trying to learn linux, specifically ddrescue
First things first, hard drives and I don't seem to get along.
I'm a master of windows, but when it comes to data recovery and bad sectors, I'm always running into the ddrescue when searching google for answers. I don't have a clue when it comes to linux hence I've been avoiding it, but I want to learn. I've formatted hard drives with ubuntu and played with that for a while. little here little there. ophcrack, backtrack (at the command prompt), so on and so fourth. Is there a gui for ddrescue? and if so, could you get me a link to a download of it? If not, can you hold my hand and walk me through (a download link of an iso or something and command line by command line), copying a healthy disk with ddrescue? I'll learn to do unhealthy ones later. At my disposal, I have plenty to play with: usb to sata/ide drive readers towers with both sata and ide hd controllers a tx1000 laptop with win7 ultimate plenty of dead hard drives to play with a couple healthy hard drives I also have an external 2tb freeagent (usb2.0) drive partitioned with 3gb for the original software that came with the drive and a 1.6tb partition for my stuff. I'm aware that the drives with a death knock usually need special hardware or being cracked open which I don't really want to get into, but recently I've been getting these where explorer won't see them and windows will hang when their plugged in. They show up in disk management, but I can't format them. I unplug it and it says the drive needs to be formatted. Those bug the h e double hockey sticks out of me. Thank goodness I'm good at keeping backups of the files I need. That's more than I can say for most of my friends. If you haven't figured out, I'm the neighborhood geek that always gets asked to fix their computer. Thanks in advance, Dave |
If you want to jump right into it: http://www.forensicswiki.org/wiki/Ddrescue#Examples
Beware that this tool is equally capable of destroying your data if you input the wrong commands, test it out on a system/drive that you can safely erase! I know it's not a lengthy reply, but you will probably find these links useful: It's a software which I would really recommend you to read up on, as the different switches and options make a very big difference when it comes to your outcome and the speed of the process. You can also put a lot of retries on it, to see if it can get data back by not giving up. http://www.forensicswiki.org/wiki/Ddrescue - Short Introduction http://www.gnu.org/software/ddrescue...ue_manual.html - Full manual |
more questions
that's what I like, jump right in. With the links you gave me, I was able to make a boot cd to where I have access to ddrescue. Now online I can find commands keystroke to keystroke how to copy a drive. I have two 80g drives hooked up via usb drive readers, a wd ide 3.5 and a sata segate 2.5 both of which I can destroy the data and it wouldn't upset me because I have it all backed up elsewhere.
my question is how do I know which device is which. How do I get a list of the devices with the size/make/model/sn of the drives attached to the computer. I'm running this on my laptop which has a 400g drive that I do not want to mess up (It wouldn't devastate me, it would just be a pain to rebuild). with windows, I can go to my computer or manage and see what's hooked up. how do I do this from the % prompt. another question, basic terminology, in windows, this would be called the command prompt, what is it called in linux? Thanks in advance, Dave Quote:
|
In Linux you are mostly talking about the CLI, the terminal or the console if you mean the command prompt.
To determine your drives, issue the command Code:
tail -v /var/log/messages Code:
Apr 5 18:02:54 monster kernel: [19284.199071] usb 2-2: new high speed USB device using ehci_hcd and address 2 |
finding my drives
after typing in that command, I did get a list similar to what you posted, but nowhere in that list were either of the 3 drives (the two 80gb hooked up via usb drive readers and the 400gb internal)
do I have to mount these drives somehow? |
Issue that command and plug in the drives after you see the output.
You can also get a list of the drives by typing Code:
fdisk -l |
f-disk -l did the trick
fantastic, now that I know which drive is which.
now in the print off I printed for myself from forensicswi.org, it says: first you can copy as much data as possible, without retrying or splitting sectors: ddrescue --no-split /dev/hda1 imagefile logfile ddrescue being the program name, the executable file --no-split being an option, not splitting sectors /dev/hda1 being hard drive #1, the source imagefile logfile this is where I'm getting confused. this would be the destination file and the log file, I'm picking up on that but where would it be putting these files without a device name or am I supposed to put a /dev/hda2/imagefilename followed by a /dev/hda3/logfile putting the log file on a different device? having it say imagefile makes me think of an .iso file, but an image file in the works (being compiled). kind of confusing. |
You can't write files to a drive using the /dev-device descriptor. If you want to use an image-file then you have to put that on a mounted drive, like your Windows-disk in the laptop. If you want to copy directly to the second disk, you will do it like this:
Code:
ddrescue --no-split /dev/hda1 /dev/hdb1 ~/logfile You can imagine an image-file in the same way as an .iso-file, but it will of course not contain an ISO9660-filesystem, but the file-system of the partition you copy. Warning: Keep in mind that the device-descriptors may change if you change the order of plugging in the disks or if you unplug and plug in devices short after another. Always make sure that you are using the correct names before doing anything with ddrescue or dd. |
You guys are awesome, I usually multitask when waiting for responses on forums, get two or three things done, but every time I check my email, I have another response from here, and good ones to boot. I'm calling it quits for today, but I will be back tomorrow I'm sure with more questions. (I'm not getting many of my other tasks done this way).
one more quick question, when working in linux, I notice I get a lot of double keystrokes. why is this? I don't have this problem in windows. does it not like windows machines? Thanks a bunch, Dave Quote:
|
What do you mean with double keystrokes? Do you have an example?
|
mainly when I'm typing command lines, they end up coming out like this:
ddrescuee I don't know if it's while I'm reading it from the paper and maybe hold the e down for a 1/10 of a second longer or what. but it happens quite often when I'm using a linux prompt and never when using windows. Quote:
|
This never happens to me, so I would assume that it is simply a misconfiguration. Are you using a GUI or a bare command line system? If it is a GUI I would search for keyboard configuration in your menu, normally you should be able to configure the repeat speed and delay.
|
All times are GMT -5. The time now is 08:15 AM. |