RE: disk recovery

["Magee, Fred \(MRC\)" <fred magee atk com>]

Thanks for the tip.

I'll go look into it and give it a shot.

-----Original Message-----
From: taroon-list-bounces redhat com [mailto:taroon-list-bounces redhat com] On Behalf Of Saurabh Barve
Sent: Friday, May 27, 2005 9:25 AM
To: taroon-list redhat com
Subject: Re: disk recovery

> Date: Thu, 26 May 2005 21:34:07 -0500
> From: Thomas Cameron <thomas cameron camerontech com>
> Subject: Re: disk recovery
> To: "Discussion of Red Hat Enterprise Linux 3 (Taroon)"
> 	<taroon-list redhat com>
> Message-ID: <1117161247 4995 7 camel ml110 camerontech com>
> Content-Type: text/plain; charset=utf-8
> 
> On Thu, 2005-05-26 at 17:58 -0500, Magee, Fred (MRC) wrote:
> 
>>Good afternoon.
>>
>> 
>>
>>Due to various reasons we have a classified system with no backup
>>mechanism and have a hard drive with critical user data that has
>>become corrupted.  Does anyone out there know of any software
>>available that can go in and repair directories and other files?  We
>>have 1000’s of hours of critical user data I need to recover and we
>>cannot remove the disk from it’s location so sending it to a data
>>recovery company is not possible.
>>
>> 
>>
>>When I do an ls –l on the old /home partition I see things like this:
>>
>> 
>>
>>            ?rwxr-xr-x    52 username1   username1 48621462 1657991535
>>15628596 May 26 15:56 username1/
>>
>>            ?rwxr-xr-x    52 username2   username2 48621462 1657991535
>>15628596 May 26 15:56 username2/
>>
>>            ?rwxr-xr-x    52 username3   username3 48621462 1657991535
>>15628596 May 26 15:56 username3/
>>
>>            drwxr-xr-x      3 username4   username4 4096 May 23 13:45
>>username4
>>
>> 
>>
>>The large numbers are different for each of the usernames but the
>>basic structure looks to be similar.  Is there a way to force an fsck
>>against this partition to see if it can recover anything?  We have
>>done a dd if=/dev/sda of /dev/hdd bs= 32768 so I have an “exact” copy
>>of the disk.  
>>
>> 
>>
>>Thanks for any information anyone can provide. 
> 
> 
> I assume you've already tried fsck?
> 
> Thomas
> 
> 

Have you tried the dd_recover utility? It skips over the bad blocks, and 
copies as much data as it can. It has been very useful for me on at 
least one occasion. I can't seem to find the web site for it right now, 
but I'm sure you can find it with a bit of googling...

Saurabh.

--
Taroon-list mailing list
Taroon-list redhat com
http://www.redhat.com/mailman/listinfo/taroon-list