Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 23 Oct 2001 10:00:16 -0700 (PDT)
From:      David Kirchner <davidk@accretivetg.com>
To:        Oscar-Ivan Lepe-Aldama <oscar.lepe@acm.org>
Cc:        <questions@FreeBSD.ORG>
Subject:   Re: Disklabel lost
Message-ID:  <20011023093846.X85958-200000@localhost>
In-Reply-To: <3BD518C9.5898BF24@acm.org>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

--0-1987189661-1003856416=:85958
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Tue, 23 Oct 2001, Oscar-Ivan Lepe-Aldama wrote:

> To mount the root (bsd) partition of the damage disk I did a guess on
> its size and with sysinstall/label wrote a disklabel. (My guess was that
> the root partition was 100Megs large.) Then I succesfully mounted that
> guessed root partition, as I have said before. (Then I found out that my
> guess was wrong when I peek at root's mbox file, and change the
> disklabel to reflect the actula size of the root partition. Again, I
> have been able to succesfully mount this second guessed root partition.)
>
> But from here I have no ideas on how to complete the disklabel for the
> rest of the partitions. I know there are a couple more, one for swap and
> one for /usr. About the swap partiton I don't know nothing, neither its
> size nor where it starts. About the /usr partition I know its size but I
> don't know where it starts.

If you installed using the defaults, swap will be 2X your physical RAM. I
don't recall what the other partitions are sized at by default.

If you didn't delete your last few daily output mails, you may still have
the df output there, such as:

Disk status:
Filesystem  1K-blocks     Used    Avail Capacity  Mounted on
/dev/wd0s2a    124015    26338    87756    23%    /
/dev/wd0s2f   2480982   627548  1654956    27%    /usr
/dev/wd0s2g   7103813    21826  6513682     0%    /usr/local
/dev/wd0s2e    297663     1350   272500     0%    /var
procfs              4        4        0   100%    /proc

I have a program which could help you recover that particular message.
I've attached the C file here. Please note I am offering it without any
warranty whatsoever. :-) I'm certain there are better ways to do it than
byte-by-byte matching.

Its usage is as follows:

./search "string" file-or-device mask.%s

For example, in this case you could do:

./search "Disk status:" /dev/wd0s1c /root/df.%s

(I've lost the original e-mail, so I don't recall if this is IDE or SCSI.
Either way, you want to search partition c.)

It takes a long time to run, but it will notify you when it gets matches
so you can possibly abort it prematurely. In this example, it would save
the output in /root/df.0000001 and up. Btw, if you wanted to recover the
entire root mailbox, search for "From " (with the extra space)

--0-1987189661-1003856416=:85958
Content-Type: TEXT/PLAIN; charset=US-ASCII; name="search.c"
Content-Transfer-Encoding: BASE64
Content-ID: <20011023100016.Q85958@localhost>
Content-Description: search.c
Content-Disposition: attachment; filename="search.c"
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--0-1987189661-1003856416=:85958--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011023093846.X85958-200000>