On Thu, Jan 07, 2010 at 08:12:27PM -0500, KS wrote:
> Jochen Schulz wrote:
> > KS:
> >> root@sysresccd /root % mount -o loop -t iso9660
> >
> > Why do you mount the dump file from ddrescue as ISO image? Doesn't the
> > subject say it should actually contain an NTFS filesystem? I am
> > surprised that this actually works.
>
> I tried with ntfs flag too and it doesn't mount anything. Rather gives
> errors. See my other reply in the thread.
>
> >> /mnt/windows/rescueData.iso /mnt/cdrom
> >> root@sysresccd /root % ls /mnt/cdrom
> >> 〰〹 䝎䑒噌慮?湩㬱
> >
> > Do you expect this kind of characters or is it just "garbage" (from your
> > point if view)?
>
> Yes, it is garbage.
>
> >> Any advice on how to proceed from here? Or can someone suggest a better
> >> method?
> >
> > It depends on what you want to achieve. If all you want is to rescue
> > personal documents, images and the like, I suggest you to try photorec
> > from the testdisk package. It can recover many files of different types
> > from otherwise unusable filesystems.
> >
> > J.
>
> The person has lots of photos, movies, and software backups on the drive.
>
I think photorec is the right tool for you. It's part of the testdisk
package, which somebody mentioned already. I've used photorec several
times to recover files (all kinds, not just photos) from drives that
were unreadable by other means.
-Rob
--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
01-08-2010, 02:37 AM
KS
Recovering data from NTFS disk
Rob Owens wrote:
>
> I think photorec is the right tool for you. It's part of the testdisk
> package, which somebody mentioned already. I've used photorec several
> times to recover files (all kinds, not just photos) from drives that
> were unreadable by other means.
>
> -Rob
>
>
I have already started testdisk and it is analysing the disk since the
last hour or so. Should be finished soon. It might give me an hint as to
what is the status of the disk.
Thanks,
KS.
--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
01-08-2010, 06:04 AM
Jochen Schulz
Recovering data from NTFS disk
KS:
>
>
> I have already started testdisk and it is analysing the disk since the
> last hour or so. Should be finished soon.
Good luck!
> It might give me an hint as to what is the status of the disk.
Install smartmontools and try to run smartctl -a /dev/sdb on it. Then
post the output. It might be that smartctl doesn't work over USB. In
that case you would have to connect the disk directly via SATA/IDE.
J.
--
I often play sports / do exercise.
[Agree] [Disagree]
<http://www.slowlydownward.com/NODATA/data_enter2.html>
01-08-2010, 06:44 PM
KS
Recovering data from NTFS disk
Jochen Schulz wrote:
> KS:
>>
>> I have already started testdisk and it is analysing the disk since the
>> last hour or so. Should be finished soon.
>
> Good luck!
>
>> It might give me an hint as to what is the status of the disk.
No, it coudn't find any partition table after 2 passes.
I started photorec and it has found hundred's of files. It says it will
take around 20 more hours to finish.
>
> Install smartmontools and try to run smartctl -a /dev/sdb on it. Then
> post the output. It might be that smartctl doesn't work over USB. In
> that case you would have to connect the disk directly via SATA/IDE.
>
The HDD is connected to internal SATA connector. Sadly, the external USB
drives sold these days don't have the capability of reading SMART data.
I have an old WD external disk which does, but a newer Lacie does not
and it doesn't spin down the HDD either!
Waiting for photorec to finish.
/ks
--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
01-09-2010, 09:53 AM
Osamu Aoki
Recovering data from NTFS disk
Hi,
I made a list of forensics packages:
http://www.debian.org/doc/manuals/debian-reference/ch10.en.html#listofpackagesfoforensicanalysis
On Thu, Jan 07, 2010 at 07:30:37PM -0600, John Hasler wrote:
> The filesystem on the disk is clearly toast. Mounting it as the wrong
> type won't help. Start looking at forensics packages:
Although you missed most popular
testdisk
this list was a good one.
> myrescue - rescue data from damaged harddisks
> guymager - Forensic imaging tool based on Qt
I will add these :-)
Osamu
--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org