Depending on the imaging solution. DriveImage or whatever before Symantec used to do sector cloning by default. Ghost has almost always done file ghosting except when explicitly given the sector cloning flag. To do real sector cloning is a pretty huge and inefficient process. Its only good for forensics.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry McGregor Sent: Tuesday, April 18, 2006 12:47 PM To: The Hardware List Subject: Re: [H] Linux imaging Ben Ruset wrote: > Tar is taking files out of a compressed (well, if it's gzipped) > archive and recreating them on your system. :) > Imaging is doing a sector by sector copy, archival, compression, and > sector by sector restore on another machine. Not necessarily. Ghost under Fat32/NTFS does not do sector copy, it does file copy, and recreation. > Now, if you were dd'ing disks, I'd say you were imaging. DD works well for forensics work, dd-rescure is better. > BTW, we do tar restores of our Linux boxen here. :) Harry
