[vox-tech] [FWD Re: p2v a system]

[Brian Lavender]

Some notes I gathered for converting a physisical system to a virtual
one (aka p2v).

http://jimweller.com/2008/09/linux-p2v-notes.html

----- Forwarded message from Eric Branson ------


dd if=/dev/sda bs=16k | gzip -c >/samba/mnt/system9.gz ; gzip -t /samba/mnt/system9.gz 2>/dev/null ; echo $? ;

I would say that works great, actually. I say we do this. Or (without Samba):

netcat -l -q 0 -p [port] >system9.gz ; gzip -t recv ; echo $? ;
dd if=/dev/sda bs=16k | gzip -c | netcat -q 0 [host] [port] ;

----- "Brian Lavender" <brian at brie.com> wrote:

> Duh! Here is a quick snapshot of a system. 
> 
> Boot with rescue disk.
> smb mount NAS
> dd disk to image on NAS.
> 
> dd if=/dev/sda bs=16k  | gzip | dd  of=/samba/mnt/system9.gz
> 
> In the case of restoral
> boot system with rescue disk
> smb mount NAS
> dd image to to disk
> 
> dd if=/samba/mnt/system9.gz | gunzip | dd of=/dev/sda bs=16k
> 
> I need to verify the exact syntax, but I know this works! I work with
> forensics folks and I know it is in the lab at work. I will retrieve
> it
> tomorrow.
> 
> And for Eric, who insists on signing things, there is a way to md5sum
> (or sha1sum) it too. That is if think the adversary could get the
> image
> and jack it up so that it produces the same md5sum. 
> 
> brian
> 
> On Mon, Mar 16, 2009 at 11:07:00AM -0700, Brian Lavender wrote:
> > 
> > Here are some notes for converting a host from a physical system to
> a
> > virtual system. Eric was enquiring about this one. 
> > 
> > http://jimweller.com/2008/09/linux-p2v-notes.html
> > 
> > brian
> > -- 
> > Brian Lavender
> > http://www.brie.com/brian/
> 
> -- 
> Brian Lavender
> http://www.brie.com/brian/

-- 
Eric Branson
California State University, Sacramento

----- End forwarded message -----

-- 
Brian Lavender
http://www.brie.com/brian/