Subj : testdisk - Any good READM To : Bbsing Bbs From : Rick Christian Date : Wed Sep 11 2019 12:41:58 Hello Bbsing! 15 Aug 19 20:39, you wrote to me: BB> USB thumb drives, that get to hot ... can crush the onboard memory BB> chips, and controller. Never had that happen with USB thumb drives... but heat is bad for any electronics period. BB> If your drive was part of a lvm volume group, you may be missing the Nope. Standard USB external HD (not a SSD! I don't use or trust that garbage) BB> other part of that volume that is preventing you from seeing all the BB> data. IF not then what I attempt to write below may help. I can SEE THE PARTIOTION in test disk... it just comes up with the Message "Can't mount drive.... " if I plug it in and try to access it like normal use. BB> I'm not sure there is a recovery. USB ssd type drives (non-spinner BB> drives), have a write limit, eventually they just break. Now I've not BB> broke a internal or MR2 type ssd yet, but plenty of USB thumb drives, BB> and micro ssd drives, and often times this is earlier than expected BB> end of life so they are still under warranty. This is why I don't use SSD unreliable and write limited. BB> If your computer is reporting a different size of the drive than Just can't access the drive if I plug it in... BB> Here is what I usually do to test if the disk is broke, the easy way. BB> Caveat, must use linux, Caveat, I don't use any thingBUT LINUX. OK, Z/vm, z/os, s3xx, :) ;) :) but other crap? nope. :) BB> the drive wasn't part of an lvm volume group: Nope, don't use'm too risky. BB> find the device of the disk. This is usually known when plugging it BB> into the computer, then do the following: You can see that below. BB> NOTE!!! dd can wipe out all data on your drive if used incorrectly. BB> NOTE(2) dd can take a long long time to read a 4TB drive. dd is too dangerous for use for exactly #1, and #2. BB> For spinner drives .. there is a different process, you can use dd, BB> but other methods work depending on the partitions and format type. What info for real drives? ie: 9339387.713615] usb 1-3: USB disconnect, device number 6 [9339387.714581] sd 7:0:0:0: [sdb] Synchronizing SCSI cache [9339387.714706] sd 7:0:0:0: [sdb] Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [9339395.976052] usb 1-3: new high-speed USB device number 10 using ehci_hcd [9339396.186116] scsi8 : usb-storage 1-3:1.0 [9339397.184886] scsi 8:0:0:0: Direct-Access Seagate BUP BK 0109 PQ: 0 ANSI: 6 [9339397.186602] sd 8:0:0:0: Attached scsi generic sg1 type 0 I guess I am more interested in: 1) What acn be done via testdisk to use its internal backup/recovery options.... BEFORE I DO 2) Reset the info, likely the partition info, so that plugging it in and selecing to open in file manager or mounting it other ways works I have HUGE RISK AVERSION. Meaning that measure 40x then review, measure 50x more, review.. backup backup backup.. try it... So I'd like to use testdisk to suck out the data I can to say either another 4TB drive I attach to the box and then I can review what I've recovered and go from there.. then test out the steps to recover the disk.. ie: do the x,y,z in testdisk to reset it and then see if it is mountable... I just can seem to find a GOOD STEP BY STEP EXPLAIN it in full for testdisk , that after I am at the point, below, do, x,y,z to reset things so the drive is mountable... Here is some info from testdisk... I have a box with 7.xx testdisk, but where this golded is at is another box, and I quickly attached and ran this to see .... Which based on looking via the testdisk file browser the STUFF IS STILL THERE, the partition table is fubar'd and needs to be reset???? testdisk.log :~$ cat testdisk.log |more Wed Aug 14 19:37:32 2019 Command line: TestDisk TestDisk 6.13, Data Recovery Utility, November 2011 Christophe GRENIER http://www.cgsecurity.org OS: Linux, kernel 3.2.0-79-generic-pae (#115-Ubuntu SMP Thu Mar 12 14:33:25 UTC 2015) i686 Compiler: GCC 4.6 Compilation date: 2012-02-05T07:16:54 ext2fs lib: 1.42, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none /dev/sda: LBA, DCO support /dev/sda: size 156301488 sectors /dev/sda: user_max 156301488 sectors /dev/sda: dco 160086528 