From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=3.0 tests=DKIM_SIGNED,DKIM_VALID, DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id A3DCDC432C3 for ; Thu, 14 Nov 2019 17:16:01 +0000 (UTC) Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 6B33D206F4 for ; Thu, 14 Nov 2019 17:16:01 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=fau.de header.i=@fau.de header.b="drJWESGY" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 6B33D206F4 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=fau.de Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Received: from localhost ([::1]:60125 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iVIiu-0000OR-ET for qemu-devel@archiver.kernel.org; Thu, 14 Nov 2019 12:16:00 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:42192) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iVHjP-0002xt-V2 for qemu-devel@nongnu.org; Thu, 14 Nov 2019 11:12:30 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iVHjO-00024B-E0 for qemu-devel@nongnu.org; Thu, 14 Nov 2019 11:12:27 -0500 Received: from mx-rz-1.rrze.uni-erlangen.de ([131.188.11.20]:33525) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1iVHjK-0001uq-MT; Thu, 14 Nov 2019 11:12:23 -0500 Received: from mx-rz-smart.rrze.uni-erlangen.de (mx-rz-smart.rrze.uni-erlangen.de [IPv6:2001:638:a000:1025::1e]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) (No client certificate requested) by mx-rz-1.rrze.uni-erlangen.de (Postfix) with ESMTPS id 47DRMJ4wcNz8tb0; Thu, 14 Nov 2019 17:12:12 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fau.de; s=fau-2013; t=1573747932; bh=TFW8IRQQAQ83C3ERCW/pMN6KV0BPOO1zLXfNhSWbKsI=; h=From:To:Subject:Date:From:To:CC:Subject; b=drJWESGYh0S4ZrgVPmRTd8T25RH0SYKY46bDAmczybNE/Vv0P2R08tO8uUv5EaYJR bLT2jIC2BBSMQuF0M/iZzNdTTeDoUb/4SEo3IUununP6lfvCBMjPqq3XwvS3wcJyRi rbjaTbuzIw/h6VgkO923zl+aLS5rH8oLubUAMLo4VGBnFNOwWVb+Fya9b/1pPJPIaM 6kDz8fWY5Oqk3bXI34jnILBxeaFFAc2CQ286S91vVYFNWpfy6oXPLVFayXgf+SF5+8 OI7mRSMI82XNgjv6zrCR3y9JTqim/SMhnT95SL7H0GXIl5LBgirqvUr8fTXwcRL78Z sSXPdxtLSFsIg== X-Virus-Scanned: amavisd-new at boeck1.rrze.uni-erlangen.de (RRZE) X-RRZE-Flag: Not-Spam X-RRZE-Submit-IP: 131.188.31.97 Received: from LenovoJS (faui1-97.informatik.uni-erlangen.de [131.188.31.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: U2FsdGVkX1+CZ0g9ytG5i8NPflQjkaOmK8al27qIWro=) by smtp-auth.uni-erlangen.de (Postfix) with ESMTPSA id 47DRMF38Gcz8tNx; Thu, 14 Nov 2019 17:12:09 +0100 (CET) From: To: , Subject: Convert VMDK to RAW Date: Thu, 14 Nov 2019 17:12:14 +0100 Message-ID: <009201d59b06$475883f0$d6098bd0$@fau.de> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0093_01D59B0E.A91CEBF0" X-Mailer: Microsoft Outlook 16.0 Content-Language: de Thread-Index: AdWbAvRCCzVB3tUBQxKkTQEQDKtfLg== X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 131.188.11.20 X-Mailman-Approved-At: Thu, 14 Nov 2019 12:11:33 -0500 X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Sender: "Qemu-devel" This is a multipart message in MIME format. ------=_NextPart_000_0093_01D59B0E.A91CEBF0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Ladies and Gentlemen, I am a PhD student at the Friedrich-Alexander-University Erlangen-Nuremberg in Bavaria, Germany and am currently working on a forensic reconstruction tool. The tool can be used to analyze physical and virtual hard disks and to reconstruct files. I would now like to extend the tool so that it is able to analyze VMDK files and convert them to raw. Unfortunately I have not been able to understand how to correctly unpack and assemble VMDK containers. Since qemu is able to convert VMDK to raw, I wanted to ask you if you could explain to me how to put the grains together? Many thanks and greetings Janine Schneider ------=_NextPart_000_0093_01D59B0E.A91CEBF0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Ladies and = Gentlemen,

 

I am a PhD student at the Friedrich-Alexander-University = Erlangen-Nuremberg in Bavaria, Germany and am currently working on a = forensic reconstruction tool. The tool can be used to analyze physical = and virtual hard disks and to reconstruct files. I would now like to = extend the tool so that it is able to analyze VMDK files and convert = them to raw. Unfortunately I have not been able to understand how to = correctly unpack and assemble VMDK containers. Since qemu is able to = convert VMDK to raw, I wanted to ask you if you could explain to me how = to put the grains together?

 

Many thanks and = greetings

Janine Schneider

------=_NextPart_000_0093_01D59B0E.A91CEBF0--