AFFLIB 3.3 Released
Aug 19, 2008 14:09 Filed in: releases
ANNOUNCING AFFLIB 3.3
I'm happy to announce the release of AFFLIB 3.3. You can download it
from the standard location at http://www.afflib.org/
Version 3.0 is a significant upgrade to AFFLIB which introduces the
following features:
* SUPPORT FOR VMWARE, PARALLELS, APPLE DMG DISK IMAGES
* SIGNIFICANTLY IMPROVED PERFORMANCE
I'm happy to announce the release of AFFLIB 3.3. You can download it
from the standard location at http://www.afflib.org/
Version 3.0 is a significant upgrade to AFFLIB which introduces the
following features:
* SUPPORT FOR VMWARE, PARALLELS, APPLE DMG DISK IMAGES
* SIGNIFICANTLY IMPROVED PERFORMANCE
================================================================
SUPPORT FOR VMWARE DISK IMAGES
AFFLIB 3.3 incorporates the disk image subsystem from the open-source
QEMU processor virtualization project. Although most of QEMU is
distributed under the GPL license, the disk subsystem is distributed
under a less restrictive license that allows any use.
As a result, forensic programs linked with AFFLIB can now
transparently access disk images stored in any of the following
formats; currently the format is specified with the indicated extension.
So far we have only tested with VMWare .vmdk images:
* VMWare VMDK (.vmdk) (tested)
We also have the ability to add additional file types, including:
* Bochs Virtual HD Image
* cloop
* cow
* DMG
* qcow
* qcow2
* VFAT
* Parallels
* Connectix Virtual PC
Support for these will be enabled if requested.
================================================================
SIGNIFICANTLY IMPROVED PERFORMANCE
Now that the feature set for AFFLIB is largely complete, we are
beginning to pay attention to performance issues. In particular, we
found a significant problem in versions 3.0 through 3.2 that would
significantly degrade performance of disk images larger than 1GB. This
has now been addressed.
SUPPORT FOR VMWARE DISK IMAGES
AFFLIB 3.3 incorporates the disk image subsystem from the open-source
QEMU processor virtualization project. Although most of QEMU is
distributed under the GPL license, the disk subsystem is distributed
under a less restrictive license that allows any use.
As a result, forensic programs linked with AFFLIB can now
transparently access disk images stored in any of the following
formats; currently the format is specified with the indicated extension.
So far we have only tested with VMWare .vmdk images:
* VMWare VMDK (.vmdk) (tested)
We also have the ability to add additional file types, including:
* Bochs Virtual HD Image
* cloop
* cow
* DMG
* qcow
* qcow2
* VFAT
* Parallels
* Connectix Virtual PC
Support for these will be enabled if requested.
================================================================
SIGNIFICANTLY IMPROVED PERFORMANCE
Now that the feature set for AFFLIB is largely complete, we are
beginning to pay attention to performance issues. In particular, we
found a significant problem in versions 3.0 through 3.2 that would
significantly degrade performance of disk images larger than 1GB. This
has now been addressed.