AFFLIB 3.3 Released

9 views
Skip to first unread message

Simson Garfinkel

unread,
Aug 19, 2008, 5:12:31 PM8/19/08
to aff-announce
ANNOUNCING AFFLIB 3.3

I'm happy to announce the release of AFFLIB 3.3. You can download it
from the standard location at http://www.afflib.org/

Version 3.0 is a significant upgrade to AFFLIB which introduces the
following features:

* SUPPORT FOR VMWARE, PARALLELS, APPLE DMG DISK IMAGES

* SIGNIFICANTLY IMPROVED PERFORMANCE

================================================================
SUPPORT FOR VMWARE DISK IMAGES

AFFLIB 3.3 incorporates the disk image subsystem from the open-source
QEMU processor virtualization project. Although most of QEMU is
distributed under the GPL license, the disk subsystem is distributed
under a less restrictive license that allows any use.

As a result, forensic programs linked with AFFLIB can now
transparently access disk images stored in any of the following
formats; currently the format is specified with the indicated
extension.

So far we have only tested with VMWare .vmdk images:

* VMWare VMDK (.vmdk) (tested)

We also have the ability to add additional file types, including:
* Bochs Virtual HD Image
* cloop
* cow
* DMG
* qcow
* qcow2
* VFAT
* Parallels
* Connectix Virtual PC

Support for these will be enabled if requested.
================================================================
SIGNIFICANTLY IMPROVED PERFORMANCE

Now that the feature set for AFFLIB is largely complete, we are
beginning to pay attention to performance issues. In particular, we
found a significant problem in versions 3.0 through 3.2 that would
significantly degrade performance of disk images larger than 1GB. This
has now been addressed.

Reply all
Reply to author
Forward
0 new messages