force EWF write

  • Thread starter Thread starter Gregor Fabritius
  • Start date Start date
G

Gregor Fabritius

hello,

as far as i understand, the commit-command of ewfmgr simply sets a flag,
so that the data on the overlay is committed next boot (if i use disk
overlay) or on shutdown (if i use ram overlay).

is it possible to force ewfmgr to commit all data stored in the overlay
_now_, so that i can be sure everything is written to disk? is there an
API-call maybe?

i want to do this for example every 10 minutes, so if the hardware is
powered off by cutting the power supply no harm to the disk (like
mentioned in
http://blogs.msdn.com/embedded/archive/2005/06/15/429225.aspx) is done
(except this happens exactly during committing).

sorry if this is a dumb question. i found no useful information about this.


tia, gregor
 
I'm no expert but does "ewfmgr c: -commitanddisable -live" work?

Thats what i use in the command prompt, it then says commiting overlay to
disk, i presume it is doing just that?

Chris
 
Hi Gregor,

Due to nature of RAM overlay system there is no way to ensure data integrity and even if there was a way for MS to do that you would
have a problem with saving FS in open state (dirty bit present).
So you should try using disk multi overlay as alternative solution since it is closer to what you desire.

Regards,
Slobodan
 
Back
Top