I am trying to acquire image of a laptop hard drive. I booted with encase boot disk and put the suspect machine into server mode. However, when I try to acquire image from encase machine, it start and the suspect machine says "out of memory" and it stops.
Why is that?
Thanks
I am trying to acquire image of a laptop hard drive. I booted with encase boot disk and put the suspect machine into server mode. However, when I try to acquire image from encase machine, it start and the suspect machine says "out of memory" and it stops.
Why is that?
Usually best to pass such questions on to Guidance customer support. (But I'd expect they won't answer, as the boot disk isn't supported anymore…)
So …
DOS. I usually get that when I run the 5.05 version off the default DOS boot disk – the 4.x version usually runs better. (Of course, if you're trying to do a network acquiry, you need to corresponding release of Encase at the other end – 5.x or 4.x. If you don't, it won't work anyway.)
If you know DOS memory configuration inside out, you might try to tweak the corresponding boot options – perhaps it needs more extended or expanded memory to be allocated. Me, I don't want to be reminded of that mess. Using DOS software with outdated and difficult-to-update device drivers is a dead end – it's useful only in very special circumstances.
Use LinEn off a Unix boot CD instead if you must use suspect hardware for acquiry.
athulin,
Many thanks to you. The following information you have given below solved my problem.
I have installed encase 4 and it worked just fine.
D
DOS. I usually get that when I run the 5.05 version off the default DOS boot disk – the 4.x version usually runs better. (Of course, if you're trying to do a network acquiry, you need to corresponding release of Encase at the other end – 5.x or 4.x. If you don't, it won't work anyway.)