Re: unable to mount fs for forensics

I don't see you forcing an fstype when you do the mount.

Here's a quick way to do the probe (names taken from the mount(1) manpage)

for i in auto ext2 ext3ext2 ext3 adfs affs autofs coda coherent cramfs devpts efs ext hfs hpfs iso9660 jfs minix msdos ncpfs nfs ntfs proc qnx4 reiserfs romfs smbfs sysv tmpfs udf ufs umsdos vfat vxfs xenix xfs xiafs do

    echo attempting type "'$i'"
    if mount -f $i -o ro,loop,nodev,noexec forensics/images/hda1.dd mnt/boot     then

        break
    done
done

(the for i line and the list of FS types is one line. the second line is 'do'

Susan Chan Lee wrote:
> Hi All
>
> Having some problems mounting a filesystem which I imaged using dd for
> forensic testing. The below is what I am doing with little success:
.....
> # mount -o ro,loop,nodev,noexec forensics/images/hda1.dd mnt/boot

-- 
Stephen Samuel +1(604)876-0426                samuel@bcgreen.com
		   
http://www.bcgreen.com/~samuel/
Powerful committed communication, reaching through fear, uncertainty and
doubt to touch the jewel within each person and bring it to life.


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek