VMWare Virtual Disk Format (VMDK)

From ForensicsWiki
Revision as of 16:50, 22 September 2012 by Joachim Metz (Talk | contribs) (Extent file types)

Jump to: navigation, search

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Image types

There are multiple types of VMWare Virtual Disk Format (VMDK) data files:

  • 2GbMaxExtentFlat (or twoGbMaxExtentFlat); descriptor file (name.vmdk) with RAW data extent files (name-f###.vmdk). This image type is basically a split RAW image.
  • 2GbMaxExtentSparse (or twoGbMaxExtentSparse); descriptor file (name.vmdk) with VMDK sparse data extent files (name-s###.vmdk)
  • monolithicSparse; VMDK sparse data extent file (name.vmdk) which contains the descriptor file data.

Descriptor file

The descriptor file defines how and where the data of the VMDK image is stored. The data is stored in extent data files.

Extent data file types

There are multiple types extent data files:

  • RAW extent data file or device
  • VMDK sparse extent data file
  • COWD sparse extent data file

External Links