ewfverify(1)

1ewfverify                            LOCAL                           ewfverify
2

NAME

4     ewfverify — verifies media data stored in EWF files
5

SYNOPSIS

7     ewfverify [-A codepage] [-d digest_type] [-f format] [-l log_filename]
8               [-p process_buffer_size] [-hqvVwx] ewf_files
9

DESCRIPTION

11     ewfverify is a utility to verify media data stored in EWF files.
12
13     ewfverify is part of the libewf package.  libewf is a library to access
14     the Expert Witness Compression Format (EWF).
15
16     ewf_files the first or the entire set of EWF segment files
17
18     The options are as follows:
19
20     -A codepage
21             the codepage of header section, options: ascii (default), win‐
22             dows-874, windows-932, windows-936, windows-949, windows-950,
23             windows-1250, windows-1251, windows-1252, windows-1253, win‐
24             dows-1254, windows-1255, windows-1256, windows-1257 or win‐
25             dows-1258
26
27     -d digest_type
28             calculate additional digest (hash) types besides md5, options:
29             sha1, sha256
30
31     -f format
32             specify the input format, options: raw (default), files
33             (restricted to logical volume files)
34
35     -h      shows this help
36
37     -l log_filename
38             logs verification errors and the digest (hash) to the log file‐
39             name
40
41     -p process_buffer_size
42             the process buffer size (default is the chunk size)
43
44     -q      quiet shows minimal status information
45
46     -v      verbose output to stderr
47
48     -V      print version
49
50     -w      zero sectors on checksum error (mimic EnCase like behavior)
51
52     -x      use the chunk data instead of the buffered read and write func‐
53             tions.
54

ENVIRONMENT

56     None
57

FILES

59     None
60

EXAMPLES

62     ewfverify can either verify the raw storage media data or logical file
63     data stored in EWF file(s).
64
65   To verify the raw storage media data:
66     # ewfverify floppy.E01
67     ewfverify 20110801
68
69     Verify started at: Tue Jan 11 19:21:51 2011
70
71     This could take a while.
72
73     Status: at 2%.
74             verified 32 kB (32768 bytes) of total 1.4 MiB (1474560 bytes).
75
76           ...
77
78     Status: at 100%.
79             verified 1.4 MiB (1474560 bytes) of total 1.4 MiB (1474560 bytes).
80             completion in 1 second(s) with 1 MiB/s (1474560 bytes/second).
81
82     Verify completed at: Tue Jan 11 19:21:52 2011
83
84     Read: 1.4 MiB (1474560 bytes) in 1 second(s) with 1 MiB/s (1474560 bytes/second).
85
86     MD5 hash stored in file:      ae1ce8f5ac079d3ee93f97fe3792bda3
87     MD5 hash calculated over data:          ae1ce8f5ac079d3ee93f97fe3792bda3
88
89     ewfverify: SUCCESS
90
91   To verify logical file data:
92     # ewfverify -f files logical.E01
93     ewfverify 20110111
94
95     Verify started at: Tue Jan 11 19:21:51 2011
96
97     Single file: file1.txt
98     MD5 hash stored in file:                6fef2a64afbf070a264366183698bb5e
99     MD5 hash calculated over data:          6fef2a64afbf070a264366183698bb5e
100
101           ...
102
103     Verify completed at: Tue Jan 11 19:21:52 2011
104
105     ewfverify: SUCCESS
106

DIAGNOSTICS

108     Errors, verbose and debug output are printed to stderr when verbose out‐
109     put -v is enabled. Verbose and debug output are only printed when enabled
110     at compilation.
111

BUGS

113     Please report bugs of any kind to <joachim.metz@gmail.com> or on the
114     project website: http://code.google.com/p/libewf/
115

AUTHOR

117     These man pages were written by Kees Mastwijk.
118
119     Alterations for distribution have been made by Joachim Metz.
120

COPYRIGHT

122     Copyright 2006-2014, Joachim Metz <joachim.metz@gmail.com>.
123
124     This is free software; see the source for copying conditions. There is NO
125     warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PUR‐
126     POSE.
127