = [[Nick Harbour]] |
    os = {{Linux}}, {{Windows}} |
    genre = {{Disk imaging}} |
@@ Line 8: / Line 8: @@
 }}
-'''dcfldd''' is an enhanced version of [[GNU]] [[dd]]. It has some useful features for forensic [[investigator]]s:
+'''dcfldd''' is an enhanced version of [[dd]]. It has some useful features for forensic [[investigator]]s:
 * On-the-fly [[hash]]ing of the transmitted data.

@@ Line 3: / Line 3: @@
    maintainer = [[Nicholas Harbour]] |
    os = {{Linux}}, {{Windows}} |
-   genre = [[Category:Disk imaging]][[:Category:Disk imaging|Disk imaging]] |
+   genre = {{Disk imaging}} |
-   license = [[Category:GPL]][[:Category:GPL|GPL]] |
+   license = {{GPL}} |
    website = [http://dcfldd.sourceforge.net/ dcfldd.sf.net] |
 }}