A method of analyzing and extracting qcow2 and qcow3 mirror image files

A technology of image files and header files, applied in file systems, file access structures, program control design, etc., can solve problems such as complicated operations, inability to obtain multiple user data at the same time, and inability to obtain accidentally deleted data, and achieve fast file speed. Effect

Inactive Publication Date: 2019-01-25
SICHUAN QIAODUOTIANGONG PRECISION EQUIP CO LTD
View PDF4 Cites 4 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0006] 3. You need to use tools to open the virtual machines in the qcow2 and qcow3 images
[0007] 4. Cannot obtain multiple user data at the same time
[0008] 5. Only the data displayed by the current virtual machine can be obtained, and the data deleted by mistake cannot be obtained
[0009] The above operations are complex and require professionals to complete data extraction, which is not conducive to simple, fast and efficient data extraction

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A method of analyzing and extracting qcow2 and qcow3 mirror image files
  • A method of analyzing and extracting qcow2 and qcow3 mirror image files
  • A method of analyzing and extracting qcow2 and qcow3 mirror image files

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0075] The present invention will be further elaborated below in conjunction with the accompanying drawings and embodiments.

[0076] figure 1 The general flowchart of the method provided by the present invention is shown; it is worth noting that the qcow2 and qcow3 image files have the same data structure, so the method for parsing and extracting the qcow2 image file is the same.

[0077] figure 2 Shows the data structure diagram of the qcow3 image file in the embodiment of the present invention, including the addressing and mapping relationship between the first-level table, the second-level table and the cluster; as figure 2 As shown, the qcow3 image file is composed of multiple fixed unit structures, that is, clusters. The address of the cluster is stored in the secondary table and managed by the secondary table. The address of the secondary table is stored in the primary table and managed by the first-level table. In order to illustrate the method provided by this ap...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method for analyzing and extracting qcow2 and qcow3 mirror image files, which is characterized by comprising the following steps: S100: searching and analyzing header files of qcow2 and qcow3 mirror image files in a disk to obtain header file information; S200: acquiring and analyzing the first-level table according to the header file information, acquiring and analyzingthe second-level table according to the result of analyzing the first-level table, and acquiring the cluster address according to the result of analyzing the second-level table; S300: according to themethod of the Step S200, traversing the first-level table and the second-level table of the qcow2 and qcow3 mirror image files, obtaining cluster data corresponding to each cluster address and sequentially storing the cluster data as a system file; and S400: according to the absolute offset address of a specified file in the system file and the size of the specified file, calculating the addresses of the specified file in the qcow2 and qcow3 mirror image files, and obtaining the contents of the specified file.

Description

technical field [0001] The invention belongs to the field of data recovery and relates to a method for parsing and extracting qcow2 and qcow3 image files. Background technique [0002] Compared with other analog processors, Qemu's analog processor has the advantages of open source, portability, and fast simulation speed, and is widely used on the GNU / Linux platform. qcow2 and qcow3 are the suffixes of the extended image file. The qcow2 and qcow3 image files have the same data structure, but are different from the data structure of the qcow image file. The qcow2 and qcow3 file systems do not support holes, have smaller file footprints, support copy-on-write, support snapshots, and can choose the zlib compression method and AES encryption. The qcow2 and qcow3 images are widely used. [0003] So, how to extract the contents of the image file and obtain the user data in the qcow2 and qcow3 image files? There are currently two mainstream methods: network transmission or using t...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F9/4401G06F16/13
CPCG06F9/4416
Inventor 梁效宁朱星海刘波许超明吕靓婷
Owner SICHUAN QIAODUOTIANGONG PRECISION EQUIP CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap