Printable View
Okay, I was using dd_rescue to recover a partition from damaged disc
('/dev/sda2'). It was approximately 50 GB
I setup dd_rescue to write to /dev/sdb1
dd_rescue /dev/sda2 /dev/sdb1
Problem was, /dev/sdb1 had all sorts of important stuff on it. (it's
a FAT partition)
I intended to write to /dev/sdb2!
dd_rescue /dev/sda2 /dev/sdb1
I let the damn thing run for almost half an hour before I discovered
it.
I need to recover as much as possible - the filenames if at all
possible.....
argh
On Sat, 6 Sep 2008 02:46:08 -0700 (PDT), Trevor Hugh Davis <trevorhughdavis@gmail.com> wrote:
[color=blue]
>Okay, I was using dd_rescue to recover a partition from damaged disc
>('/dev/sda2'). It was approximately 50 GB
>
>I setup dd_rescue to write to /dev/sdb1
>
>dd_rescue /dev/sda2 /dev/sdb1
>
>Problem was, /dev/sdb1 had all sorts of important stuff on it. (it's
>a FAT partition)
>
>
>
>I intended to write to /dev/sdb2!
>
>dd_rescue /dev/sda2 /dev/sdb1
>
>I let the damn thing run for almost half an hour before I discovered
>it.
>
>I need to recover as much as possible - the filenames if at all
>possible.....[/color]
The FAT directory area got wiped out first :(
Grant.
--
Cats, no less liquid than their shadows, offer no angles to the wind.
Trevor Hugh Davis <trevorhughdavis@gmail.com> writes:
[color=blue]
>Okay, I was using dd_rescue to recover a partition from damaged disc
>('/dev/sda2'). It was approximately 50 GB[/color]
[color=blue]
>I setup dd_rescue to write to /dev/sdb1[/color]
[color=blue]
>dd_rescue /dev/sda2 /dev/sdb1[/color]
[color=blue]
>Problem was, /dev/sdb1 had all sorts of important stuff on it. (it's
>a FAT partition)[/color]
It is gone. If you made a backup, use that. If not, consider it an
expensive learing experience.
[color=blue]
>I intended to write to /dev/sdb2![/color]
Yes. mistakes get made. That is why backups exist.
[color=blue]
>dd_rescue /dev/sda2 /dev/sdb1[/color]
[color=blue]
>I let the damn thing run for almost half an hour before I discovered
>it.[/color]
[color=blue]
>I need to recover as much as possible - the filenames if at all
>possible.....[/color]
[color=blue]
>argh[/color]
Sorry, they are all gone. the directory was the first thing written over.
On Sep 6, 10:57*am, Unruh <unruh-s...@physics.ubc.ca> wrote:[color=blue]
> Trevor Hugh Davis <trevorhughda...@gmail.com> writes:
>[color=green]
> >Okay, I was using dd_rescue to recover a partition from damaged disc
> >('/dev/sda2'). *It was approximately 50 GB
> >I setup dd_rescue to write to /dev/sdb1
> >dd_rescue /dev/sda2 /dev/sdb1
> >Problem was, /dev/sdb1 had all sorts of important stuff on it. *(it's
> >a FAT partition)[/color]
>
> It is gone. If you made a backup, use that. If not, consider it an[/color]
Okay, I got it to the point where I can mount the drive. It then
shows me the directory structure but gives an i/o error when I try to
list the files. Sometimes it shows files in the wrong directory.
Does this give me some more options for recovery?
[color=blue]
> expensive learing experience.
>[color=green]
> >I intended to write to /dev/sdb2![/color]
>
> Yes. mistakes get made. That is why backups exist.
>[color=green]
> >dd_rescue /dev/sda2 /dev/sdb1
> >I let the damn thing run for almost half an hour before I discovered
> >it.
> >I need to recover as much as possible - *the filenames if at all
> >possible.....
> >argh[/color]
>
> Sorry, they are all gone. the directory was the first thing written over.[/color]
Am Sat, 06 Sep 2008 02:46:08 -0700 schrieb Trevor Hugh Davis:
[color=blue]
> I need to recover as much as possible - the filenames if at all
> possible.....
>
> argh[/color]
bad things happens :-(.
see the following:
[url]http://3d2f.com/tags/forensics/[/url]
[url]http://computer-forensik.org/tools/[/url] (german description only but you'll
find a english descript via google too)
[url]http://sleuthkit.org/[/url]
It depends how many files are overwritten, if you have luck you can
recover some or parts of it.
Good luck
cheers