---
name: "ewfverify"
section: "1"
platform: "linux"
package: "libewf"
version: "20140816-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/ewfverify"
---

# ewfverify(1)

verifies media data stored in EWF files

## NAME

**ewfverify** – verifies media data stored in EWF files

## SYNOPSIS

**ewfverify** \[**-A** *codepage*\] \[**-d** *digest\_type*\] \[**-f** *format*\] \[**-l** *log\_filename*\] \[**-p** *process\_buffer\_size*\] \[**-hqvVwx**\] *ewf\_files*

## DESCRIPTION

**ewfverify** is a utility to verify media data stored in EWF files.

**ewfverify** is part of the **libewf** package. **libewf** is a library to access the Expert Witness Compression Format (EWF).

*ewf\_files* the first or the entire set of EWF segment files

The options are as follows:

- **-A** *codepage*

  the codepage of header section, options: ascii (default), windows-874, windows-932, windows-936, windows-949, windows-950, windows-1250, windows-1251, windows-1252, windows-1253, windows-1254, windows-1255, windows-1256, windows-1257 or windows-1258

- **-d** *digest\_type*

  calculate additional digest (hash) types besides md5, options: sha1, sha256

- **-f** *format*

  specify the input format, options: raw (default), files (restricted to logical volume files)

- **-h**

  shows this help

- **-l** *log\_filename*

  logs verification errors and the digest (hash) to the log filename

- **-p** *process\_buffer\_size*

  the process buffer size (default is the chunk size)

- **-q**

  quiet shows minimal status information

- **-v**

  verbose output to stderr

- **-V**

  print version

- **-w**

  zero sectors on checksum error (mimic EnCase like behavior)

- **-x**

  use the chunk data instead of the buffered read and write functions.

## ENVIRONMENT

None

## FILES

None

## EXAMPLES

**ewfverify** can either verify the raw storage media data or logical file data stored in EWF file(s).

### To verify the raw storage media data:

```
# ewfverify floppy.E01
ewfverify 20110801
Verify started at: Tue Jan 11 19:21:51 2011
This could take a while.
Status: at 2%.
        verified 32 kB (32768 bytes) of total 1.4 MiB (1474560 bytes).
...
```

Status: at 100%.\
         verified 1.4 MiB (1474560 bytes) of total 1.4 MiB (1474560 bytes).\
         completion in 1 second(s) with 1 MiB/s (1474560 bytes/second).

Verify completed at: Tue Jan 11 19:21:52 2011

Read: 1.4 MiB (1474560 bytes) in 1 second(s) with 1 MiB/s (1474560 bytes/second).

MD5 hash stored in file:		ae1ce8f5ac079d3ee93f97fe3792bda3 MD5 hash calculated over data:		ae1ce8f5ac079d3ee93f97fe3792bda3

ewfverify: SUCCESS

### To verify logical file data:

```
# ewfverify -f files logical.E01
ewfverify 20110111
Verify started at: Tue Jan 11 19:21:51 2011
Single file: file1.txt
MD5 hash stored in file:		6fef2a64afbf070a264366183698bb5e
MD5 hash calculated over data:		6fef2a64afbf070a264366183698bb5e
...
```

Verify completed at: Tue Jan 11 19:21:52 2011

ewfverify: SUCCESS

## DIAGNOSTICS

Errors, verbose and debug output are printed to stderr when verbose output -v is enabled. Verbose and debug output are only printed when enabled at compilation.

## BUGS

Please report bugs of any kind on the project issue tracker: https://github.com/libyal/libewf-legacy/issues

## AUTHOR

These man pages were written by Kees Mastwijk.

Alterations for distribution have been made by Joachim Metz.

## COPYRIGHT

Copyright 2006-2014, Joachim Metz \<joachim.metz@gmail.com\>.

This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

## SEE ALSO

[ewfacquire(1)](/ewfacquire/1.md), [ewfacquirestream(1)](/ewfacquirestream/1.md), [ewfexport(1)](/ewfexport/1.md), [ewfinfo(1)](/ewfinfo/1.md), [ewfmount(1)](/ewfmount/1.md), [ewfrecover(1)](/ewfrecover/1.md)