ewfrecover man page

ewfrecover — exports media data stored in EWF files

Synopsis

ewfrecover [-A codepage] [-l log_filename] [-p process_buffer_size] [-t target] [-hquvVx] ewf_files

Description

ewfrecover is a utility to recover corrupt EWF files.

ewfrecover is part of the libewf package. libewf is a library to access the Expert Witness Compression Format (EWF).

ewf_files the first or the entire set of EWF segment files

The options are as follows:

-A codepage
the codepage of header section, options: ascii (default), windows-874, windows-932, windows-936, windows-949, windows-950, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257 or windows-1258
-h
shows this help
-l log_filename
logs recover errors and the digest (hash) to the log filename
-p process_buffer_size
the process buffer size (default is the chunk size)
-t target
the target file to recover to (default is recover)
-v
verbose output to stderr
-V
print version
-x
use the chunk data instead of the buffered read and write functions.

Environment

None

Files

None

Examples

ewfrecover will ask the information it needs.

Recovering a corrupted image

ewfrecover corrupt.E01 
ewfrecover 20120805 
 
Export started at: Mon Aug  6 07:09:34 2012 
 
This could take a while. 
 
...
Export completed at: Mon Aug 6 07:09:34 2012 MD5 hash calculated over data: d41d8cd98f00b204e9800998ecf8427e ewfrecover: SUCCESS

Trying to recover a non-corrupted image

ewfrecover notcorrupt.E01 
ewfrecover 20120805 
 
EWF file(s) are not corrupted.

Diagnostics

Errors, verbose and debug output are printed to stderr when verbose output -v is enabled. Verbose and debug output are only printed when enabled at compilation.

Bugs

Please report bugs of any kind to <joachim.metz@gmail.com> or on the project website: http://code.google.com/p/libewf/

Author

These man pages were written by Joachim Metz.

See Also

ewfacquire(1), ewfacquirestream(1), ewfexport(1), ewfinfo(1), ewfmount(1), ewfverify(1)

Referenced By

ewfacquire(1), ewfacquirestream(1), ewfexport(1), ewfinfo(1), ewfmount(1), ewfverify(1).

January 19, 2014