LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
LinkBack Search this Thread
Old 11-26-2007, 08:58 AM   #1
Matistimo
LQ Newbie
 
Registered: Nov 2007
Posts: 2

Rep: Reputation: 0
Data recovery with ddrescue


I had a 200 GB external USB formatted under windows xp ntfs go bad on me. It was just used for storage with only 1 partition. I'm new to linux but was able to use knoppix 5.1 and figured out how to get ddrescue 1.6 installed and working. I was able to rescue the entire disk using the following: ddrescue -B -n /dev/sdd /dev/sda2 recused.log. sdd was the usb and sda2 was a new partition on an e-sata drive. The one thing I think I screwed up was that the new partition on sda2 was not exactly the same size as the original. Can I still use what I have rescued or should I start over with a partition that is exactly the same size? The other question I have is is it better to rescue the data as an image vs an exact disk copy? From what I've read online the opinions seem to vary.

Thanks for any help,
Kevin
 
Old 11-26-2007, 11:14 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,524
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
Speaking from a Forensics point of view I always make images to file. This way it's easier to make a copy of the file (for safekeeping: don't work on your only backup) and do ops on it (like carving for stuff). Obviously you also bypass the probs with partition sizes and that. Also note there's tools called 'dd_rescue' and 'dcfldd'. Last time I used 'dd_rescue' for recovery IIRC. BTW what does "go bad on me" mean in your book? Ticking noises like the HD's heads are wonky or what?
 
Old 11-26-2007, 09:12 PM   #3
Matistimo
LQ Newbie
 
Registered: Nov 2007
Posts: 2

Original Poster
Rep: Reputation: 0
It never made strange noises but I could not read the drive at all in windows or knoppix. It always came up as an unformatted drive but I never did anything to it that should have caused it to be wiped out. It initially had I/O errors and would not get recognized at all using USB. I tried the fire wire port and was able to see it in windows but it said it was not formated. I tried every file recovery program I could find but the only one that worked was Photorec which did retrieve some files but stopped at a certain point probably due to bad sectors or something. ddrescue found 5000+ errors. What is 'dcfldd'?
 
Old 11-27-2007, 02:55 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,524
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
Quote:
Originally Posted by Matistimo View Post
It never made strange noises (..) It initially had I/O errors
That would be the kind of valuable information to mention in an original post next time.


Quote:
Originally Posted by Matistimo View Post
ddrescue found 5000+ errors.
All I/O errors? Please don't talk *about* errors but *post* some.


Quote:
Originally Posted by Matistimo View Post
What is 'dcfldd'?
What are them WWW searchengines for?
 
Old 11-29-2007, 11:12 PM   #5
aylen
LQ Newbie
 
Registered: Oct 2007
Posts: 2

Rep: Reputation: 0
Hi Matistimo, have your tried NTFS Data Recovery Software. I had success using this utility in recovering my lost data after I had accidentally formatted my partition. You can use the demo version to see whether the software is able to recover your files or not, if you can see the data you are looking for then you can go for the full version. Since you have only one partition I recommend you to download the demo to other healthy system and connect your external hard drive from which you wish to recover the data as a slave. Hope you get back your lost data very soon.

Aylen.
 
Old 11-30-2007, 03:46 AM   #6
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,524
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
Quote:
Originally Posted by aylen View Post
NTFS Data Recovery Software
The SW mentioned is commercial, a license starts at USD 99. I'd suggest exhausting all relevant OSS options first.
 
Old 11-30-2007, 05:54 AM   #7
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 11,795

Rep: Reputation: 923Reputation: 923Reputation: 923Reputation: 923Reputation: 923Reputation: 923Reputation: 923Reputation: 923
I'm with unSpawn, however I have to say I've had little success recovering trashed NTFS. I have sufficiently good backups to get me out of holes, but I've been asked to help others; without success.
NTFS is a proprietary can of worms, marketed by a company of ... well, you get the idea.
If a commercial product ultimately does the job, I see no problem paying for it.
 
Old 11-30-2007, 07:15 AM   #8
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,524
Blog Entries: 51

Rep: Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601Reputation: 2601
Quote:
Originally Posted by syg00 View Post
If a commercial product ultimately does the job, I see no problem paying for it.
It depends on how you approach the case, the state of the filesystem and the tools you use. Using a mix of OSS and proprietary tools, often as a means of validating results for evidentiary purposes, I found some tools to be more equal than others ;-p I have no problems using commercial tools but just because a tool is a commercial product does not per definition mean it is "better" in every aspect compared to OSS counterparts.

Last edited by unSpawn; 11-30-2007 at 07:17 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
About data recovery lawrence_lee_lee Linux - Software 13 10-29-2007 10:16 AM
LXer: Recover Data From a dead hard drive using ddrescue LXer Syndicated Linux News 0 11-28-2006 02:03 PM
LXer: Linux Data Recovery on Windows - Is possible through Disk Doctors Linux Recovery Software LXer Syndicated Linux News 0 10-22-2006 12:21 PM
Advice needed: data recovery from NTFS disk using ddrescue and Ubuntu afzal_b Linux - Newbie 10 09-20-2006 09:14 AM
Data recovery - help please smartjafo Linux - Newbie 1 02-03-2006 03:57 PM


All times are GMT -5. The time now is 04:53 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration