From owner-freebsd-questions@FreeBSD.ORG Fri Apr 3 17:24:52 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 249CF106564A for ; Fri, 3 Apr 2009 17:24:52 +0000 (UTC) (envelope-from bounces@nabble.com) Received: from kuber.nabble.com (kuber.nabble.com [216.139.236.158]) by mx1.freebsd.org (Postfix) with ESMTP id E4D348FC0A for ; Fri, 3 Apr 2009 17:24:51 +0000 (UTC) (envelope-from bounces@nabble.com) Received: from isper.nabble.com ([192.168.236.156]) by kuber.nabble.com with esmtp (Exim 4.63) (envelope-from ) id 1Lpn8J-00059l-Nq for freebsd-questions@freebsd.org; Fri, 03 Apr 2009 10:24:47 -0700 Message-ID: <22872988.post@talk.nabble.com> Date: Fri, 3 Apr 2009 10:24:47 -0700 (PDT) From: snott To: freebsd-questions@freebsd.org In-Reply-To: <22862006.post@talk.nabble.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Nabble-From: skye@f4.ca References: <22862006.post@talk.nabble.com> Subject: Re: Recovering partitions from disk image? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2009 17:24:52 -0000 Update: I figured out how to get scan_ffs to read a file by looking at the program source (if it starts with / then it considers it a regular file to read instead of a device) and got the following results which matches well with the TestDisk output. $ scan_ffs -s /recovery/disk0.img ufs1 at 1087 size 2621440 mount / time Wed Dec 31 16:00:00 1969 ufs1 at 10486847 size 5242880 mount /var time Wed Dec 31 16:00:00 1969 ufs1 at 31458367 size 5242880 mount /usr/home time Wed Dec 31 16:00:00 1969 ufs1 at 54525634 size 46680873 mount /mnt time Wed Dec 31 16:00:00 1969 Looks about right compared to the df output I had from that host: Filesystem Size Used Avail Capacity Mounted on /dev/twed0s1a 4.9G 2.8G 1.7G 62% / /dev/twed0s1e 9.8G 5.0G 4.0G 56% /var /dev/twed0s1f 9.8G 952M 8.1G 10% /usr/home /dev/twed0s2e 88G 15G 65G 19% /mnt So, what can I do with those numbers? It doesn't look like there's any valid MBR or disklabel on this disk image. Can I extract these filesystems one at a time from the image and mount them somehow? Thanks, Skye -- View this message in context: http://www.nabble.com/Recovering-partitions-from-disk-image--tp22862006p22872988.html Sent from the freebsd-questions mailing list archive at Nabble.com.