OK, I've downloaded Debian 4.0r1 DVD#3 several times and from several mirrors including the host somewhere in Sweeden (about a 4-GIG plus download JUST for this one iso file of 3). Every time I check the MD5 checksums against what is published it's WRONG! I already have the iso files for DVD#1, #2 and the updates DVD - their MD5 checksums are correct. Only the iso image for DVD#3 is wrong. Anyone have any ideas why this is? Is there a problem that I missed with some documentation somewhere? Maybe the mirror sites haven't updated the newer correct checksums? I'm getting tired of re-downloading this very large iso-file since it takes about 2 hours every time (obviously, I'm NOT on a dial up!).

Anyway, the file I'm trying to obtain is "debian-40r1-i386-DVD-3.iso" and the published MD5 checksum (that I never get using "MD5 Check Utility version 2.31" from TSoft and running under Vista) is "e9569d806e9ea031cd3d84ad4260d212".

As I said, the iso images for DVD's #1, #2 and the updates DVD are correct and pass according to what is published on all the mirror sites. Only the iso image for DVD#3 fails and fails no matter where I get it. Even worse, I've seen different checksums for this one image too! What is the correct MD5 checksum for DVD#3's iso image? Or where in USA can I download the correct iso file?

Doesn't Windows have a command-line method of checking MD5 sums? XP did apparently, but I've never used Vista so I don't know. Anyhow, I'm trying to say maybe that tool you're using isn't working on this image for some reason. Maybe the file's too big for it? I dunno.

After reading the MD5 for the image file with your tool, can you locate the MD5 on the net anywhere? Like, rather than comparing the checksum to the MD5 file you downloaded, do it the other way: Get the checksum of the image, and then look on the net and see if the checksum is anywhere. You say you have seen multiple checksums for this DVD image. Google the checksum you are getting from the image and see what turns up; you'd be suprised what obscure stuff Google will come up with.

Have you considered downloading the net install iso, Sparky? It is only about 160 MB. That is my preferred method to install Debian Etch. It always works like a charm for me.

http://www.debian.org/devel/debian-installer/

I get e9569d806e9ea031cd3d84ad4260d212 as published. Something else must be going on.

First, let me say I'm not "reading" a checksum value with my tool - I'm using my tool to calculate it. The correct checksum is already published and known but it is not what I keep getting when I use my tool to calculate it. So either my tool is broken which is unlikely (since 3 other files check out as good), or the number that is published is wrong, or someone/something has messed with the file somehow.

But before I go on, let me repeat and say this: ALL checksum's are calculated plain and simple. In this case, "MD5" is NOT a file but rather a particular algorithm or "protocol" that is used to make the calculation. Just how you calculate a checksum and what the results are are what differentiate one checksum method from say the MD5 method. And verifying a checksum is really just a quick way to verify that the file you transfered is exactly the same file you intended to transfer. In my case, the actual file is named "debian-40r1-i386-DVD-3.iso" which my tool keeps calculating differently from what it should be.

Nevertheless, if XP has a checksum program that can use the MD5 method I'd really like to know what it is. I'll admit I don't know all the utilities within XP and I'd almost expect this to be a DOS based tool. But what is it? And how do you use it?

I have considered this but it's a bit hard if the installation is going to be done in a remote area with no Internet access. And let's face it, dialup isn't really Internet access and 160Meg over dialup could get quite painful. Otherwise, I would do just as you have suggested.

My best guess for faulty checksums might be due to dropped packets during the download. But 5 different sites at 5 different times of day?! It's looking more like some thing may be causing it, but what? I've heard of "packet shaping" and I wouldn't put it past my ISP (Comcast) to be doing something like this too! Especially before net neutrality has been legally decided even. But has anyone else experienced this? I'd call and ask/complain but all my ISP ever wants to do is ping my system and check for connectivity - not check what's really going on.

Thanks for the checksum lesson, but I wasn't born yesterday . You've effectively turned an issue of semantics into one of literal interpretation.

Let me clarify. Literally: *USUALLY* I download (save) the published MD5 checksum of a particular image, as a file, so that when I want to "verify the calculated hash" of an image against it, I don't necessarily need a browser window open at some website displaying the published MD5 checksum. Rather, I [read|calculate|get] the checksum of the image, and visually compare it with that which is contained within the little .MD5 file I saved previously.

I was merely suggesting that your 'calculating tool' was perhaps having trouble with the image's filesize, or some other aspect of this particular image file, and was being led astray.

I realize that since the other images checked out OK, it's unlikely that the 'tool' is 'broken', however, things don't always work out like they ought to, for seemingly non-existent reasons.

Anyhow, I get the impression that you are quite able, and will get to the bottom of the issue sooner or later. I don't use Windows any more, and haven't for some time, so regrettably I cannot help you with Windows' methods of calculating checksums.

