LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 12-16-2007, 04:34 AM   #1
sussane
LQ Newbie
 
Registered: Aug 2007
Posts: 19

Rep: Reputation: 0
.iso File recovery on EXT3 filesystem on Gentoo


Friends,
I had 80GB data of all operating systems like freebsd, centos, ubuntu.I had setup freebsd mirror also. What happened was, i unmounted the drive and tried to mount again, but failed. After failure, i issued the commands below and now i can't find the ISO files on the hard disk.

#mkfs.ext3 /dev/hdb1

#mount -t ext3 /dev/hdb1 /mnt/hdb1

How can i use testdisk OR other free datarecovery softwares to recover all the .ISO FILES ??? Help Required experts...
 
Old 12-16-2007, 06:06 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,462
Blog Entries: 54

Rep: Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899Reputation: 2899
Quote:
Originally Posted by sussane View Post
i issued the commands below and now i can't find the ISO files on the hard disk.
Laying down a filesystem structure over the old one does not make sense. If you don't understand what a command does then please think first, then read about it and then ask if unsure.


Quote:
Originally Posted by sussane View Post
i unmounted the drive and tried to mount again, but failed.
Give us (exact!) (error) messages to work on, not a vague description.


Quote:
Originally Posted by sussane View Post
How can i use testdisk OR other free datarecovery softwares to recover all the .ISO files
The "how" of how to operate testdisk or gpart you can read in the manual, it isn't that hard to operate.
If unsure make a 'dd' copy of the disk to file so you have a backup to work on if you fsck up again.

Another option would be retrieving files directly with photorec or foremost or scalpel. These tools carve (string together bits of files) by looking for the start and end of file (file header and footer information, think "magic" as in the 'file' command). The problem is that finding an end-of-file marker however does not guarantee file integrity in any way: it may be missing pieces or stray data may have been trapped in it. (For OS install .iso's that would be easy to verify since the D/L page will list a MD5 or SHA1 hash value.) Another problem is (and I only tested this on a few .iso's) that neither photorec or foremost or scalpel has ready-made header plus footer for ISO 9660 and that header/footer carving relies on the signature starting in the first two bytes AFAIK, and with an ISO 9660 format file that's simply not the case, the first column represents the offset in the file where the string "CD001" is found:
Code:
grep -i 9660 /usr/share/magic
32769    string    CD001     ISO 9660 CD-ROM filesystem data
37633    string    CD001     ISO 9660 CD-ROM filesystem data (raw 2352 byte sectors)
So that's a bit of a dead. (That doesn't mean you could not retrieve data *from* a deleted iso since it's a simple filesystem. Mkisofs some dir with text files then grep the iso for a line and you'll see.) File carving may be helpful if the value of the data is greater than the time you have to invest in prepping and carving. But since these are readily available .iso's I'd say D/L them again. Besides that I've been only doing Forensics for so long. Maybe someone else has better ideas.
 
Old 12-16-2007, 09:37 PM   #3
sussane
LQ Newbie
 
Registered: Aug 2007
Posts: 19

Original Poster
Rep: Reputation: 0
thanks for your kind reply unspwan, i would try one formost then if unsuccessful i would reldownload ...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
ext3 filesystem recovery prozac Linux - General 9 02-18-2007 12:56 AM
How to recover a deleted file from ext3 filesystem ? Honor Linux - Software 1 12-21-2005 12:36 PM
I need Ext3 file system recovery tools Thetargos Linux - Hardware 1 12-20-2004 04:03 PM
Recovering file on Ext3 filesystem. the_rydster Slackware 1 07-17-2004 01:04 PM
Linux Ext3 Filesystem recovery ahpin Linux - General 1 11-27-2003 08:04 PM


All times are GMT -5. The time now is 12:03 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration