[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
feature request/source changes
From: |
Wyman Miles |
Subject: |
feature request/source changes |
Date: |
Fri, 28 Oct 2005 14:42:10 -0400 |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I frequently find myself sorting individual partition images out of
captures of full disk images using dd. I prefer dd over a purpose-designed
forensics imaging tool because its operation is well documented, well
understood, and the image files thus captured are valuable to other
security engineers without the need for proprietary software.
To simplify my work, I've added "start=BLOCK" and "end=BLOCK" commands to
dd so I can provide those values directly, rather than "skip=" and "count="
Below is a diff. The changes are rather minor. Any chance this can make
it into the next rev of coreutils?
156,161d155
< /* begin copying at this block number */
< static uintmax_t start_record = 0;
<
< /* end copying at this block number */
< static uintmax_t end_record = 0;
<
429,430d422
< start=BLOCK start processing input at BLOCK\n\
< end=BLOCK stop processing input at BLOCK\n\
930,933d921
< else if (STREQ (name, "start"))
< start_record = n;
< else if (STREQ (name, "end"))
< end_record = n;
946,955d933
< /* deal with "start" and "end" by computing those into "skip" and
"count"
< * */
< if (start_record) {
< skip_records = start_record;
< if (end_record) {
< /* count = (end_record - start_record) + 1 */
< max_records = (end_record - start_record) + 1;
< }
< }
<
Wyman Miles
Senior Security Engineer
Cornell University, Ithaca, NY
(607) 255-8421
-----BEGIN PGP SIGNATURE-----
Version: Mulberry PGP Plugin v3.0
Comment: processed by Mulberry PGP Plugin
iQA/AwUBQ2JxA8RE6QfTb3V0EQJnmgCfSKlvATnveGucTu0FxQ9EG5ulvWkAoOlL
G+DItgUk+ZczVuu1wzm/NOAn
=bVRj
-----END PGP SIGNATURE-----
- feature request/source changes,
Wyman Miles <=