Ubuntu Security :: Mount The Image Or Extract The Image To Another Drive?
Feb 16, 2011
I was given a forensic Image which I now know is a DD image of the drive (Vista) and am trying to mount the image or extract the image to another drive. I'm not sure of the extention type or if the image is a partition or the entire drive. I think it is the entire drive.
Is it possible to mount a DD image to a device. If I can't do that I just want to extract the files to run some programs against the drive. Can I view the files under Ubuntu or do I have to remove the drive and stick it into a Vista computer.
I purchased a second drive today and was hoping the command line would be something simple.
Or am I on the wrong track, should I be doing this all in a windows environment. The reason I picked ubuntu was because of the reporting tools.
This probably is something simple, and may have already been addressed on here.I have a 1.4MB floppy disk image file that I would like to mount as a drive.
I've got an image file on my Ubuntu desktop from using ddrescue.When I use the foremost tool to extract the files onto an external drive,I am able to extract the files from the image file to the Ubuntu desktop, but there is not enough room on my Ubuntu partition to hold all the files.
It appears I thought I was taking photo's with my Nikon CoolpixS5 but they are saved as .mov files. When I watch file, I see the picture, and then it's over in a second. How can I extract the image from the .MOV file? If it's of any relevance I used digikam to recognise my camera.
I am trying to get the metadata out from an image file in python. I have tried using PIL but it does not give me the data I am looking for (mostly just got a bunch of hex code) and I have no idea how to use ImageMagick, the python module is poorly documented and I can't find any examples on the net.The info I need is stuff like camera model, if flash was used, focal length, exposure time, date, etc.. pretty much the same info I get when I look at the "Image" tab on properties in Nautilus on Ubuntu.
What I am doing is writing a script that will iterate through a lot of pictures and put all this metadata into MySQL. I chose python since it is simple and I am familiar with it. But I can't find a good way to get that metadata from within python.
I recently used clonezilla to make a backup image of hdd, before doing factory restore, now the image is of not necessary as I can image the restored computer (Acer Aspire 3620).Is it possible to extract image to blu-ray and make bootable as in live-cd?
When playing dvd's, vob files and wmv files, the image comes with high contrast colors ,very intense red/green/blue. very dark too. I have vlc 1.1.4 installed, using ubuntu 10.10, libdvdcss2 installed. for the rest of the video formats it seems to work fine. any ideas on what should I start debugging?
I have just exported 3 png files out of gimp for a html document I'm working on right now, and they are all almost the same, except I need each to load when the user does something. So the first image will display on the page, and when a user puts their cursor over it, then it will load image 2. When they press it, it loads image 3.
I would like to change my startup image (usplash image). For that i change /lib/plymouth/themes/ubuntu-logo/ubuntu_logo.png and /lib/plymouth/themes/ubuntu-logo/ubuntu_logo16.png. Then the splash screen of shutdown screen changes .But booting screen doesnot change.
I have a Canon iR3570/iR4570 PXL, and installed the driver CQue 1.0 TCP/IP Queue from Canon webpage.
The problem: - if i try to print an OpenOffice or LibreOffice Calc with an image and text, the image is not printed (the space is blank). - if i try to print an OpenOffice or LibreOffice Calc with just an image, it's printed great. - if i try to print an OpenOffice or LibreOffice Impress, the images are not printed but the text is printed great.
Iam looking for an Image viewer that lets me delete images through an 'delete' button/option in toolbox.. Most of the image viewers uses edit menu-->delete option,but iam looking for an direct link,clicking on which deletes the image currently open in image viewer ???
I'm trying to run extract-ikconfig because I've mistakenly deleted an old kernel config that I'd like to recover. However, when running the script from the latest (2.6.32.5) tree I run into this error:
Quote:
ERROR: Unable to extract kernel configuration information.
This kernel image may not have the config info.
Coincidentally, this happens with all of my kernel images. Is it a fixable problem? I should really set CONFIG_IKCONFIG_PROC next time..
I've got an image file that I made with DDrescue.I installed Sleuth Kit and when I type: mmls /mnt/drive/file .it says "cannot determine partition type".I imaged a different drive and tried to use the same command line and got the same results.I'm not familiar with working with image files too much,.I would like to mount the NTFS partition within the image file.
