| View previous topic :: View next topic |
| Author |
Message |
Apetrini
Veteran
Joined: 09 Feb 2005
Posts: 1158
|
 Posted: Mon Aug 31, 2009 3:25 am Post subject: |
 |
|
Maybe it's a stupid question, but why you love sudo so much? It's not much simpler work as root?
_________________
Linux ape 2.6.31-vanilla. Paludis since 0.28.0. |
|
| Back to top |
|
 |
SpiroPoulos89
Apprentice
Joined: 11 Jun 2009
Posts: 188
|
| Posted: Mon Aug 31, 2009 3:25 am Post subject: |
|
|
I guess it would be easier as root but I am just used to sudo.........
Anyway.....It seemed to work now but when but when I try to mount my Image it still gives the same error as before.......what could be wrong?? |
|
| Back to top |
|
|
SpiroPoulos89
Apprentice
Joined: 11 Jun 2009
Posts: 188
|
| Posted: Tue Sep 01, 2009 11:38 pm Post subject: |
|
|
Hello
Thanks for all the help so far.
I now mounted the image using this command:
| Code: | | sudo mount -o loop,ro,offset=32256 usb.img /media |
Can anyone help e recover the fat32 partition from the mounted location.
Note: I know the partition I'm trying to recover was fat32 but now it mounts as a different type and only shows a folder lost and found. After it lost my partition I did try to reformat it but it just froze and did not format. so I don't know if I messed anything up trying to reformat.
Thanks for any help |
|
| Back to top |
|
|
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54325
Location: 56N 3W
|
| Posted: Wed Sep 02, 2009 7:40 pm Post subject: |
|
|
SpiroPoulos89,
As you have lost+found, it seems like you sucessfully reformatted the drive to be an ExtX filesystem.
If that is indeed the case, then some of your data is gone as Ext filesystems write their metadata in different places to FAT32.
Recovery is made more difficult as much of the FAT32 metadata is destroyed too.
However, the good news is that formatting does not blank the disk. Only metadata is written during formatting so much of your data is still there, its the pointers to it that are missing.
Do not use the drive any further. emerge sleuthkit and let it look at your image.
Its going to be slow sleuthkit is a disk forensics tool and you will need to learn to use it.
There are other things we cn look at too but I need some reference material I won't have access to until Friday.
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
SpiroPoulos89
Apprentice
Joined: 11 Jun 2009
Posts: 188
|
| Posted: Fri Sep 04, 2009 3:18 am Post subject: |
|
|
NeddySeagoon,
Thanks for helping.
I'm going to emerge sleuthkit now and try to use it as best I can and I will post any useful information.
Also my harddrive had the folder Lost and Found before I tried formatting it. I know for a Fact it was fat32. Once before I had deleted my partition accidentally and it also showed lost and found when I mounted. I know then It was also fat32. and I ran a windows program "Active Partition Recovery" and it found my partition and saved it right back to the harddrive very simply.
But know that my drive has bad sectors its not working so great with that program. Hopefully I have better luck with sleuthkit.
Thanks |
|
| Back to top |
|
|
SpiroPoulos89
Apprentice
Joined: 11 Jun 2009
Posts: 188
|
| Posted: Fri Sep 04, 2009 4:34 am Post subject: |
|
|
I'm trying to look online for help with sleuthkit but there's not much help for how to use it or at least I cant find much help.
I found one thread here:
https://forums.gentoo.org/viewtopic-t-365703.html
And it says to copy all contents from the image type
But when I type that I get an error:
| Code: | | -bash: copy: command not found |
What did I do wrong?
Thanks for any help |
|
| Back to top |
|
|
CurtE
Guru
Joined: 17 Apr 2004
Posts: 364
Location: Minneapolis, MN
|
| Posted: Fri Sep 04, 2009 4:47 am Post subject: |
|
|
| I'm not sure. I looked at your link and they did type 'copy' but I think it should be 'cp'. |
|
| Back to top |
|
|
SpiroPoulos89
Apprentice
Joined: 11 Jun 2009
Posts: 188
|
| Posted: Fri Sep 04, 2009 6:04 am Post subject: |
|
|
| CurtE wrote: | | I'm not sure. I looked at your link and they did type 'copy' but I think it should be 'cp'. |
Thank You CurtE
That was the problem. Now it is copying properly.
When its done I'll post any other problems.
Thanks |
|
| Back to top |
|
|
NeddySeagoon
Administrator
Joined: 05 Jul 2003
Posts: 54325
Location: 56N 3W
|
| Posted: Sat Sep 05, 2009 2:02 pm Post subject: |
|
|
SpiroPoulos89,
Please read you private messages
_________________
Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
| Back to top |
|
|
|
Other Things Gentoo
