Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Setup and Test Procedures dd (GNU fileutils) 4.0.36 Forensic Tests



James R. Lyle


This document describes the testing of dd (GNU fileutils) 4.0.36 as a disk imaging tool on a Linux platform. The Linux version used was Linux version 2.4.2-2 (Red Hat Linux 7.1 2.96-79). The test cases that were applied are described in Disk Imaging Tool Specification, Version 3.1.6.The tests were run on five 933 Mhz computers. A variety of hard drives (7 different models, 5 major brands) were used for the tests. The source disks (the ones that are copied from) were setup with FAT16, FAT32, NTFS or Linux EXT2 type partitions to represent the most common partition types. The main objective of this document is to provide enough information about the testing process for either an independent evaluation of the process or independent replication of the results. The intended audience for this document should be familiar with the DOS operating system, Linux (or some UNIX like) operating system, computer operation, computer hardware components such as hard drives, hard drive interfaces (e.g., IDE or SCSI) and computer forensics. The document can be obtained from the WWW at the HTTP://WWW.CFTT.NIST.GOV web site.
web (


Lyle, J. (2002), Setup and Test Procedures dd (GNU fileutils) 4.0.36 Forensic Tests, web (, [online], (Accessed June 16, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created July 1, 2002, Updated February 17, 2017