unable to mount fs for forensics

From: Susan Chan Lee <susan.lee(at)securityassoc.com>
Date: Fri Dec 27 2002 - 00:59:09 EST

Hi All

Having some problems mounting a filesystem which I imaged using dd for forensic testing. The below is what I am doing with little success:

1. dd the partition in question by - dd if=/dev/hda1 of=/forensics/images/hda1.dd
2. create a mount point - mkdir /mnt/boot
3. mounting the dd'ed fs with no success (tried a few variations):

# mount -o ro,loop,nodev,noexec forensics/images/hda1.dd mnt/boot
mount: wrong fs type, bad option, bad superblock on /dev/loop0,

       or too many mounted file systems

# mount -o ro,loop=/dev/loop1 forensics/images/hda1.dd /mnt/boot
mount: wrong fs type, bad option, bad superblock on /dev/loop1,

       or too many mounted file systems

As you can see I keep getting this wrong fs type error on both loop0 and loop1.

Any help appreciated.

Thanks
Susan

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Sun Dec 29 13:19:12 2002