Re: Sector Level Backups
I would like to use "dd" , or some similar tool to make exact images=20 of a drive as a full backup, rather than dump or tar. ... Alexandre's answer is correct about how to do this with Amanda. But I'm curious why you would want to. If you're backing up a disk that contains file systems, the result will be almost useless unless you've unmounted all the file systems while the backup is running. And dumping all that "free space" is just a waste of time, bandwidth and tape. Dave John R. Jackson, Technical Software Specialist, [EMAIL PROTECTED] P.S. Please turn off "send as HTML" in your mailer. It's just a waste of bandwidth.
Re: Sector Level Backups
On Apr 5, 2001, "John R. Jackson" [EMAIL PROTECTED] wrote:
But I'm curious why you would want to. If you're backing up a disk that
contains file systems, the result will be almost useless unless you've
unmounted all the file systems while the backup is running.
One of the reasons I could think of to do this is to preserve
information of deleted files that might still be there, that could
then be used for some investigation or as evidence in trial. You'd
probably not want to do this on a regular basis, though, so I'd
probably do this kind of operation as a one-shot thing, without
Amanda.
--
Alexandre Oliva Enjoy Guarana', see http://www.ic.unicamp.br/~oliva/
Red Hat GCC Developer aoliva@{cygnus.com, redhat.com}
CS PhD student at IC-Unicampoliva@{lsd.ic.unicamp.br, gnu.org}
Free Software Evangelist*Please* write to mailing lists, not to me
Re: Sector Level Backups
Congratulations Alexander, You hit the nail on the head. I am imaging
drives for computer forensics purposes, and am interested in finding faster
easier ways to obtain these images. Images made with dd, when taken from a
read-only mounted drive, are superb evidence. The real fun is getting the
naughty bits off the drive images.
- Original Message -
From: "Alexandre Oliva" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: "Dave Hecht" [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Thursday, April 05, 2001 8:21 PM
Subject: Re: Sector Level Backups
On Apr 5, 2001, "John R. Jackson" [EMAIL PROTECTED] wrote:
But I'm curious why you would want to. If you're backing up a disk that
contains file systems, the result will be almost useless unless you've
unmounted all the file systems while the backup is running.
One of the reasons I could think of to do this is to preserve
information of deleted files that might still be there, that could
then be used for some investigation or as evidence in trial. You'd
probably not want to do this on a regular basis, though, so I'd
probably do this kind of operation as a one-shot thing, without
Amanda.
--
Alexandre Oliva Enjoy Guarana', see http://www.ic.unicamp.br/~oliva/
Red Hat GCC Developer aoliva@{cygnus.com, redhat.com}
CS PhD student at IC-Unicampoliva@{lsd.ic.unicamp.br, gnu.org}
Free Software Evangelist*Please* write to mailing lists, not to me
Re: Sector Level Backups
On Apr 3, 2001, "Dave Hecht" [EMAIL PROTECTED] wrote:
I would like to use "dd" , or some similar tool to make exact images
of a drive as a full backup, rather than dump or tar. [...] Can
Amanda be modified to do this?
Yep. That's the kind of thing you should be able to do with the
DUMPER API, under (stalled) development for Amanda 2.5. Meanwhile,
you could configure Amanda to run some shell-script instead of GNU
tar, that would run dd after examining the command-line arguments.
--
Alexandre Oliva Enjoy Guarana', see http://www.ic.unicamp.br/~oliva/
Red Hat GCC Developer aoliva@{cygnus.com, redhat.com}
CS PhD student at IC-Unicampoliva@{lsd.ic.unicamp.br, gnu.org}
Free Software Evangelist*Please* write to mailing lists, not to me
