Re: ewfmgr

Hi Frank. EWF literally stores all write operations at the basic I/O level
to the overlay - it doesn't have any innate awareness of the actual data
being written, but rather it writes all raw data that would otherwise be
written to the protected volume. It is not possible (through any supported
method, anyway) to see the map of data in the overlay.

If you're managing to get your overlay growth down to 100K per day, you're
doing very well - it's very difficult to get Windows to stop writing to its
system files and the registry, so paring it down to the minimum possible
output is quite a challenge.

--
Matt Kellner
SDET, Microsoft Windows Embedded Team

This message is posted AS-IS, without any warranty, and confers no rights.


"Frank" <franknews@xxxxxxxxxxxxx> wrote in message news:130k6m6gisckh84@xxxxxxxxxxxxxxxxxxxxx
Hello,
I use ewfmgr with memory mapping. When I ask for the ewfmgr info it states: memory used for data xxxxx bytes. At some moment all memory will be used for this mapping. But which data is mapped into the area? When I used filemon I don't see any activity on the C disk. That's logical because nothing is written to the disk but to memory? But how then can I determine what data is written. It only fills up slowly, about a 100K/day.
Thanks
Frank


.

Relevant Pages

  • Re: Memory Overlay - ADSP
    ... I am trying to get more info about External Memory Overlay. ... and that information is not necessarily available to the linker. ... to internal memory at runtime is called an overlay manager. ...
    (comp.dsp)
  • Re: DDGPE driver for CE 6.0
    ... > overlay, it shows a rectangle with some color,when it reaches some ... This is not the background of mosquito image ... Video memory size is reported ... I came across a problem with accessing frame buffer from user ...
    (microsoft.public.windowsce.platbuilder)
  • Re: Memory Overlay
    ... (Linker Descriptor File / Linker Script / Linker Command File) ... can be loaded as part of a single memory image but run at the same ... In GOOGLE I entered Memory Overlay Techniques and got about 312,000 ... to internal memory at runtime is called an overlay manager. ...
    (comp.arch.embedded)
  • Re: Flash Memory - Loading an Application of 2M size into 1M Flash memory
    ... I have 1M flash memory allocated for Application. ... In the old days with 16 bit computers typically restricted to 64 KiB, ... initialisation routines could be in one overlay branch and initially ...
    (comp.arch.embedded)
  • Re: ewfmgr
    ... EWF literally stores all write operations at the basic I/O level to the overlay - it doesn't have any innate awareness of the actual data being written, but rather it writes all raw data that would otherwise be written to the protected volume. ... I use ewfmgr with memory mapping. ... When I used filemon I don't see any activity on the C disk. ...
    (microsoft.public.windowsxp.embedded)