Header and footer o...
 
Notifications
Clear all

Header and footer of mp4 file for data carving?

4 Posts
3 Users
0 Likes
2,475 Views
(@deepman-san)
Posts: 5
Active Member
Topic starter
 

Hello everyone. I am a student and for i have created a carver (in VB.net) that is used to extract data from the image of a memory card.The carver uses the concept of header and footer of file to extract the file i.e ( avi file(header x065x086x073x032 and footer e) mpg file ( header x000x000x001x179 and footer x000x000x001x183) mp3 file( header x073x068x051x002 and footer x032x032x000) The carver do not take in consideration fragmented files.It work a bit like the scalpel program.My problem is that am not able to find the header and footer of mp4 file which i need to extract from the image.Can anyone please help me out? Its urgent. Thank you.

 
Posted : 11/02/2011 12:28 pm
(@mscotgrove)
Posts: 938
Prominent Member
 

http//www.cnwrecovery.com/html/3gp_recovery.html

The structure of MP4 is quite varied, I don't think there is a simple footer to search for.

I am working on defragmenting 3GP, MP4 files etc. If anyone would like to help me evaluate the present program, please get in touch.

 
Posted : 11/02/2011 3:43 pm
(@alexc)
Posts: 301
Reputable Member
 

I co-authored a paper with Kevin Mansell (he presented it at F3 in Novemeber) that looks at some different approaches.

Header-footer isn't so useful, but with a little understanding of the file structure you can carve pretty reliably (unless the data's fragmented…)

http//www.controlf.net/freestuff/ - it's there under "Mobile Phone Video White Paper"

Hope that helps!

 
Posted : 11/02/2011 4:10 pm
(@alexc)
Posts: 301
Reputable Member
 

Oh and I was sure Kevin had the slides from the presentation on his site but i can't see them. They should be on the F3 site if you have access though.

 
Posted : 11/02/2011 4:12 pm
Share: