dcfldd - dd on steroids

Miscellaneous tools
Post Reply
Message
Author
scsijon
Posts: 1596
Joined: Thu 24 May 2007, 03:59
Location: the australian mallee
Contact:

dcfldd - dd on steroids

#1 Post by scsijon »

Came across this during a hunt, and having tried it I think it may be worth adding to the default puppyset. It's not slow to run either.
dcfldd is an enhanced version of GNU dd with features useful for forensics and security. Based on the dd program found in the GNU Coreutils package, dcfldd has the following additional features:

Hashing on-the-fly - dcfldd can hash the input data as it is being transferred, helping to ensure data integrity.
Status output - dcfldd can update the user of its progress in terms of the amount of data transferred and how much longer operation will take.
Flexible disk wipes - dcfldd can be used to wipe disks quickly and with a known pattern if desired.
Image/wipe Verify - dcfldd can verify that a target drive is a bit-for-bit match of the specified input file or pattern.
Multiple outputs - dcfldd can output to multiple files or disks at the same time.
Split output - dcfldd can split output to multiple files with more configurability than the split command.
Piped output and logs - dcfldd can send all its log data and output to commands as well as files natively.
Details on it can be found at https://linuxx.info/dcfldd/, https://linux.die.net/man/1/dcfldd, and http://dcfldd.sourceforge.net/, and although it's not new, it does have some 'interesting additions' and doesn't seem to need updating.

Most linux bases seem to have it available as a standard package, so i'm not going to package it unless someone wants it pet'd as it's only one file and I intend to add it to Quirky Thud menagerie.

The best example command of what it can do (internally) is:

dcfldd if=/dev/source hash=md5,sha512 hashwindow=1G md5log=md5.txt sha512log=sha512.txt \hashconv=after bs=512 conv=noerror,sync split=1G splitformat=aa of=image.dd

just to give you an idea of it's uses.

Post Reply