Hi,
there’s a bad version of EWF Tools in the Parrot OS security edition. Cannot verify E01 files larger than 640gb, nor mount them. It can be updated after installation, but not in the live distro. Would it be possible to upgrade it in live verison? The correct version of EWF Tools is libewf-20140813.
Have a nice day
I don’t understand the point of the topic. It seems like user doesn’t understand the iso creation.
Well. I’ll try to write it differently.
At first step, I created some new images in .E01 format by using Guymager (v. 0.8.12), which is included in Parrot OS Electro Ara, with verification turned on and here is resulsts:
Drive | Size | E01 name | Size E01 | Guymager
Flashdisk | 2GB | flashdisk2gb.E01 | 1,6GB | Verify OK
Flashdisk | 64GB | flashdisk64gb.E01 | 49,2GB | Verify OK
HDD | 160GB | hdd160gb.E01 | 104,2GB | Verify OK
M2SSD | 512GB | m2ssd512gb.E01 | 213,2GB | Verify OK
HDD | 640GB | hdd640gb.E01 | 437,3GB | Verify OK
HDD | 2TB | hdd2tb.E01 | 3,7GB | Verify OK
At the second step, I tried to verify images by ewfverify (20140807 and 20140812), and then I tried to verify this images by FTK Imager with this result:
E01 name | Ewfverify v. 20140807 | Ewfverify v. 20140608 | FTK Imager v. 4.2.1.4
flashdisk2gb.E01 | Works | Works | Works
flashdisk64gb.E01 | Works | Works | Works
hdd160gb.E01 | Works | Works | Works
m2ssd512gb.E01 | Works | Works | Works
hdd640gb.E01 | Doesn‘t works | Works | Works
hdd2tb.E01 | Doesn‘t works | Works | Works
By this comparation I found out, that ewfverify v. 20140807 does’t works with images made from disks bigger than 640GB, maybe a little bit smaller, but I don’t have disk between 512GB and 640GB.
Would it be possible to replace EWF-Tools v. 20140807 with the newer version EWF-Tools v. 20140812 in the next version of Parrot OS and also add “libfuse-dev” to it, so that it will also work in Live Distro?