'bus err' response, aimage

[Benjamin Brink]

Hi,

My first time using aimage.

Windows XP SATA laptop harddisk has been mounted via a docking
station.
Files are visible using dir command from terminal window.

Seconds of initiating the aimage command, I get a 'bus err' response.
Here's a transcript of it:

kappas-g5:/Volumes head$ ls -l
total 12
drwxr-xr-x 1 head admin 0 Apr 22 2009 DATA
drwxr-xr-x 30 head admin 1122 Feb 25 13:26 LaCie
lrwxr-xr-x 1 root admin 1 Feb 7 12:21 Macintosh HD -> /
kappas-g5:/Volumes head$ aimage /Volumes/DATA /Volumes/LaCie/Documents/
hd2.aff
im->outfile=/Volumes/LaCie/Documents/hd2.aff
Bus error

Any suggestions on how to resolve this issue?

kind regards,

Benjamin

[Simson Garfinkel]

Dear Benjamin,

aimage is no longer supported. If you wish to image in AFF format, I recommend using FTK Imager.

[tobermory]

So to write .aff files requires FTKImager which is a Windows only
app? There is now no supported tool for aff creation on non-Windows
platforms? Is there any word on aff4?

To the orig poster. I too see errors running aimage (3.2.4) on a Mac.
I got Illegal Instruction where you got Bus Error. Works fine on
Linux.

Stuart

>  smime.p7s
> 6KViewDownload

[Simson Garfinkel]

Stuart,

Things aren't as bad as you make them out to be.

First, guymager (http://guymager.sourceforge.net/) makes AFF files. And it's multi-threaded. Pretty amazing, that he got that to work with AFF! Give it a try.

Second, you can use afconvert to convert a raw file to an AFF file. I do it all the time.

Third, if you wish to take over maintenance of aimage, you are WELCOME TO DO SO!

...

Simson

> --
> You received this message because you are subscribed to the Google Groups "aff-discuss" group.
> To post to this group, send email to aff-d...@googlegroups.com.
> To unsubscribe from this group, send email to aff-discuss...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/aff-discuss?hl=en.
>

[slo.sleuth]

FTK imager is also available for Debian and Ubuntu Linux:

http://accessdata.com/support/adownloads#FTKImager

>  smime.p7s
> 6KViewDownload

[D. Schreiber]

But not the Version 3 with AFF-Support.

[tobermory]

Ah, my bad on both counts. Thanks for locating FTKImager for Linux,
and thanks Simson for pointing out affconvert. Does this mean that
affconvert and aimage are interchangeable?

FWIW I have figured out how to acquire VirtualBox .vdi files, if
anyone is interested.

Stuart

[Simson Garfinkel]

On Mar 24, 2011, at 3:41 PM, tobermory wrote:

> Ah, my bad on both counts. Thanks for locating FTKImager for Linux,
> and thanks Simson for pointing out affconvert. Does this mean that
> affconvert and aimage are interchangeable?

No. affconvert isn't designed to work with raw devices.