- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
VmWare View as a Forensic platform - how do I get the most IO out of view ?
I'm testing out using vmware view 6 as a platform for computer forensics. During the initial face of the investigation we run a program (encase) that hashes at indexes images of disks. This is something that takes typically 4 hours on a physical PC and in view it takes about 9 hours.
My question is - how do I get the most out of my platform ?
From what I can figure out looking at logs on the SAN (3PAR) and hosts the load on these are minimal. The OS m(Win7) on the view images maxes out CPU, disk and network. I've given it all I got (captain) - but it doesn't help. What to do. The specs (RAM, CPU and disk) is the same or even better on the VM vs. physical.
Any idea where to begin ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is this a full desktop or a linked clone? Have you reviewed esxtop during the scan to see if you can identify the bottleneck that way?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It's a linked clone.
Haven't looked at esxtop - will look at that. Thanks