Profile

Edward Haletky

Edward Haletky

Follow this member

Member since: June 2008

Bio: Edward L. Haletky graduated from Purdue University in 1988 with a degree in Aeronautical and Astronautical Engineering. Since then, he has worked with programming graphics and other lower-level libraries on various UNIX platforms. Edward has recently left Hewlett-Packard, where he worked in the Virtualization, Linux, and High-Performance Technical Computing teams. He owns AstroArch Consulting, Inc., providing virtualization, security, and network consulting and development and is an Analyst for The Virtualziation Practice. Edward is a Guru and moderator for the VMware Discussion Forums providing answers to security and configuration questions. He is the author of multiple books on Virtualization published by Prentice Hall.

Areas of Interest: Cloud Computing, Virtualization

Activity

  • Edward Haletky Edward Haletky wrote Blue Gears has Moved
    My Blue Gears posts have moved to just one location, http://www.astroarch.com/blog please join me

    2 years 47 weeks ago

  • Edward Haletky Edward Haletky wrote P2V as a Part of Forensics
    Recent VMware Communities forum discussions have brought Forensics to the fore once again. Even so it has made me think of using virtualization tools to do …

    3 years 4 weeks ago

  • Edward Haletky Edward Haletky wrote Two Vital Resources for Virtualization Administrators

    There are now two vital resources for Virtualization Administrators, the VMware Bookshelf and Top Virtualization Security Links. These resources will aid Virtualization Administrators in finding necessary general references and books, as well as a repository of knowledge of virtualization security. These were gathered together to aid users in going to just one place to find all the information necessary.

    …

    3 years 9 weeks ago

  • Edward Haletky Edward Haletky wrote VMware HA with ESX v3.5 Update 3
    When upgrading my cluster of ESX hosts I noticed that as soon as I updated one host, HA would fail to work for that host. Errors occurred which were related to …

    3 years 12 weeks ago

  • Edward Haletky Edward Haletky wrote Forensics and Dedupe
    Disk deduplication (dedupe) and thin provisioning within the virtualization space is a forensically untried technology. It does not mean that dedupe and thin …

    3 years 13 weeks ago

  • Edward Haletky Edward Haletky wrote VMware HA failed with error....

    To fix a 'VMware HA failed with error' error message is usually quite simple.

    …

    3 years 14 weeks ago

  • Edward Haletky Edward Haletky wrote SVMotion Usage and Trials

    Storage VMotion is a great tool, so I figured I would give it a try in an attempt to get a new SAN into action quickly. It works quite well actually, but does have a few issues still. This migration must run smoothly within my environment as rebooting is just not an option during the day. Just like everyone else I have uptime requirements.

    …

    3 years 15 weeks ago

  • Edward Haletky Edward Haletky wrote Understanding VMware EVC

    Setting up VMware EVC is sort of like tuning your car engine. You do not want to do much of the work while the car is running. The same holds true for EVC. Specifically in order to enable VMware EVC you need to set up the system BIOS properly. One setting is well known yet the other is not so well known.

    …

    3 years 17 weeks ago

  • Edward Haletky Edward Haletky wrote VMware HA Fixed for SMB 2 node clusters
    If you have updated your VMware ESX hosts to version 3.5 Update 2 and only have two nodes in your cluster, you may have noticed some VMware HA oddities. …

    3 years 18 weeks ago

  • Edward Haletky Edward Haletky wrote VMworld and Forensics
    VizionCore and PHD produce backup tools that do block level backups of VMs that are verified via checksums with the originally. If these checksums in use are …

    3 years 20 weeks ago

  • Edward Haletky Edward Haletky wrote 3 Days at VMworld

    After 3 days at VMworld I have not yet had enough of virtualization, or as a friend of my spells it virtualisation. Taking my own advice I went to the important security sessions and went out on the show floor.

    …

    3 years 21 weeks ago

  • Edward Haletky Edward Haletky wrote Preparing for VMworld

    Preparing for VMworld is like preparing for the first day of a new job where you do not know anyone. You may know some of the 14000 attendees but you may not know many and they will be hard to find unless you make arrangements prior to the show. So here are my tips for taking it all in.

    …

    3 years 22 weeks ago

  • Edward Haletky Edward Haletky wrote Allowing VMware ESX Private Virtual Networks to Migrate

    When VMs are placed on a private virtual switch they have no external physical NIC so are generally not allowed to be moved from one host to another with vMotion. You must first power them down then power them on.

    …

    3 years 24 weeks ago

  • Edward Haletky Edward Haletky wrote Booting VMware VirtualCenter while AD is unavailable

    There is a change to the way VMware VirtualCenter (VC) starts that could aid in situations where you need VC to fix an issue before you can boot Active Directory (AD) virtual machines. This really only comes into play if you do not have a phyisical AD server, but this is not all that uncommon an issue.

    …

    3 years 24 weeks ago

  • Edward Haletky Edward Haletky wrote Even More Thoughts on Forensics

    Acquiring disks is a very important part of digital forensics. In my past blogs I discussed some aspects of forensics with respect to VMware ESX servers. This is the last part of the series.

    …

    3 years 25 weeks ago

  • Edward Haletky Edward Haletky wrote More Thoughts on Forensics

    I mentioned in my last blog that it would be handy to get a copy of all the VMs datafiles as they contain memory files.

    …

    3 years 26 weeks ago

  • Edward Haletky Edward Haletky wrote Thoughts on Forensics

    Today it is possible for AccessData's FTK and Encase tools to read virtual machine disk files (VMDK) for further forensic study, but how do you get this information off a VMware ESX server's VMFS in a forensically sound manner? Is the VMDK all you need to grab?

    …

    3 years 26 weeks ago

Friends' Activity

Follow other ITworld members or sign in with your Facebook account in order to view your friends' activity.

Comments

Edward Haletky's Comments (1)

  • Commented on Even More Thoughts on Forensics

    Hello,Re: Using cpActually cp will not do the same job as it does not copy the underlying blocks of the file, but the content of the file. Things are slightly different there. Not if you want true 'duplication' of the underlying blocks. You can use dd to copy files as well as full devices. Unfortunately, until the spec for the VMFS is released, this is the best you can do. dd gives me the opportunity to define the size of the block as well.Re: WorkstationESX uses a Virtual Machine File System to store VMs unlike WorkStation. Since this is unknown to tools like EnCase and FTK, you need to use different mechanisms to get the data off the system.Best regardsEdward L. HaletkyAstroArch Consulting, Inc.

    3 years ago

Ask a Question