☰

将磁盘映像从 Encase (E01) 转换为 Raw 格式

tag-icon • tag-icon command-line file-format conversion disk-image format-conversion
将磁盘映像从 Encase (E01) 转换为 Raw 格式

我正在尝试按照此处给出的说明将 EnCase 格式转换为 Raw 格式页。

发生以下情况：

manu@ubuntu:~/Downloads$ ewfexport nps-2010-emails.E01 
The program 'ewfexport' is currently not installed. You can install it by typing:
sudo apt-get install ewf-tools
manu@ubuntu:~/Downloads$ sudo apt-get install ewf-tools
[sudo] password for manu: 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following NEW packages will be installed:
  ewf-tools
0 upgraded, 1 newly installed, 0 to remove and 503 not upgraded.
Need to get 162 kB of archives.
After this operation, 438 kB of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu/ quantal/universe ewf-tools amd64 20100226-1build2 [162 kB]
Fetched 162 kB in 2s (65.7 kB/s)    
Selecting previously unselected package ewf-tools.
(Reading database ... 158500 files and directories currently installed.)
Unpacking ewf-tools (from .../ewf-tools_20100226-1build2_amd64.deb) ...
Processing triggers for man-db ...
Setting up ewf-tools (20100226-1build2) ...
manu@ubuntu:~/Downloads$ ewfexport nps-2010-emails.E01 
ewfexport 20100226 (libewf 20100226, libuna 20091031, libbfio 20091114, zlib 1.2.3.4, libcrypto 1.0.0, libuuid)

Information for export required, please provide the necessary input
Export to file format (raw, ewf, smart, ftk, encase1, encase2, encase3, encase4, encase5, encase6, linen5, linen6, ewfx) [raw]: raw
Target path and filename with extension or - for stdout: /user/manu/Downloads nps
Start export at offset (0 >= value >= 10485760) [0]: 0
Amount of bytes to export (0 >= value >= 10485760) [10485760]: 

Export started at: Fri Jun 13 02:54:12 2014

This could take a while.

Unable to open output.
export_handle_open_output: unable to open file: /user/manu/Downloads nps.

我不得不从终端复制粘贴，因为我是新手，不允许发布超过两个链接或任何图片。这个问题非常重要，因为它是我目前正在招募的暑期实习生的必需品。

请帮助我理解中间提示信息并将文件从包住到生的格式。数字语料库（EnCase 文件）可从以下网址下载：数字语料库。

答案1

从消息中应该可以清楚看出问题所在

export_handle_open_output: unable to open file: /user/manu/Downloads nps.

即您指定的路径和/或文件名无效。首先，您确定您的主目录位于 下吗/user？标准 Linux 位置是/home（尽管如果您在公司环境中可能会有所不同），因此如果您尝试将原始文件保存为nps您自己的下载目录，则完整路径和带扩展名的文件名可能类似于/home/manu/Downloads/nps。

[提示的措辞不清楚，但它似乎实际上需要一个连续的，而不是像]target/path/to/filename.ext这样的空格分隔的列表target/path/to file ext

或者，由于您正在从该目录运行文件ewfexport，因此您只需使用它.来指示当前目录，即

Target path and filename with extension or - for stdout: ./nps

虽然我个人可能会使用类似的东西./nps-2010-emails.raw来使图像的来源更加明显，即

Target path and filename with extension or - for stdout: ./nps-2010-emails.raw

相关内容