Date: Thu, 26 May 2005 21:34:07 -0500
From: Thomas Cameron <thomas cameron camerontech com>
Subject: Re: disk recovery
To: "Discussion of Red Hat Enterprise Linux 3 (Taroon)"
<taroon-list redhat com>
Message-ID: <1117161247 4995 7 camel ml110 camerontech com>
Content-Type: text/plain; charset=utf-8
On Thu, 2005-05-26 at 17:58 -0500, Magee, Fred (MRC) wrote:
Good afternoon.
Due to various reasons we have a classified system with no backup
mechanism and have a hard drive with critical user data that has
become corrupted. Does anyone out there know of any software
available that can go in and repair directories and other files? We
have 1000’s of hours of critical user data I need to recover and we
cannot remove the disk from it’s location so sending it to a data
recovery company is not possible.
When I do an ls –l on the old /home partition I see things like this:
?rwxr-xr-x 52 username1 username1 48621462 1657991535
15628596 May 26 15:56 username1/
?rwxr-xr-x 52 username2 username2 48621462 1657991535
15628596 May 26 15:56 username2/
?rwxr-xr-x 52 username3 username3 48621462 1657991535
15628596 May 26 15:56 username3/
drwxr-xr-x 3 username4 username4 4096 May 23 13:45
username4
The large numbers are different for each of the usernames but the
basic structure looks to be similar. Is there a way to force an fsck
against this partition to see if it can recover anything? We have
done a dd if=/dev/sda of /dev/hdd bs= 32768 so I have an “exact� copy
of the disk.
Thanks for any information anyone can provide.
I assume you've already tried fsck?
Thomas