Difference between pages "Dd rescue" and "LibCarvPath"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
(New page: LibCarvPath is a library designed to be used by carving and file system analysis tools. LibCarvPath allows fragments represented by offset and size to be combined in a CarvPath annotation ...)
 
Line 1: Line 1:
{{Infobox_Software |
+
LibCarvPath is a library designed to be used by carving and file system analysis tools.
  name = dd_rescue |
+
LibCarvPath allows fragments represented by offset and size to be combined in a CarvPath
  os = {{Linux}}|
+
annotation that take the form of file system paths. LibCarvPath addresses the limits of
  genre = {{Disk imaging}} |
+
file system paths by mapping extremely fragmented files to a uniquely identifying key in
  license = {{GPL}} |
+
a long-path database.
  website = [http://www.garloff.de/kurt/linux/ddrescue/ www.garloff.de/kurt/linux/ddrescue/]
+
}}
+
  
'''dd_rescue''', is an an advanced evolution of [[dd]], a command line program that has been ported only for UNIX/Linux. The program uses a complex series of flags to allow the user to image or write data from and to [[raw image file|raw image files]]. Like [[dcfldd]], the program makes an effort to keep the user apprised of the status of the current operation.
+
The following tools use LibCarvPath and/or CarvPath Annotations:
  
'''[[ddrescue]]''' and '''dd_rescue''' are completely different programs which share no development between them.  The two projects are not related in any way except that they both attempt to enhance the standard [[dd]] tool and coincidentally chose similar names for their new programs.
+
* [[CarvFs]]
 +
* [[tsk-cp]]
 +
* [[scalpelcp]]
  
== Sample usage ==
+
Next to these, in [[Photorec]] work has started to include LibCarvPath support.
 
+
Here is a common dd_rescue command:
+
 
+
'''UNIX/Linux'''
+
 
+
<pre>$ dd_rescue /dev/hda myfile.img</pre>
+
 
+
'''STDOUT'''
+
 
+
A large difference between '''[[ddrescue]]''' and '''dd_rescue''' is that '''dd_rescue''' can pipe output to STDOUT whereas '''[[ddrescue]]''' can only transfer block/file to block/file.
+
 
+
One example of this usage would be transfering a disk image over the network using ssh.
+
 
+
<pre>dd_rescue /dev/sda1 - | ssh user@remote.host "cat - > /remote/destination/file.img"</pre>
+
 
+
Another example would be adding compression to an image file on the fly.
+
 
+
<pre>dd_rescue /dev/sda1 - | bzip2 > /dir/file.img.bz2</pre>
+
 
+
==  Cautions ==
+
 
+
Unlike regular [[dd]], dd_rescue does not use the command line arguments <tt>if</tt> or <tt>of</tt>.
+
 
+
== See also ==
+
 
+
* [[aimage]]
+
* [[Blackbag]]
+
* [[dcfldd]]
+
* [[dd]]
+
* [[ddrescue]]
+
* [[sdd]]
+

Revision as of 13:37, 12 December 2008

LibCarvPath is a library designed to be used by carving and file system analysis tools. LibCarvPath allows fragments represented by offset and size to be combined in a CarvPath annotation that take the form of file system paths. LibCarvPath addresses the limits of file system paths by mapping extremely fragmented files to a uniquely identifying key in a long-path database.

The following tools use LibCarvPath and/or CarvPath Annotations:

Next to these, in Photorec work has started to include LibCarvPath support.