Tag Info

New answers tagged

0

Here's the best method I've found: cd / find . -size +500000 -print


2

In a forensic investigation, you need to retrieve data from a possibly hostile system, and you need to provide strong evidence that the data you retrieved is genuine. Acquiring a disk image from the live computer is extremely bad in both respects. The system software may be some non-standard software that's programmed to lie to you, and provide the ...


2

While running a command like # dd if=/dev/sda of=/path/to/external/medium/file.img on a live system will work, it's going to result in a number of problems which you won't have if you boot into a separate OS and make the image(s) from there: If you image an entire disk, it probably contains a boot loader and a partition table. Those are going to get in ...


3

I don't think you've misunderstood XFS, but maybe LVG. "Joining" two disks sounds like concatenation, in which case what you're seeing sounds correct. It would fill up one disk, then continue on to the next. I think you really want RAID0, which would "stripe" the data across the two disks filling them up at the same time.


0

Here's a onliner to figure out all sd* devices: ls -l /sys/block/sd* | perl -npe 's#^.*?block/(sd[^/ ]+).*?/(ata[^/]+|usb(?:[-0-9/.]+))/.*#$1 = $2#' For me, the output looks like sda = ata1 sdb = ata2 sdc = ata4 sdd = usb2/2-1/2-1.6 sde = usb2/2-1/2-1.6 sdf = usb2/2-1/2-1.5/2-1.5.1/2-1.5.1.1 The output is not perfect for USB block devices but this ...



Top 50 recent answers are included