LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   NTFS partion search software (to find deleted Partitions) (https://www.linuxquestions.org/questions/linux-software-2/ntfs-partion-search-software-to-find-deleted-partitions-731263/)

evrgreen 06-07-2009 11:05 AM

NTFS partion search software (to find deleted Partitions)
 
Is there any software that will "RUN" through my block device and Identify filesystem signitures or simmilar...

I had to remove all of my old ntfs files systems because my MS backup will only with on NTFS FS on the system... I wrote down all of the info (start block, end block) on a sticky but I lost it and I cannot remember where my general backup (an NTFS drive :@) started (it would have been ext3 except I needed it to work with MS after the install on a dual boot system)

Any help or sugestions beond just software I could use would also be apresiated.

NOTE:
The partition is in clean and in good order if I was goodenough at programming I would probably just build a cheap take 20hrs program to look for NTFS MFT or something simmilar but saddly I don't have time or skill. Any help PLEASE!

syg00 06-07-2009 05:21 PM

Testdisk is what you are looking for - it's on most (Linux) recovery liveCDs, Knoppix ...

jschiwal 06-07-2009 07:56 PM

Do you have an image backup of the disk, and want to access the partitions that were backed up. If so, and it is a bit-for-bit image copy, you can try mounting the partitions by attaching loop devices and mounting them.

Suppose the image is /mnt/disk/backup.img

The first partition probably starts on block 63. You might be able to verify this by examining the file with the "file" command. With the -fs option, the losetup command will find the first available loop device and print which one is used. I'll assume /dev/loop0 in this example:

sudo /sbin/losetup -fs /mnt/disk/backup.img -o $((63*512))

sudo mount -t ntfs /dev/loop0 /mnt/mountpoint

When the partition is mounted you can use `df' to determine its size. The next partition my start just above it.
Good Luck.


All times are GMT -5. The time now is 02:48 PM.