On 4/26/06, Cindy Jenkins <[EMAIL PROTECTED]> wrote:
Hi all,
I need to create a foensics image from an older SGI host on a MIPS
architecture and using IRIX/XFS journaling filesystem.
I'm fairly certain I cannot boot up with any of the Linux cds like
Helix or FCCU. Those would normally be my first choice to get access
using dcfldd.
Any ideas on how to create an image off this system that I can mount
up under a Linux analysis host?
SGI had an XFS port for Linux going on, not sure if it'd do a full
Irix image or not, but be aware that read-only *doesn't* do what you'd
think it does under Linux for journaling filesystems, so don't mount
your good copy or the original, but only a working copy.
Also, if you're booting from a CD that might understand XFS or if
someone might have installed Linux on the host at some point, then use
a write blocker.
Paul
--
fora.compuwar.net
