[GLLUG] imaging further with dd?

Lachniet, Mark mlachniet at sequoianet.com
Wed Nov 8 14:53:01 EST 2006


I've done a lot of dd copies for forensic analysis and so on and have never had a problem booting a copy, even on radically different hard drives (as long as they are both IDE, for example, you should be fine).  From my personal experience, as long as the target drive is big enough you'll be fine.

BTW, there is a better bit-level copy program on the Helix boot CD - faster and better than dd

Mark Lachniet
Technical Director, Security Group
Analysts International
(517) 336-1004 (voice)
(517) 336-1160 (fax)
mailto: mlachniet at analysts.com




From: Charles Ulrich
Sent: Wed 11/8/2006 12:45 PM
To: Benjamin Cathey
Cc: linux-user at egr.msu.edu
Subject: Re: [GLLUG] imaging further with dd?


Benjamin Cathey wrote:
> Okay - here is what I am trying
>
> Booting both machines with a LiveCD (Insert Security.)  Then on the receiving
> machine:
>
> netcat -l -p 9000 | dd of=/dev/hda
>
> On the source machine:
>
> dd if=/dev/hda | netcat 192.168.0.173 9000

Just remember that dd does a bit-for-bit copy and that if the two drives
aren't the same exact model number, the results may not be what you expect. If
they are different, you may get better mileage out of rsync or some other
file-based backup utility.

-- 
Charles Ulrich
Ideal Solution, LLC - http://www.idealso.com
_______________________________________________
linux-user mailing list
linux-user at egr.msu.edu
http://mailman.egr.msu.edu/mailman/listinfo/linux-user
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.egr.msu.edu/mailman/public/linux-user/attachments/20061108/2dbc83f8/attachment.html


More information about the linux-user mailing list