From owner-freebsd-questions@FreeBSD.ORG Sat Oct 2 23:51:56 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 10FEE1065670 for ; Sat, 2 Oct 2010 23:51:56 +0000 (UTC) (envelope-from traveling08@cox.net) Received: from fed1rmmtao107.cox.net (fed1rmmtao107.cox.net [68.230.241.39]) by mx1.freebsd.org (Postfix) with ESMTP id E224B8FC20 for ; Sat, 2 Oct 2010 23:51:55 +0000 (UTC) Received: from fed1rmimpo02.cox.net ([70.169.32.72]) by fed1rmmtao107.cox.net (InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP id <20101002235154.EFYL3990.fed1rmmtao107.cox.net@fed1rmimpo02.cox.net>; Sat, 2 Oct 2010 19:51:54 -0400 Received: from asus64 ([72.220.91.10]) by fed1rmimpo02.cox.net with bizsmtp id Dzrv1f00A0DQbeo04zrvUa; Sat, 02 Oct 2010 19:51:55 -0400 X-VR-Score: -230.00 X-Authority-Analysis: v=1.1 cv=RFAs0e+2sU49DU7hBECFSPlG3t5ZI1He37/O2GpqT7s= c=1 sm=1 a=kj9zAlcOel0A:10 a=/nTdwXoUaSOHzX6NQnbKNQ==:17 a=s1O25tkdAAAA:8 a=mNL-uGBdAAAA:8 a=rzYPlMw5AAAA:8 a=vSnXl6LBziS7kwtMzLEA:9 a=jUPh2PS8JTdxQdIbaPwA:7 a=t_rJ8vtCeHOAzbbKRkgEEn_tXOkA:4 a=CjuIK1q_8ugA:10 a=XZENvOEyztAA:10 a=OyOq_G8mXAEA:10 a=/nTdwXoUaSOHzX6NQnbKNQ==:117 X-CM-Score: 0.00 Authentication-Results: cox.net; none Date: Sat, 2 Oct 2010 16:51:50 -0700 From: Robert To: Warren Block Message-ID: <20101002165150.01e0cac0@asus64> In-Reply-To: References: <20101002113640.2ab36871@asus64> X-Mailer: Claws Mail 3.7.6 (GTK+ 2.20.1; amd64-portbld-freebsd8.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: "freebsd-questions@freebsd.org" Subject: Re: OT: fdisk X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Oct 2010 23:51:56 -0000 On Sat, 2 Oct 2010 17:00:00 -0600 (MDT) Warren Block wrote: > On Sat, 2 Oct 2010, Robert wrote: > > > Greetings > > > > I am in deep with the wife. Her computer went belly up. It was > > running XP pro and I had backups going to a second drive. I can no > > longer access that drive. > > > > I pulled it and attached it via USB to one of my FreeBSD machines > > but it will not mount. It is a 500G hard drive and I get _wild_ > > results just looking at it with fdisk. > > > > ~> fdisk /dev/da1s1 > > ******* Working on device /dev/da1s1 ******* > > Wait a minute... shouldn't that be just "da1"? da1s1 is the first > slice (partition), and the data there should be your XP filesystem, > probably NTFS. Warren, You are right. Here it is: ~> fdisk /dev/da1 ******* Working on device /dev/da1 ******* parameters extracted from in-core disklabel are: cylinders=60801 heads=255 sectors/track=63 (16065 blks/cyl) Figures below won't work with BIOS for partitions not in cyl 1 parameters to be used for BIOS calculations are: cylinders=60801 heads=255 sectors/track=63 (16065 blks/cyl) Media sector size is 512 Warning: BIOS sector numbering starts with sector 1 Information from DOS bootblock is: The data for partition 1 is: sysid 7 (0x07),(NTFS, OS/2 HPFS, QNX-2 (16 bit) or Advanced UNIX) start 63, size 976773105 (476939 Meg), flag 0 beg: cyl 0/ head 1/ sector 1; end: cyl 1023/ head 15/ sector 63 The data for partition 2 is: The data for partition 3 is: The data for partition 4 is: Which looks a lot better. I can mount /dev/da1 and it shows ~> ls -l /mnt total 70044 -rwxr-xr-x 1 root wheel 2560 Dec 31 1600 $AttrDef -rwxr-xr-x 1 root wheel 0 Oct 1 09:09 $BadClus -rwxr-xr-x 1 root wheel 4194304 Dec 31 1600 $Bitmap -rwxr-xr-x 1 root wheel 8192 Oct 1 09:09 $Boot drwxr-xr-x 1 root wheel 0 Oct 1 09:09 $Extend -rwxr-xr-x 1 root wheel 67108864 Oct 1 09:09 $LogFile -rwxr-xr-x 1 root wheel 4096 Oct 1 09:09 $MFTMirr -rwxr-xr-x 1 root wheel 0 Dec 31 1600 $Secure -rwxr-xr-x 1 root wheel 131072 Oct 1 09:09 $UpCase -rwxr-xr-x 1 root wheel 0 Oct 1 09:09 $Volume -rwxr-xr-x 1 root wheel 45124 Aug 18 2001 NTDETECT.COM drwxr-xr-x 1 root wheel 0 Oct 1 17:29 System Volume Information -rwxr-xr-x 1 root wheel 193 Oct 1 09:12 boot.ini -rwxr-xr-x 1 root wheel 222368 Aug 18 2001 ntldr But I cannot mount /dev/da1s1 ~> sudo mount_ntfs /dev/da1s1 /mnt mount_ntfs: /dev/da1s1: Invalid argument Patrick wrote May be "photorec" will help (in systutils/testdisk). http://www.cgsecurity.org/wiki/PhotoRec I installed this and can successfully recover the date to a spare slice. The problem is the data is all over the place. There is a ton if png files from her playing games on facebook. This can be better than nothing because I can go through the files and move/rename the ones we want to keep. Thank you both. I am willing to try any other suggestions. It appears the the motherboard went gradually bad and hosed up this drive. Robert