applications/forensics tools

xva-img - xva-img - Assemble Citrix XEN disk image

Website: https://github.com/eriklax/xva-img
License: GPL
Vendor: cert.org
Description:
Citrix Xen uses a custom virtual appliance format for import/export called "XVA". it's basically
a strangely crafted tar-file. You don't need this program to unpack this tar-file, just use
your favourite tar unpacker (tar, gtar, bsdtar). Once unpacked you will end up with a lot of
different files, ova.xml (which contains the settings for the virtual appliance, think VMware
vmx) and a number of folders called Ref:/, this is your disks. Each of these folders contain
hundreds of files named 00000000, 00000001 with a accompanying .CHECKSUM file (SHA1). Each file
is a 1MB slice of the disk, but some of the files in the sequence will probably be missing this is
because XVA do not use compression; instead it will exclude slices of the disk that only contains
zeros (are empty). This tool can assemble the disk for you (you will end up with a RAW disk)
that can easily be mounted and modified. It can then also split the file again and generate
checksum. Once ready, you will probably want to use the "package" command to rebuild the XVA file.

Packages

xva-img-1.3-1.el6.i686 [28 KiB] Changelog by Lawrence R. Rogers (2019-06-12):
* Release 1.3-1
	Initial release

Listing created by Repoview-0.6.6-1.el6