On Fri, 23 Nov 2007 09:44:12 -0800
Rogelio <email@example.com> wrote:
> But won't that mean that I dd the *entire* hard drive, and not just that
> which has changed?
That's what a snapshot is.
If what you want is not a snapshot but something else instead, then dd is
probably not the best tool for the job. You could probably run a diff between
the previous image and the current image, but I'm sure there is a better way.