Re: unable to mount fs for forensics

Hi,

I tried the same process as you did. I got first a failure and then, moving to a different machine and repeating the process, success.

first machine (failure)

- RedHat Linux 7.1
- kernel 2.4.5 (pretty fancy optioned)
- fileutils 4.0.36
- mount-2.11b

second machine (success)

- RedHat Linux 7.2
- kernel 2.4.8
- fileutils 4.1
- mount-2.11g

trying

mount -o loop image.dd /mountpoint -vv

I get:

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

mount: going to use the loop device /dev/loop3 set_loop(/dev/loop3,ttt/image2.dd,0): success mount: setup loop device successfully
EXT2-fs: loop(7,3): couldn't mount because of unsupported optional features (4).del_loop(/dev/loop3): success mount: wrong fs type, bad option, bad superblock on /dev/loop3,

       or too many mounted file systems

so loop is no problem, i suppose that either defaults option of mount are a problem or dd.

-- 
Eugen Cocalea				||	eugen@isratech.ro
ex - Network Administrator @ isratech.ro||	Phone: +40 232 219992
						Cell: +40 723 605070

On Dec 27, 2002, 1:59pm, Susan Chan Lee wrote:

|SCL|Hi All

|SCL|

|SCL|Having some problems mounting a filesystem which I imaged using dd for





-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com