First off we need to attach our freshly wiped drive to either a Linux computer or boot our Windows box with a Linux Boot CD, like Helix or SMART. Once booted we need to open a terminal and identify the attached disk (dmesg is your friend).
All commands are run as root.
Once we know how our Evidence drive has been recognised we can use the Fdisk program to double check and list the partitions (if any) on our Evidence drive. By using the -l switch we can list the partitons.
OK, we can see from the above screenshot that our drive /dev/sdc has no partitions and we know need to use the Fdisk program in interactive mode.
The command is;
fdisk /dev/sdc
We then have to choose the create new partition option by pressing 'n', we now need to choose the partition type, in this case a primary partition, so press press 'p' and 'enter' and then select partition number 1 by pressing 'enter'. As we are going to use the whole drive for the FAT32 volume we just need to hit enter for the start cylinder and last cylinder.
Fdisk will by default set up the partition as a type 83 Linux partition ( Why not this is Linux after all!), but we need to change the partition type to FAT32. The fdisk program allows us to do this with the toggle command. Press 't' and we are now presented with the partition type toggle option. A good idea when starting out is to press 'L' to list the partition types.
The below screenshot shows the whole list of supported partition types ( a few more than Windows!). The one we are interested in is type 'c' WIN95 FAT32 (LBA). Essentially 'b' and 'c' are the same and will create a FAT32 partition type, however, type 'c' will use LBA addressing which is needed for large disks and should always be used.
To change the partition type we simply type 'c' at the prompt.
As the above screenshot shows the partiton type is reported as being changed to type c.
All the changes so far are onlt written to RAM and no actual changes have been made to the disk. We need to commit the changes to disk by using the write option. So simply we press 'w' to commit the changes to disk and write the new partition table.
THe above screenshoot shows the changes being commmited to disk and we are returned to the shell.
The next step we need to do is to format the partiton and create the filesystem. To do do this we are going to use the mkdosfs program. To create a FAT32 filesystem in our newly created partition we are going to use the following command.
mkdosfs -F 32 -n Evidence /dev/sdc1
-F Tells the program the number of FAT's to use
-n Tells the program to name the volume Evidence
That's it we are done and our partition and filesystem has been created. To gain access to the new volume in Linux we would need to mount the volume first.
All commands are run as root.
Once we know how our Evidence drive has been recognised we can use the Fdisk program to double check and list the partitions (if any) on our Evidence drive. By using the -l switch we can list the partitons.
OK, we can see from the above screenshot that our drive /dev/sdc has no partitions and we know need to use the Fdisk program in interactive mode.
The command is;
fdisk /dev/sdc
We then have to choose the create new partition option by pressing 'n', we now need to choose the partition type, in this case a primary partition, so press press 'p' and 'enter' and then select partition number 1 by pressing 'enter'. As we are going to use the whole drive for the FAT32 volume we just need to hit enter for the start cylinder and last cylinder.
Fdisk will by default set up the partition as a type 83 Linux partition ( Why not this is Linux after all!), but we need to change the partition type to FAT32. The fdisk program allows us to do this with the toggle command. Press 't' and we are now presented with the partition type toggle option. A good idea when starting out is to press 'L' to list the partition types.
The below screenshot shows the whole list of supported partition types ( a few more than Windows!). The one we are interested in is type 'c' WIN95 FAT32 (LBA). Essentially 'b' and 'c' are the same and will create a FAT32 partition type, however, type 'c' will use LBA addressing which is needed for large disks and should always be used.
To change the partition type we simply type 'c' at the prompt.
As the above screenshot shows the partiton type is reported as being changed to type c.
All the changes so far are onlt written to RAM and no actual changes have been made to the disk. We need to commit the changes to disk by using the write option. So simply we press 'w' to commit the changes to disk and write the new partition table.
THe above screenshoot shows the changes being commmited to disk and we are returned to the shell.
The next step we need to do is to format the partiton and create the filesystem. To do do this we are going to use the mkdosfs program. To create a FAT32 filesystem in our newly created partition we are going to use the following command.
mkdosfs -F 32 -n Evidence /dev/sdc1
-F Tells the program the number of FAT's to use
-n Tells the program to name the volume Evidence
That's it we are done and our partition and filesystem has been created. To gain access to the new volume in Linux we would need to mount the volume first.
No comments:
Post a Comment