Best of luck

Ahhhh.....wrong asumption on my part. I assumed you had high-speed access as you were downloading DVDs. Yes, I understand, DVDs are needed. I hope you get it sorted out.

Did you try grabbing the DVD from the primary image server ? Typically the files are on the DVD's and CD's in order of priority.. do you actually need DVD3 to complete your install ?

here is a complete list of what is on DVD 3

I always use the netinstall, so I couldn't tell you if I ever would have needed DVD 3 or not..

Yes, I tried grabbing it from the primary server as well as just about each of the USA mirrors and every darn one of them wind up giving me the file with the wrong checksum. In fact, this is what I get (MOST of the time!):

665A34012C695BD8A00E8928FA90FDC8

But this is what is SHOULD be:

e9569d806e9ea031cd3d84ad4260d212

And once again (to anyone else who may have missed it) the file I am trying to get (download) is:

debian-40r1-i386-DVD-3.iso

I probably won't even need that DVD but I have been bitten by making that mistake in the past too! I was really hoping someone might be able to point me to another site that might not be listed on Debian's list of mirror sites that might have the file. Then again, maybe it's something even easier like turning off the virus filter. Or maybe I should try using a different tool to verify the MD5 checksums with that's more compatible with Vista - any suggestions?

I just can't figure out why I'm getting non-matching checksums unless the file changed somehow and no one updated the checksum figures that are currently published.

Sorry if this is upsetting. But I recall you saying you thought you knew of a tool in XP that can calculate the checksums? I also have access to an XP machine (my laptop) so if you can recall what it is please tell me!

As far as checksums being saved in a file then yes I do that already (doesn't everyone?). Even so, whether I get the correct checksum number or "hash" via a browser or from a text file makes no difference as long as I know what it should be. I just cut it to my clipboard and I can then paste it anywhere I like (it's a "Windows" thing the Linux side hasn't quite perfected yet). So my point was that since I already know what the checksum or "hash" should be the fact that I'm not getting it means there is a problem with what I downloaded. Either that or my tool is messed up as you suggested (and again, any suggestions on what else to try) or possibly the information on the correct checksum is wrong.

Yes, actually by 'tool' I meant something inherent in XP. I'm sorry but I can't recall what the name if it was, or what the command was because I don't even know if I have ever used it myself, but it wasn't something downloaded AFAIK, it was a command that 'came with XP'.

Some ISO images are available with both an MD5 and a SHA1 checksum. I wonder if you might be able to locate a SHA1 checksum for the file (coming back to the possibility that for whatever reason, your tool isn't returning the correct value for that DVD) and verify THAT checksum instead of the md5?

http://www.google.com/search?q=Windo...en-US:official
I did a google search (link above) which returned what looks like MANY md5 tools for Windows that calculate a UNIX-standard compatible checksum. Why not try another tool (download one) OR, failing that (and with even more downloading) download a Linux LiveCD of your choice, boot it up, and use the real md5sum program to check your DVD.

It really seems unlikely that after several attempts, you repeatedly get a bad download. Regarding dropped packets corrupting the download, aren't dropped packets considered errors, and thus get corrected? I don't know, but that's what I thought... I keep coming back to the possibility that the tool isn't returning the right value.

sorry for my repetitiousness (sp?)

Oh, and here's another google search for Vista md5 tools. Looks like there are several options partway down the page. (LOL again, repeating myself, but I don't have any Windoze machines around, or I'd try one of these out for you.)
http://www.google.com/search?q=Vista...en-US:official

I usually just use md5summer in Windows.. http://www.md5summer.org/



To the OP hmm the primary image server should be correct even if the other servers are not up to date.. not sure what to tell you on that one. ever consider trying to download DVD 3 using jigdo ? or downloading it on a different system, maybe a Linux box (not that it should make a bit of difference what OS you download an image file with.. )

I don't know what to say. That MD5summer program worked and calculated the correct checksum! It's a bit convoluted in how it works but it does work and comes up with a correct MD5 checksum! It's convoluted in that I have to tell it where my text file of checksums and file names is but nothing too weird. In other words, I can't just launch it, tell it where my file is and have it calculate the checksum (like most others do).

I think I should also say that I also tried a program (a.k.a. "tool") called HashCalc from Slavasoft which also calculates the correct checksum. It even provides the checksum using other calculations too (not just MD5 but SHA1 and even CRC32 as well as many others). http://www.slavasoft.com/hashcalc/index.htm
But those are about the only programs/tools/checkers that do work that I have found (and I've been through about 8 now).

Anyway, I thank you for the suggestions. I guess I'll just have to be satisfied that something worked although I still have reservations.