exports media data stored in EWF files
ewfrecoveris a utility to recover corrupt EWF files.
ewfrecoveris part of the
libewfis a library to access the Expert Witness Compression Format (EWF). ewf_files the first or the entire set of EWF segment files The options are as follows:
- the codepage of header section, options: ascii (default), windows-874, windows-932, windows-936, windows-949, windows-950, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257 or windows-1258
- shows this help
- logs recover errors and the digest (hash) to the log filename
- the process buffer size (default is the chunk size)
- the target file to recover to (default is recover)
- verbose output to stderr
- print version
- use the chunk data instead of the buffered read and write functions.
ewfrecoverwill ask the information it needs.
Recovering a corrupted image¶
ewfrecover corrupt.E01 ewfrecover 20120805 Export started at: Mon Aug 6 07:09:34 2012 This could take a while.Export completed at: Mon Aug 6 07:09:34 2012 MD5 hash calculated over data: d41d8cd98f00b204e9800998ecf8427e ewfrecover: SUCCESS
Trying to recover a non-corrupted image¶
ewfrecover notcorrupt.E01 ewfrecover 20120805 EWF file(s) are not corrupted.
DIAGNOSTICS¶Errors, verbose and debug output are printed to stderr when verbose output -v is enabled. Verbose and debug output are only printed when enabled at compilation.
BUGS¶Please report bugs of any kind to <firstname.lastname@example.org> or on the project website: http://code.google.com/p/libewf/
AUTHOR¶These man pages were written by Joachim Metz.
COPYRIGHT¶Copyright 2006-2014, Joachim Metz <email@example.com>. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
SEE ALSO¶ewfacquire(1), ewfacquirestream(1), ewfexport(1), ewfinfo(1), ewfmount(1), ewfverify(1)
|January 19, 2014||libewf|