[sf-lug] recovery after dd

[Bobbie Sellers]

On 09/05/2010 08:02 PM, Sameer Verma wrote:
> On Sun, Sep 5, 2010 at 9:55 AM, Sameer Verma<sverma at sfsu.edu>  wrote:
>    
>> I have an old external USB drive (120GB, I think) that had a bunch of
>> files and was close to full. I ran dd on it and installed a 2.1GB
>> image. The remainder of the space is unpartitioned.
>>
>> Now, I plan on using a few tools to see what I can recover. The
>> following are candidates:
>>
>> foremost
>> scalpel
>> photorec
>> testdisk
>> ext3grep
>>
>> ext3grep project page warns not to mount the drive so that the old
>> unpartitioned space doesn't get written to. However, given that I have
>> a new partition via dd in 2.1 GB, that's the only space that will get
>> written to. The unpartitioned space should remain untouched. Is my
>> thinking correct?
>>
>> If anyone on the list has any experiences with these tools, any
>> feedback would be much appreciated.
>>
>> cheers,
>> Sameer
>> --
>> Dr. Sameer Verma, Ph.D.
>> Associate Professor, Information Systems
>> Director, Campus Business Solutions
>> San Francisco State University
>> http://verma.sfsu.edu/
>> http://opensource.sfsu.edu/
>> http://cbs.sfsu.edu/
>> http://is.sfsu.edu/
>>
>>      
> I should qualify this post with some more related information. This is
> an experiment, so if I lose the data, its not a loss. Its more
> "educational" than anything else. I've never had to do this kind of
> "retrieval" before, but the science behind it is interesting and
> educational.
>
> I'll be happy to post results of whatever I find out.
>
> cheers,
> Sameer
>    
     I for one will be happy to hear about the experiment and what
happens.

     Good luck
     Bobbie Sellers
     later