I have problem to mount a compressed (ISZ) image under Linux, which was created by e.g. UltraISO? I am aware about user-space fuseiso, but it fails to mount these images, as I have reported in Debian bugtracker (correct me if I ddi something wrong). I ask the community for a help: I need a proved solution to mount these images without decompressing them.I believe that CONFIG_ZISOFS kernel option cannot help, as it refers a special RockRidge extension (per-file compression with mkisofs -z or mkzftree).
I am trying to recover some important data from a 273 gig NTFS partition that was used in windows 7. The laptop was dropped and would not boot the next day. As an external drive I could see 2 smaller partitions (30 gig and 500 meg), but the main partition was RAW and requesting to be formatted... so I came to learn about Knoppix 6.2.1 as my live boot cd and ran ddrescue to recover an almost complete image of the bad partitionddrescue -n /dev/sdc1 /media/sda1/image.img /media/sda1/logfile.logI then ran it one more time:ddrescue -r 1 /dev/sdc1 /media/sda1/image.img /media/sda1/logfile.logthe image was made with 741 errors (amounting to 160 megabytes)So Now I have my partition as image.img which I want to mount.
First I tried sudo mount -t ntfs -o loop /media/sda1/image.img /mnt/recovered sudo mount -t ntfs -o loop,force /media/sda1/image.img /mnt/recovered
I need to mount an audio only image file. The only program I'm aware of is cdEmu, unfortunately, since my upgrade to 11.04 x86_64, It was removed during the process. Any other programs/commands capable of mounting an image file? And no, I do not want to burn,extract, or convert. Just mount.
I installed AcetoneISO (Debian 6) and when I try to mount any .iso image, even one that is created on AcetoneISO I can't! I got an error. Error, could not mount image.
I have installed numerous Linuxes and Fedoras. This is the 3rd F13 install - other 2 were no problem! This one has me stumped. I have tried dvd install, boot.iso on usbkey, netinstall on usb and dvd. This problem crops up each time! I always manage to get the disks reformated and partitioned but no further. If I go to screen F2, everything seems to check ok - the usb is mounted and visible. The partitions are mounted under sysimage, a loop device is mounted under runtime (cant determine what though).
All the boots result in "Select Partition" - looking for install.img. With dvd does not list dvd drive as an option. With usb - firstly search sda1 (no usb option appears initially), fails then show the usb drive! and it finds the install img! All strange. Logs all show that all devices are recognized and mounted (or mountable) and viewable. sysimages are all writable! (can copy files between etc )..
Anaconda last message was "transferring install image to install target". What is transferred and where should it be? What needs to be mounted can it be done manually from screenF2?? Is it possible to get more info out of anaconda?? Is there some way of bypassing that "tried " message as the only way out is a reboot!! I am getting desperate - I need this machine working for a field job very soon.
Is it possible to mount a virtual disk image like qcow2 as a rw filesystem? I would assume guestfs could do it, but I couldn't figure it out from the man page. Basically I want to be able to read and write to the contents of a Windows virtual machine, just like I mounted a physical disk.
I have an image of the entire disk created using dd. The disk structure follows:
The image was created using:
How would I, if it is possible, mount /dev/sda1 from the image so that I'm able to read the contents?
It's not an option to clone the HDD again, I know how to do it if I had only cloned the single partition by itself. I hope it's still possible with the current image.
I have a large qcow2 formatted disk image, which I use as storage. Often I need to move data to and from this disk image. I mount the disk using the qemu-nbd tool as follows:
modprobe nbd max_part=63 qemu-nbd -c /dev/nbd0 /host/disk100G.img mount /dev/nbd0p1 /home/rup/disk
But disk access fails every now and then in the midst of some I/O operation with an "Input/output error". At that point I have to manually unmount the disk and re-mount it so that I can run the program again:qemu-nbd -d /dev/nbd0umount joborkhaki/What could be the reason for this? Is there a better tool that I can use to maintain a qcow2 disk image?
I recently built the following items of cdemu from the svn repository: libmirage, vhba-module, the daemon, and the client. I have the library installed, the kernel module loading on boot-up of my system, but aside from that, I can't seem to figure out how to use the client.
I have tried manually starting the daemon a couple of times, but can never get past that part. I can't remember the exact error offhand (away from home comp right now) but it was something to the effect of not being able to create the virtual device "0" in /dev.
My questions is...just like on the subject, what is the best applications to mount ISO image (which is not an OS image) in linux. perhaps the most user friendly.
