Linux - SoftwareThis forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
So you have corrupted file system. If so use foremost to recover files. And foremost works on raw partition and not on a mounted filesystem.
While Scalpel and Foremost are good file carvers most people should rather use Photorec instead. (Some people claim to have good results with magicrescue but I haven't tested it.)
Apart from the "raw partition" remark, which is a good one as file checking damaged partitions or mounting it (and have their journal, if any, replayed) should be avoided, I should also remark that:
0) one should also first try to determine the cause of the corruption because if this due to (imminent) hardware failure then creating a backup (also see dd_rescue, ddrescue, dcfldd) should be the first thing to do (after checking one has current, usable backups),
1) one should not act but, regardless of the tool selected, first read the documentation first. For Photorec start at http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step.
Thank you.
As I said, I want to recover files on a remote partition. For example, in a local network, Mount a Remote partition and recover files on it. I can Visit computer for Local recovery but I'm Curious to know it.
I would connect to remote machine and create an exact copy of damaged partition with dd. This copy may be saved locally and mounted as loop device. It is much safer to deal with image than with real hardware. You can create few copies of the image, if something went wrong, you have another copy to start recovery from the beginning. Once your files recovered, you can move them back to remote machine
I would connect to remote machine and create an exact copy of damaged partition with dd. This copy may be saved locally and mounted as loop device. It is much safer to deal with image than with real hardware. You can create few copies of the image, if something went wrong, you have another copy to start recovery from the beginning. Once your files recovered, you can move them back to remote machine
Can I use "dd" for remote partition? My target use Windows and I can use "smb" to mount it into "/mnt", is it possible to make an image remotely?
---------- Post added 01-20-15 at 11:41 AM ----------
Quote:
Originally Posted by unSpawn
Can you log into the remote machine?
Is that partition still mounted and in use?
Can you install and run software?
I can use "smb" command to mount the partition and my target use Windows OS. I can install software on it but I don't prefer it.
I doubt you can create image from mounted partition over smb, because smb is a filesystem-level protocol.
You need raw disk access to create exact copy.
It would be simple enough to copy partition over ssh from the server which running Linux:
Added:
Though you did mentioned you can access damaged machine directly, this case you could just boot into Linux LiveCD server machine and pass copy to local machine using ssh or copy it to external usb drive directly (without packing into archive).
Windows can run a SSH daemon perfectly but (forensics-wise) you don't want to disturb a "victim" system by installing software. If this is not about forensics then there may be portable, free-to-use versions of SSHd and dd around you could use. Else indeed booting a Live CD (or having somebody overthere boot a Live CD, you're absolutely not clear on the situation) is your best bet IMHO.
Windows can run a SSH daemon perfectly but (forensics-wise) you don't want to disturb a "victim" system by installing software. If this is not about forensics then there may be portable, free-to-use versions of SSHd and dd around you could use. Else indeed booting a Live CD (or having somebody overthere boot a Live CD, you're absolutely not clear on the situation) is your best bet IMHO.
If this is about recovery (not forensics), and if you can not or do not want to use a Live CD then yes, you could install 'dd' for Windows. See sourceforge.net/projects/windd/ or www.chrysocome.net/dd or http://www.forensicswiki.org/wiki/Dd or FTK Imager (free to use IIRC).
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.