sectors Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512 Hard disk list Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512 - Maxtor 6Y080L0, S/N:Y286W68E, FW:YAR41BW0 Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - Seagate BUP BK, FW:0109 Partition table type (auto): EFI GPT Disk /dev/sdb - 4000 GB / 3726 GiB - Seagate BUP BK Partition table type: EFI GPT Analyse Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63 hdr_size=92 hdr_lba_self=1 hdr_lba_alt=7814037166 (expected 7814037166) hdr_lba_start=34 hdr_lba_end=7814037133 hdr_lba_table=2 hdr_entries=128 hdr_entsz=128 check_part_gpt failed for partition 1 P MS Reserved 34 262177 262144 [Microsoft reserved partition] Current partition structure: No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker 1 P MS Reserved 34 262177 262144 [Microsoft reserved partition] 1 P MS Reserved 34 262177 262144 [Microsoft reserved partition] 2 P MS Data 264192 7814035455 7813771264 [Basic data partition] [Seagate Backup Plus Drive] search_part() Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63 NTFS at 16/113/34 filesystem size 7813771264 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 MS Data 264192 7814035455 7813771264 [Seagate Backup Plus Drive] NTFS, 4000 GB / 3725 GiB Search for partition aborted Results P MS Data 264192 7814035455 7813771264 [Seagate Backup Plus Drive] NTFS, 4000 GB / 3725 GiB interface_write() 1 P MS Data 264192 7814035455 7813771264 [Seagate Backup Plus Drive] simulate write! Analyse Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63 hdr_size=92 hdr_lba_self=1 hdr_lba_alt=7814037166 (expected 7814037166) hdr_lba_start=34 hdr_lba_end=7814037133 hdr_lba_table=2 hdr_entries=128 hdr_entsz=128 check_part_gpt failed for partition 1 P MS Reserved 34 262177 262144 [Microsoft reserved partition] Current partition structure: No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker 1 P MS Reserved 34 262177 262144 [Microsoft reserved partition] 1 P MS Reserved 34 262177 262144 [Microsoft reserved partition] 2 P MS Data 264192 7814035455 7813771264 [Basic data partition] [Seagate Backup Plus Drive] search_part() Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63 NTFS at 16/113/34 filesystem size 7813771264 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 MS Data 264192 7814035455 7813771264 [Seagate Backup Plus Drive] NTFS, 4000 GB / 3725 GiB Results P MS Data 264192 7814035455 7813771264 [Seagate Backup Plus Drive] NTFS, 4000 GB / 3725 GiB ntfs_device_testdisk_io_ioctl() unimplemented ntfs_device_testdisk_io_ioctl() unimplemented NTFS filesystem need to be repaired. dir_partition inode=5 P MS Data 264192 7814035455 7813771264 [Seagate Backup Plus Drive] NTFS, 4000 GB / 3725 GiB Directory / 5 dr-xr-xr-x 0 0 0 11-Aug-2019 09:01 . 5 dr-xr-xr-x 0 0 0 11-Aug-2019 09:01 .. 35 -r--r--r-- 0 0 386470 19-Sep-2018 04:00 .VolumeIcon.icns 36 -r--r--r-- 0 0 194586 19-Sep-2018 04:00 .VolumeIcon.ico 37 -r--r--r-- 0 0 4096 19-Sep-2018 04:00 ._ 38 -r--r--r-- 0 0 33 19-Sep-2018 04:00 Autorun.inf 89 dr-xr-xr-x 0 0 0 12-Aug-2019 22:05 Grabbed_Photos 384686 dr-xr-xr-x 0 0 0 5-Jun-2019 07:19 PossImages 41 dr-xr-xr-x 0 0 0 17-Dec-2018 00:07 Seagate 86 dr-xr-xr-x 0 0 0 11-Aug-2019 10:33 seed 87 dr-xr-xr-x 0 0 0 11-Aug-2019 19:30 seed_imagesets 88 dr-xr-xr-x 0 0 0 12-Aug-2019 06:00 Smxxty 43 dr-xr-xr-x 0 0 0 17-Dec-2018 00:07 Start_Here_Mac.app 39 -r--r--r-- 0 0 18033016 19-Sep-2018 04:01 Start_Here_Win.exe 84 dr-xr-xr-x 0 0 0 17-Dec-2018 00:16 System Volume Information 1422010 dr-xr-xr-x 0 0 0 11-Aug-2019 09:02 testssh 40 -r--r--r-- 0 0 1172289 19-Sep-2018 04:00 Warranty.pdf dir_partition inode=384686 P MS Data 264192 7814035455 7813771264 [Seagate Backup Plus Drive] NTFS, 4000 GB / 3725 GiB Directory /PossImages 384686 dr-xr-xr-x 0 0 0 5-Jun-2019 07:19 . 5 dr-xr-xr-x 0 0 0 11-Aug-2019 09:01 .. 893834 dr-xr-xr-x 0 0 0 12-Aug-2019 09:42 SxxyBacks 651926 dr-xr-xr-x 0 0 0 1-May-2019 11:38 SxxyBacks050119 384688 dr-xr-xr-x 0 0 0 5-Jun-2019 07:17 SxxBacks060519 dir_partition inode=893834 P MS Data 264192 7814035455 7813771264 [Seagate Backup Plus Drive] NTFS, 4000 GB / 3725 GiB ntfs_readdir Rick .... NOprah! --- GoldED+/LNX 1.1.5-b20161221 * Origin: Vina's Talos Moon Base Alpha (1:135/377) .