1ewfexport LOCAL ewfexport
2
4 ewfexport — exports media data stored in EWF files
5
7 ewfexport [-t target_file] [-hsqvV] ewf_files
8
10 ewfexport is a utility to export media data stored in EWF files.
11
12 ewfexport is part of the libewf package. libewf is a library to support
13 the Expert Witness Compression Format (EWF). libewf supports both the
14 SMART format (EWF-S01) and the EnCase format (EWF-E01). libewf currently
15 does not support the Logical Volume format (EWF-L01). EWF-X is an expir‐
16 imental format intended for testing purposes to enhance the EWF format.
17 libewf allows you to read and write media data in the EWF format.
18
19 ewf_files are the EWF file(s) to read the meta data from.
20
21 The options are as follows:
22
23 -h shows this help
24
25 -q quiet shows no status information
26
27 -s swap byte pairs of the media data (from AB to BA) (use this for
28 big to little endian conversion and vice versa)
29
30 -t target_file
31 target file to export to (default is stdout)
32
33 -v verbose output to stderr
34
35 -V print version
36
38 None
39
41 None
42
44 ewfexport will ask the information it needs.
45
46 # ewfexport -t floppy.raw floppy.E01
47 ewfexport 20070512 (libewf 20070512, zlib 1.2.3, libcrypto 0.9.8, libuuid)
48
49 Information for export required, please provide the necessary input
50 Start export at offset (0 >= value >= 1474560) [0]:
51 Amount of bytes to export (0 >= value >= 1474560) [1474560]:
52
53 Export started at: Sat May 12 19:19:40 2006
54
55 This could take a while.
56
57 Status: at 2%.
58 exported 32 kB (32768 bytes) of total 1.4 MB (1474560 bytes).
59
60 ...
61
62 Status: at 100%.
63 exported 1.4 MB (1474560 bytes) of total 1.4 MB (1474560 bytes).
64 completion in 1 second(s) with 1 MB/s (1474560 bytes/second).
65
66 Export completed at: Sat May 12 19:19:41 2006
67
68 Written: 1.4 MB (1474560 bytes) in 1 second(s) with 1 MB/s (1474560 bytes/second).
69
71 Errors, verbose and debug output are printed to stderr when verbose out‐
72 put -v is enabled. Verbose and debug output are only printed when
73 enabled at compilation.
74
76 Please report bugs of any kind to <forensics@hoffmannbv.nl> or on the
77 project website: https://libewf.uitwisselplatform.nl/
78
80 These man pages were written by Kees Mastwijk. Alterations for distribu‐
81 tion have been made by Joachim Metz.
82
84 Copyright 2006-2007 Kees Mastwijk, Hoffmann Investigations <foren‐
85 sics@hoffmannbv.nl> and contributors. This is free software; see the
86 source for copying conditions. There is NO warranty; not even for MER‐
87 CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
88
90 ewfacquire(1), ewfacquirestream(1), ewfinfo(1), ewfverify(1)
91
92libewf May 12, 2007 libewf