ewfinfo — show meta data stored in EWF files

       These man pages were written by Kees Mastwijk.

       Alterations for distribution have been made by Joachim Metz.

       Please  report  bugs  of  any  kind  on  the  project  issue  tracker:  https://github.com/libyal/libewf-
       legacy/issues

       Copyright 2006-2014, Joachim Metz <joachim.metz@gmail.com>.

       This is free software; see the source for  copying  conditions.  There  is  NO  warranty;  not  even  for
       MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

ewfinfo is a utility to show meta data stored in EWF files.

       ewfinfo  is  part  of  the  libewf package.  libewf is a library to access the Expert Witness Compression
       Format (EWF).

       ewf_files the first or the entire set of EWF segment files

       The options are as follows:

       -Acodepage
               the codepage of header section, options: ascii (default), windows-874, windows-932,  windows-936,
               windows-949,  windows-950,  windows-1250, windows-1251, windows-1252, windows-1253, windows-1254,
               windows-1255, windows-1256, windows-1257 or windows-1258

       -ddate_format
               the date format, options: ctime (default), dm (day/month), md (month/day), iso8601

       -e      only show EWF read error information

       -fformat
               specify the output format, options: text (default), dfxml

       -h      shows this help

       -i      only show EWF acquiry information

       -m      only show EWF media information

       -v      verbose output to stderr

       -V      print version

       Errors, verbose and debug output are printed to stderr when verbose output -v  is  enabled.  Verbose  and
       debug output are only printed when enabled at compilation.

       None

       # ewfinfo -d dm floppy.E01
       ewfinfo 20120805

       Acquiry information
               Case number:            1
               Description:            Floppy
               Examiner name:          John D.
               Evidence number:        1.1
               Notes:                  Just a floppy in my system
               Acquiry date:           09/12/2006 10:00:12
               System date:            09/12/2006 10:00:12
               Operating system used:  Linux
               Software version used:  20061209
               Password:               N/A

       EWF information
               File format:            EnCase 5
               Sectors per chunk:      64
               Error granularity:      64
               Compression method:     deflate
               Compression level:      no compression
               Set identifier:         869910fc-e143-4908-9328-afedf4a7be1e

       Media information
               Media type:             removable disk
               Is physical:            no
               Bytes per sector:       512
               Number of sectors:      2880
               Media size:             1.4 MiB (1474560 bytes)

       Digest hash information
               MD5:                    ae1ce8f5ac079d3ee93f97fe3792bda3

       None

       ewfinfo — show meta data stored in EWF files

ewfacquire(1), ewfacquirestream(1), ewfexport(1), ewfmount(1), ewfrecover(1), ewfverify(1)

libewf                                          January 19, 2014                                       ewfinfo()

ewfinfo [-Acodepage] [-ddate_format] [-fformat] [-ehimvV] ewf_files