TIP: Click on subject to list as thread! ANSI
echo: linux
to: Bbsing Bbs
from: Rick Christian
date: 2019-09-11 12:41:00
subject: testdisk - Any good READM

   Hello Bbsing!

15 Aug 19 20:39, you wrote to me:


 BB> USB thumb drives, that get to hot ... can crush the onboard memory
 BB> chips, and controller.

Never had that happen with USB thumb drives... but heat is bad for any 
electronics period.

 BB> If your drive was part of a lvm volume group, you may be missing the

Nope.

Standard USB external HD (not a SSD! I don't use or trust that garbage)

 BB> other part of that volume that is preventing you from seeing all the
 BB> data. IF not then what I attempt to write below may help.

I can SEE THE PARTIOTION in test disk... it just comes up with the Message 
"Can't mount drive.... "  if I plug it in and try to access it like normal use.

 BB> I'm not sure there is a recovery. USB ssd type drives (non-spinner
 BB> drives), have a write limit, eventually they just break. Now I've not
 BB> broke a internal or MR2 type ssd yet, but plenty of USB thumb drives,
 BB> and micro ssd drives, and often times this is earlier than expected
 BB> end of life so they are still under warranty.

This is why I don't use SSD unreliable and write limited.

 BB> If your computer is reporting a different size of the drive than

Just can't access the drive if I plug it in...

 BB> Here is what I usually do to test if the disk is broke, the easy way.

 BB> Caveat, must use linux,

Caveat, I don't use any thingBUT LINUX. OK, Z/vm, z/os, s3xx, :) ;) :) but 
other crap? nope. :)

 BB>  the drive wasn't part of an lvm volume group:

Nope, don't use'm too risky.


 BB> find the device of the disk. This is usually known when plugging it
 BB> into the computer, then do the following:

You can see that below.

 BB> NOTE!!! dd can wipe out all data on your drive if used incorrectly.
 BB> NOTE(2) dd can take a long long time to read a 4TB drive.


dd is too dangerous for use for exactly #1, and #2.


 BB> For spinner drives .. there is a different process, you can use dd,
 BB> but other methods work depending on the partitions and format type.

What info for real drives? ie:
9339387.713615] usb 1-3: USB disconnect, device number 6
[9339387.714581] sd 7:0:0:0: [sdb] Synchronizing SCSI cache
[9339387.714706] sd 7:0:0:0: [sdb]  Result: hostbyte=DID_NO_CONNECT 
driverbyte=DRIVER_OK
[9339395.976052] usb 1-3: new high-speed USB device number 10 using ehci_hcd
[9339396.186116] scsi8 : usb-storage 1-3:1.0
[9339397.184886] scsi 8:0:0:0: Direct-Access     Seagate  BUP BK           0109 
PQ: 0 ANSI: 6
[9339397.186602] sd 8:0:0:0: Attached scsi generic sg1 type 0

I guess I am more interested in:

1) What acn be done via testdisk to use its internal backup/recovery 
options.... BEFORE I DO

2) Reset the info, likely the partition info, so that plugging it in and 
selecing to open in file manager or mounting it other ways works

I have HUGE RISK AVERSION. Meaning that measure 40x then review, measure 50x 
more, review.. backup backup backup.. try it...

So I'd like to use testdisk to suck out the data I can to say either another 
4TB drive I attach to the box and then I can review what I've recovered and go 
from there.. then test out the steps to recover the disk.. ie: do the x,y,z in 
testdisk to reset it and then see if it is mountable...

I just can seem to find a GOOD STEP BY STEP EXPLAIN it in full for testdisk , 
that after I am at the point, below, do, x,y,z to reset things so the drive is 
mountable...

Here is some info from testdisk... I have a box with 7.xx testdisk, but where 
this golded is at is another box, and I quickly attached and ran this to see 
... Which based on looking via the testdisk file browser the STUFF IS STILL 
THERE, the partition table is fubar'd and needs to be reset????

testdisk.log
:~$ cat testdisk.log |more


Wed Aug 14 19:37:32 2019
Command line: TestDisk

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER 
http://www.cgsecurity.org
OS: Linux, kernel 3.2.0-79-generic-pae (#115-Ubuntu SMP Thu Mar 12 14:33:25 UTC 
2015) i686
Compiler: GCC 4.6
Compilation date: 2012-02-05T07:16:54
ext2fs lib: 1.42, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, DCO support
/dev/sda: size       156301488 sectors
/dev/sda: user_max   156301488 sectors
/dev/sda: dco        160086528 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector 
size=512
Hard disk list
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512 - Maxtor 
6Y080L0, S/N:Y286W68E, FW:YAR41BW0
Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - 
Seagate BUP BK, FW:0109

