Text 20258, 264 rader
Skriven 2019-09-11 12:41:58 av Rick Christian (1:135/377)
Kommentar till text 20199 av Bbsing Bbs (5529.linux)
Ärende: testdisk - Any good READM
=================================
Hello Bbsing!
15 Aug 19 20:39, you wrote to me:
BB> USB thumb drives, that get to hot ... can crush the onboard memory
BB> chips, and controller.
Never had that happen with USB thumb drives... but heat is bad for any
electronics period.
BB> If your drive was part of a lvm volume group, you may be missing the
Nope.
Standard USB external HD (not a SSD! I don't use or trust that garbage)
BB> other part of that volume that is preventing you from seeing all the
BB> data. IF not then what I attempt to write below may help.
I can SEE THE PARTIOTION in test disk... it just comes up with the Message
"Can't mount drive.... " if I plug it in and try to access it like normal use.
BB> I'm not sure there is a recovery. USB ssd type drives (non-spinner
BB> drives), have a write limit, eventually they just break. Now I've not
BB> broke a internal or MR2 type ssd yet, but plenty of USB thumb drives,
BB> and micro ssd drives, and often times this is earlier than expected
BB> end of life so they are still under warranty.
This is why I don't use SSD unreliable and write limited.
BB> If your computer is reporting a different size of the drive than
Just can't access the drive if I plug it in...
BB> Here is what I usually do to test if the disk is broke, the easy way.
BB> Caveat, must use linux,
Caveat, I don't use any thingBUT LINUX. OK, Z/vm, z/os, s3xx, :) ;) :) but
other crap? nope. :)
BB> the drive wasn't part of an lvm volume group:
Nope, don't use'm too risky.
BB> find the device of the disk. This is usually known when plugging it
BB> into the computer, then do the following:
You can see that below.
BB> NOTE!!! dd can wipe out all data on your drive if used incorrectly.
BB> NOTE(2) dd can take a long long time to read a 4TB drive.
dd is too dangerous for use for exactly #1, and #2.
BB> For spinner drives .. there is a different process, you can use dd,
BB> but other methods work depending on the partitions and format type.
What info for real drives? ie:
9339387.713615] usb 1-3: USB disconnect, device number 6
[9339387.714581] sd 7:0:0:0: [sdb] Synchronizing SCSI cache
[9339387.714706] sd 7:0:0:0: [sdb] Result: hostbyte=DID_NO_CONNECT
driverbyte=DRIVER_OK
[9339395.976052] usb 1-3: new high-speed USB device number 10 using ehci_hcd
[9339396.186116] scsi8 : usb-storage 1-3:1.0
[9339397.184886] scsi 8:0:0:0: Direct-Access Seagate BUP BK 0109
PQ: 0 ANSI: 6
[9339397.186602] sd 8:0:0:0: Attached scsi generic sg1 type 0
I guess I am more interested in:
1) What acn be done via testdisk to use its internal backup/recovery
options.... BEFORE I DO
2) Reset the info, likely the partition info, so that plugging it in and
selecing to open in file manager or mounting it other ways works
I have HUGE RISK AVERSION. Meaning that measure 40x then review, measure 50x
more, review.. backup backup backup.. try it...
So I'd like to use testdisk to suck out the data I can to say either another
4TB drive I attach to the box and then I can review what I've recovered and go
from there.. then test out the steps to recover the disk.. ie: do the x,y,z in
testdisk to reset it and then see if it is mountable...
I just can seem to find a GOOD STEP BY STEP EXPLAIN it in full for testdisk ,
that after I am at the point, below, do, x,y,z to reset things so the drive is
mountable...
Here is some info from testdisk... I have a box with 7.xx testdisk, but where
this golded is at is another box, and I quickly attached and ran this to see
... Which based on looking via the testdisk file browser the STUFF IS STILL
THERE, the partition table is fubar'd and needs to be reset????
