Re: [Qemu-devel] Creating a VM from an E01 file

[Cervellone, Adam]

I apologize for my error.  I have now re-run all the commands in the same order 
and attached a screen shot of the terminal window.  I have selected desktop as 
the location for the VMDK file to be stored and it is included in the command 
after -O vmdk.  

Thank you,
Adam Cervellone

-----Original Message-----
From: Peter Maydell [mailto:address@hidden 
Sent: Monday, July 20, 2015 9:21 AM
To: Cervellone, Adam
Cc: address@hidden
Subject: Re: Creating a VM from an E01 file

On 20 July 2015 at 14:03, Cervellone, Adam <address@hidden> wrote:
> My name is Adam Cervellone. I am a digital evidence intern at the 
> North Carolina State Crime Laboratory.  As part of my time here, I am 
> conducting a research project using the SIFT workstation to make a 
> virtual machine of an
> E01 file.  I’ve previously used this series of commands to attempt to 
> create a VM
>
> 1.            Sudo su
>
> o             SIFT password entered
>
> 2.            Mkdir /mnt/ewf1
>
> 3.            Mount_ewf.py <E01 image file path> /mnt/ewf1
>
> 4.            qemu-img convert /mnt/ewf1/<E01 image file name> -O vmdk
> <give_a_name>.vmdk
>
> I found these steps on Forensics wiki, however they have not worked.  
> I may have misinterpreted a section of the command and entered it 
> incorrectly.  Do you know of the correct way to do this or of someone 
> who may be able to help me?

You've said what you were trying to do, but not what actually happened.
"It didn't work" provides no information at all. Did it give an error message 
(if so, what?), did it do nothing, did it just hang?
Giving an exact transcript of the commands you typed and the output might be 
useful.

Identifying problems with computing has some similarities with detecting crime 
-- we need evidence to be able to draw good conclusions :-)

thanks
-- PMM

QEMU Error.png
Description: QEMU Error.png