Partition table type (auto): EFI GPT
Disk /dev/sdb - 4000 GB / 3726 GiB - Seagate BUP BK
Partition table type: EFI GPT

Analyse Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=7814037166 (expected 7814037166)
hdr_lba_start=34
hdr_lba_end=7814037133
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved 
partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved 
partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved 
partition]
 2 P MS Data                   264192 7814035455 7813771264 [Basic data 
partition] [Seagate Backup Plus Drive]

search_part()
Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63
NTFS at 16/113/34
filesystem size           7813771264
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   264192 7814035455 7813771264 [Seagate Backup 
Plus Drive]
     NTFS, 4000 GB / 3725 GiB
Search for partition aborted

Results
   P MS Data                   264192 7814035455 7813771264 [Seagate Backup 
Plus Drive]
     NTFS, 4000 GB / 3725 GiB

interface_write()
 1 P MS Data                   264192 7814035455 7813771264 [Seagate Backup 
Plus Drive]
simulate write!

Analyse Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=7814037166 (expected 7814037166)
hdr_lba_start=34
hdr_lba_end=7814037133
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved 
partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved 
partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved 
partition]
 2 P MS Data                   264192 7814035455 7813771264 [Basic data 
partition] [Seagate Backup Plus Drive]

search_part()
Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63
NTFS at 16/113/34
filesystem size           7813771264
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   264192 7814035455 7813771264 [Seagate Backup 
Plus Drive]
     NTFS, 4000 GB / 3725 GiB

Results
   P MS Data                   264192 7814035455 7813771264 [Seagate Backup 
Plus Drive]
     NTFS, 4000 GB / 3725 GiB
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
NTFS filesystem need to be repaired.


dir_partition inode=5
   P MS Data                   264192 7814035455 7813771264 [Seagate Backup 
Plus Drive]
     NTFS, 4000 GB / 3725 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 11-Aug-2019 09:01 .
       5 dr-xr-xr-x     0      0         0 11-Aug-2019 09:01 ..
      35 -r--r--r--     0      0    386470 19-Sep-2018 04:00 .VolumeIcon.icns
      36 -r--r--r--     0      0    194586 19-Sep-2018 04:00 .VolumeIcon.ico
      37 -r--r--r--     0      0      4096 19-Sep-2018 04:00 ._
      38 -r--r--r--     0      0        33 19-Sep-2018 04:00 Autorun.inf
      89 dr-xr-xr-x     0      0         0 12-Aug-2019 22:05 Grabbed_Photos
  384686 dr-xr-xr-x     0      0         0  5-Jun-2019 07:19 PossImages
      41 dr-xr-xr-x     0      0         0 17-Dec-2018 00:07 Seagate
      86 dr-xr-xr-x     0      0         0 11-Aug-2019 10:33 seed
      87 dr-xr-xr-x     0      0         0 11-Aug-2019 19:30 seed_imagesets
      88 dr-xr-xr-x     0      0         0 12-Aug-2019 06:00 Smxxty
      43 dr-xr-xr-x     0      0         0 17-Dec-2018 00:07 Start_Here_Mac.app
      39 -r--r--r--     0      0  18033016 19-Sep-2018 04:01 Start_Here_Win.exe
      84 dr-xr-xr-x     0      0         0 17-Dec-2018 00:16 System Volume 
Information
 1422010 dr-xr-xr-x     0      0         0 11-Aug-2019 09:02 testssh
      40 -r--r--r--     0      0   1172289 19-Sep-2018 04:00 Warranty.pdf

dir_partition inode=384686
   P MS Data                   264192 7814035455 7813771264 [Seagate Backup 
Plus Drive]
     NTFS, 4000 GB / 3725 GiB
Directory /PossImages
  384686 dr-xr-xr-x     0      0         0  5-Jun-2019 07:19 .
       5 dr-xr-xr-x     0      0         0 11-Aug-2019 09:01 ..
  893834 dr-xr-xr-x     0      0         0 12-Aug-2019 09:42 SxxyBacks
  651926 dr-xr-xr-x     0      0         0  1-May-2019 11:38 SxxyBacks050119
  384688 dr-xr-xr-x     0      0         0  5-Jun-2019 07:17 SxxBacks060519

dir_partition inode=893834
   P MS Data                   264192 7814035455 7813771264 [Seagate Backup 
Plus Drive]
     NTFS, 4000 GB / 3725 GiB
ntfs_readdir

Rick


... NOprah!
--- GoldED+/LNX 1.1.5-b20161221
                                                                                    
* Origin: Vina's Talos Moon Base Alpha (1:135/377)

SOURCE: echomail via QWK@dmine.net

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.