Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
June 8th, 2010, 8:52
I was doing secondary pass(reverse imaging) using DDI. The imaging was slow and seems to take few days. I don't want to tie up DDI for few days continuously as I may need to do some short jobs using DDI. Is there anyway I can pause the imaging and do other jobs and then continue from the point I left.
Any help from DDI users will be greatly appreciated.
Cheers
-Jag
June 8th, 2010, 9:42
Just stop the process where you are.
Shut down the pc, attach other drives and make image.
After that shut down again, reattach patient and target drive an you can continue where you left.
Dobre
June 8th, 2010, 10:35
Dobre is right. Info is on ur distanation drive. It will hold the position of the last imaging attempt.
June 8th, 2010, 10:54
Also, if you are trying to image the entire drive, that may not even be necessary. If you are using the latest version, you can map out the sectors that contain the boot partitions and then use disk explorer to build a virtual file system. From there you can just select the areas of the drive that you want to image, so that you can avoid imaging things like the operating system or the slack space on the drive. This really helps to speed up the process.
June 8th, 2010, 11:36
If you have the latest forensic DDI, it maps out the last known action. That is, you can stop the process and start again at anytime. It will pickup from where it left off.
June 8th, 2010, 11:54
gtd4242 wrote:Also, if you are trying to image the entire drive, that may not even be necessary. If you are using the latest version, you can map out the sectors that contain the boot partitions and then use disk explorer to build a virtual file system. From there you can just select the areas of the drive that you want to image, so that you can avoid imaging things like the operating system or the slack space on the drive. This really helps to speed up the process.
wondered what the image explorer was for, how does that work?
that sounds like a great idea
thanks
andy
June 8th, 2010, 23:49
dobrevjetser wrote:Just stop the process where you are.
Shut down the pc, attach other drives and make image.
After that shut down again, reattach patient and target drive an you can continue where you left.
Dobre
How do I stop the process?. Press Esc?. It goes to inactive state and then when I reconnect again and select Continue from last know state it is in Inactive state still. How do I restart the imaging after I reconnect?
Cheers
-Jag
June 9th, 2010, 2:46
You mean that if you select 'continue from last known state' it is not working ?
You are not using a second drive to store the sectormap ? That could explain things if you dont change this drive togethet with the target drive.
If not, then there is something wrong and you should contact Deepspar technical support.
Dobre
June 9th, 2010, 23:45
I managed start imaging by setting to MaxLBA and Secondary pass.Thanks for all you input and support from DDI
Cheers
-Jag
Powered by phpBB © phpBB Group.