testdisk.log
:~$ cat testdisk.log |more
Wed Aug 14 19:37:32 2019
Command line: TestDisk
TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.2.0-79-generic-pae (#115-Ubuntu SMP Thu Mar 12 14:33:25 UTC
2015) i686
Compiler: GCC 4.6
Compilation date: 2012-02-05T07:16:54
ext2fs lib: 1.42, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, DCO support
/dev/sda: size 156301488 sectors
/dev/sda: user_max 156301488 sectors
/dev/sda: dco 160086528 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector
size=512
Hard disk list
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512 - Maxtor
6Y080L0, S/N:Y286W68E, FW:YAR41BW0
Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 -
Seagate BUP BK, FW:0109
Partition table type (auto): EFI GPT
Disk /dev/sdb - 4000 GB / 3726 GiB - Seagate BUP BK
Partition table type: EFI GPT
Analyse Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=7814037166 (expected 7814037166)
hdr_lba_start=34
hdr_lba_end=7814037133
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved
partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved
partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved
partition]
2 P MS Data 264192 7814035455 7813771264 [Basic data
partition] [Seagate Backup Plus Drive]
search_part()
Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63
NTFS at 16/113/34
filesystem size 7813771264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 264192 7814035455 7813771264 [Seagate Backup
Plus Drive]
NTFS, 4000 GB / 3725 GiB
Search for partition aborted
Results
P MS Data 264192 7814035455 7813771264 [Seagate Backup
Plus Drive]
NTFS, 4000 GB / 3725 GiB
interface_write()
1 P MS Data 264192 7814035455 7813771264 [Seagate Backup
Plus Drive]
simulate write!
Analyse Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=7814037166 (expected 7814037166)
hdr_lba_start=34
hdr_lba_end=7814037133
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved
partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved
partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved
partition]
2 P MS Data 264192 7814035455 7813771264 [Basic data
partition] [Seagate Backup Plus Drive]
search_part()
Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63
NTFS at 16/113/34
filesystem size 7813771264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 264192 7814035455 7813771264 [Seagate Backup
Plus Drive]
NTFS, 4000 GB / 3725 GiB
Results
P MS Data 264192 7814035455 7813771264 [Seagate Backup
Plus Drive]
NTFS, 4000 GB / 3725 GiB
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
NTFS filesystem need to be repaired.
dir_partition inode=5
P MS Data 264192 7814035455 7813771264 [Seagate Backup
Plus Drive]
NTFS, 4000 GB / 3725 GiB
Directory /
5 dr-xr-xr-x 0 0 0 11-Aug-2019 09:01 .
5 dr-xr-xr-x 0 0 0 11-Aug-2019 09:01 ..
35 -r--r--r-- 0 0 386470 19-Sep-2018 04:00 .VolumeIcon.icns
36 -r--r--r-- 0 0 194586 19-Sep-2018 04:00 .VolumeIcon.ico
37 -r--r--r-- 0 0 4096 19-Sep-2018 04:00 ._
38 -r--r--r-- 0 0 33 19-Sep-2018 04:00 Autorun.inf
89 dr-xr-xr-x 0 0 0 12-Aug-2019 22:05 Grabbed_Photos
384686 dr-xr-xr-x 0 0 0 5-Jun-2019 07:19 PossImages
41 dr-xr-xr-x 0 0 0 17-Dec-2018 00:07 Seagate
86 dr-xr-xr-x 0 0 0 11-Aug-2019 10:33 seed
87 dr-xr-xr-x 0 0 0 11-Aug-2019 19:30 seed_imagesets
88 dr-xr-xr-x 0 0 0 12-Aug-2019 06:00 Smxxty
43 dr-xr-xr-x 0 0 0 17-Dec-2018 00:07 Start_Here_Mac.app
39 -r--r--r-- 0 0 18033016 19-Sep-2018 04:01 Start_Here_Win.exe
84 dr-xr-xr-x 0 0 0 17-Dec-2018 00:16 System Volume
Information
1422010 dr-xr-xr-x 0 0 0 11-Aug-2019 09:02 testssh
40 -r--r--r-- 0 0 1172289 19-Sep-2018 04:00 Warranty.pdf
dir_partition inode=384686
P MS Data 264192 7814035455 7813771264 [Seagate Backup
Plus Drive]
NTFS, 4000 GB / 3725 GiB
Directory /PossImages
384686 dr-xr-xr-x 0 0 0 5-Jun-2019 07:19 .
5 dr-xr-xr-x 0 0 0 11-Aug-2019 09:01 ..
893834 dr-xr-xr-x 0 0 0 12-Aug-2019 09:42 SxxyBacks
651926 dr-xr-xr-x 0 0 0 1-May-2019 11:38 SxxyBacks050119
384688 dr-xr-xr-x 0 0 0 5-Jun-2019 07:17 SxxBacks060519
dir_partition inode=893834
P MS Data 264192 7814035455 7813771264 [Seagate Backup
Plus Drive]
NTFS, 4000 GB / 3725 GiB
ntfs_readdir
Rick
... NOprah!
--- GoldED+/LNX 1.1.5-b20161221
* Origin: Vina's Talos Moon Base Alpha (1:135/377)
|