From owner-freebsd-questions@FreeBSD.ORG Sun Oct 3 09:48:05 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 99C0D106564A for ; Sun, 3 Oct 2010 09:48:05 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) by mx1.freebsd.org (Postfix) with ESMTP id 5B90A8FC13 for ; Sun, 3 Oct 2010 09:48:05 +0000 (UTC) Received: from r55.edvax.de (port-92-195-226-229.dynamic.qsc.de [92.195.226.229]) by mx01.qsc.de (Postfix) with ESMTP id 907C03D6F0; Sun, 3 Oct 2010 11:48:03 +0200 (CEST) Received: from r55.edvax.de (localhost [127.0.0.1]) by r55.edvax.de (8.14.2/8.14.2) with SMTP id o939m3GM001628; Sun, 3 Oct 2010 11:48:03 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Sun, 3 Oct 2010 11:48:03 +0200 From: Polytropon To: Patrick Lamaiziere Message-Id: <20101003114803.eb4a115f.freebsd@edvax.de> In-Reply-To: <20101002210232.36d379e4@davenulle.org> References: <20101002113640.2ab36871@asus64> <20101002210232.36d379e4@davenulle.org> Organization: EDVAX X-Mailer: Sylpheed 2.4.7 (GTK+ 2.12.1; i386-portbld-freebsd7.0) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-questions@freebsd.org, Robert Subject: Re: OT: fdisk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Polytropon List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Oct 2010 09:48:05 -0000 On Sat, 2 Oct 2010 21:02:32 +0200, Patrick Lamaiziere wrote: > Le Sat, 2 Oct 2010 11:36:40 -0700, > Robert a =E9crit : >=20 > > I tried to use "dd" and copy data to another spare drive. It appears > > to work but then I can no longer mount that drive. Other than taking > > it to a data recovery shop does anyone have any idea.=20 >=20 > May be "photorec" will help (in systutils/testdisk). > http://www.cgsecurity.org/wiki/PhotoRec You don't need an expensive recovery shop - FreeBSD has many good tools for free. From my own experiences with data recovery, here's a short list of tools to keep in mind (yes, photorec is on that list, too - a very useful tool especially for use with SD and CF cards from cameras): System: dd <- the very fist thing you use fsck_ffs <- doesn't apply here as "NTFS" !=3D UFS clri <- as well, as further others may fsdb fetch -rR recoverdisk Ports: ddrescue <- if dd doesn't work dd_rescue <- as well ffs2recov magicrescue testdisk photorec scan_ffs recoverjpeg foremost The Sleuth Kit: <- if everything fails fls dls ils autopsy As I mentioned, work with copies only. If you have a disk big enough (disks aren't cheap today, your data isn't), make a copy of the copy and work with that. If you accidentally screw up the copy, delete it and make a new working copy from the master copy. Do not touch the original disk until you're done - and SURE about being done. If you fail to reconstruct the partition table, you can still get the "bare data", even in form of separate files. Some of the recovery programs listed above are able to process input data where all partition and file system information is lost, i. e. they operate on byte level (blocks) and contain algorithms to determine files (begin, end, kind, magic). Allthough this work often results in the loss of file names and directory structures, the files theirselves come back. I've experienced a similar kind of data loss in the past, so I wish you good luck with recovery. For the future: Make backups. Lesson learned. :-) --=20 Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...