LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 12-05-2017, 11:58 AM   #1
helpmepls
LQ Newbie
 
Registered: Dec 2017
Posts: 1

Rep: Reputation: Disabled
Mountain an image - error


Hi i am using Ubuntu 64bit and Vmware workstation 14 PRO with SIFT installed.

Im trying to mount an image of a disk for forensic examination but i keep getting an error and Im not sure how to move forward.

I'm using the command

mount -t vfat -o ro,noexec image.dd /mnt/analysis

which gives me the error

mount: wrong fs type, bad option, bad superblock on /dev/loop0, missing codepage or helper program, or other error

In some cases useful info is found in syslog - try
dmesg | tail or so.

Please help i've got to write a report on the disk for tomorrow and this stopping me from doing any more
 
Old 12-05-2017, 12:12 PM   #2
rtmistler
Moderator
 
Registered: Mar 2011
Location: Sutton, MA. USA
Distribution: MINT Debian, Angstrom, SUSE, Ubuntu
Posts: 5,966
Blog Entries: 12

Rep: Reputation: 2036Reputation: 2036Reputation: 2036Reputation: 2036Reputation: 2036Reputation: 2036Reputation: 2036Reputation: 2036Reputation: 2036Reputation: 2036Reputation: 2036
Are you trying to mount as root or using the sudo command qualifier?

The error report suggested you look at your system log, "dmesg | tail or so" to view information about this disk image. Have you done this?

This is for a report and you're supposed to do a forensic analysis of this disk image. You must have done some commands on the disk image to determine information about it. What have you tried?

And right now your report says: "There's no valid file system on this disk image." which may or may not be an incorrect statement. However it behooves you to do some additional diagnosis of the disk image to see if you can find out if there is any actual file system.

Perhaps you could try to copy this disk image to a USB thumbstick using the dd command and then analyze the USB thumbstick when you insert it and remove it from your system.
 
Old 12-06-2017, 12:11 AM   #3
AwesomeMachine
Senior Member
 
Registered: Jan 2005
Location: USA and Italy
Distribution: Debian testing/sid; OpenSuSE; Fedora; Mint
Posts: 3,273

Rep: Reputation: 587Reputation: 587Reputation: 587Reputation: 587Reputation: 587Reputation: 587
You want
Code:
$ mount -t vfat -o ro,noexec.loop image.dd /mnt/analysis
 
Old Yesterday, 10:43 AM   #4
giis
Member
 
Registered: Nov 2013
Location: Third Rock from Moon
Distribution: RPM/DEB based and LFS
Posts: 63

Rep: Reputation: Disabled
Whats the output of below command?

Quote:
file image.dd
 
Old Yesterday, 03:28 PM   #5
jefro
Moderator
 
Registered: Mar 2008
Posts: 17,175

Rep: Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562
Test md5 of your copy and original.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
dpkg error - Setting up linux-image-3.16.0-4-586 and linux-image-3.16.0-4-686-pae kerrymanbren Debian 6 08-14-2016 05:38 AM
Error 502 : Display Fatal Error Message, Error pushing image, dbpaCT failed! HaloCheng Linux - Newbie 1 09-12-2012 01:02 PM
Kernel image corrupted : Wrong Image Format for bootm command ERROR: can't get kernel blink182 Linux - Embedded & Single-board computer 0 05-13-2011 04:11 AM
Trying to convert VMWare image to raw using Qemu: error - "image open" JamesHall Linux - Software 1 07-22-2008 05:59 AM
Networking Mountain To Climb bytebrowser Linux - Networking 2 07-02-2003 11:37 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 10:59 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration