Imager speed test r...
 
Notifications
Clear all

Imager speed test results

10 Posts
6 Users
0 Likes
684 Views
EricZimmerman
(@ericzimmerman)
Posts: 222
Estimable Member
Topic starter
 

i wanted to pass along the data for my imager testing.

The results are rather interesting IMO

http//goo.gl/Ln4eby

It is best to click View | List when reviewing the #s because you can
filter/sort etc much easier.

please let me know if you have any suggestions for additional testing.

comments and feedback welcome!

 
Posted : 04/10/2013 12:04 am
Adam10541
(@adam10541)
Posts: 550
Honorable Member
 

Thanks Eric, love the level of detail you've gone to here.

It's always interesting to see just how effective the 'fast adaptive' compression of XWF is, and also nice to see in terms of speed and performance it's one of the fastest tools out there.

I've done somewhat limited testing myself and have always staunchly maintained XWF was much faster that FTK imager so it's somewhat gratifying to see your much more robust testing methods show the same.

Not surprised to see EnCase results, great forensic software suite but from the day I first used it to image hard drives it's always felt somewhat clumsy compared to most other tools.

Do you have any TD2's to throw into the mix? I'd be very curious to see if there is much improvement from TD2 to TD3 models.

Thanks again for the time an effort putting this together.

 
Posted : 04/10/2013 6:30 am
EricZimmerman
(@ericzimmerman)
Posts: 222
Estimable Member
Topic starter
 

Thanks!

No td2s in house unfortunately

I may have a few more hardware devices coming

 
Posted : 04/10/2013 6:39 am
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
 

Nice comparison, although a little surprised at the Guymager results, little slower than expected.

[Edit] Found tabs at bottom..answers my question! [/Edit]

I would consider doing a test against a DEFT 8 installation as opposed to live cd (64bit) using Guymager without a write blocker (we connect to USB 3 dock directly), as we have found this to be very quick.

 
Posted : 04/10/2013 12:11 pm
(@athulin)
Posts: 1156
Noble Member
 

please let me know if you have any suggestions for additional testing.

comments and feedback welcome!

Interesting!

The three target disks seem to be planned for ATTO benchmarks – I hope this will show what sustained write transfer they manage. This will help minimize any platform and HDD, so that the speed of the imager software itself can be estimated more clearly.

As it is, the Dell RAID target performance is difficult to evaluate even though the specs of the two other can be found on the net. (The Logicube Talon test is on the slower disk – about half as fast as the other in terms of sustained rates – which just might affect the result a little.)

 
Posted : 04/10/2013 4:58 pm
EricZimmerman
(@ericzimmerman)
Posts: 222
Estimable Member
Topic starter
 

Talon was written to a 1.5 TB Seagate since it couldnt handle the 3TB drive the other ones used.

i doubt it would have done better against the 3tb tho as it was still a 7200 RPM drive.

ATTO is done.

see spreadsheet for URLs to results

 
Posted : 04/10/2013 6:01 pm
(@thepm)
Posts: 253
Reputable Member
 

The Talon can't handle this specific 3 TB drive or anything bigger than 2.2TB?

 
Posted : 04/10/2013 6:29 pm
EricZimmerman
(@ericzimmerman)
Posts: 222
Estimable Member
Topic starter
 

Well, the specific drive wasnt the issue, just the capacity.

i should have Talon E and a Falcon tested soon

 
Posted : 04/10/2013 6:30 pm
Bulldawg
(@bulldawg)
Posts: 190
Estimable Member
 

Eric,
Once again, thank you for this test. For those of us who don't have your resources this is very helpful. I might finally jump into X-Ways after seeing this. At least I could image using X-Ways if I continue to use EnCase as my primary examination tool.

Do you use the TD3 pretty regularly? While it is better than my TD1, I've not been impressed with the TD3 for basic imaging. It's noisy, the TDS1 is an industrial design disaster, it's not as fast as I would like, and mine died on my during a firmware update and Tableau had to replace it. It's the first Tableau product I've had to RMA. Have you had good luck with it?

 
Posted : 04/10/2013 6:57 pm
EricZimmerman
(@ericzimmerman)
Posts: 222
Estimable Member
Topic starter
 

ive used TD1 and the 3 here and there but i dont do a ton of hardware based imaging. for the times ive used it it has worked OK. the newer TD3 trays have docks in them whereas the ones i have require screws to keep the drive in. its a bit of a pain.

the time savings can be considerable by using one of the better performing apps. I like the fact that with guymager i can connect as many devices as i have and start the imaging all at once. when i come in in the morning, all of em are done. this of course assumes you can connect that many devices to your imaging station, but if you can get by that you can queue up a bunch of imaging tasks and walk away.

 
Posted : 04/10/2013 7:01 pm
Share: