From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 2D492138334 for ; Tue, 18 Dec 2018 17:42:36 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 5EDA5E0BDA; Tue, 18 Dec 2018 17:42:28 +0000 (UTC) Received: from mail-wr1-x42b.google.com (mail-wr1-x42b.google.com [IPv6:2a00:1450:4864:20::42b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id BA8CAE0BA1 for ; Tue, 18 Dec 2018 17:42:27 +0000 (UTC) Received: by mail-wr1-x42b.google.com with SMTP id l9so16752296wrt.13 for ; Tue, 18 Dec 2018 09:42:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:reply-to:subject:date:message-id:in-reply-to:references :mime-version; bh=plv+8t4BNig2SJXnxBYODR1A1rJamWHVIzCflo8vrTk=; b=vbSa4hbO0sXDrLBHoMIgNTHZjjl9jjTfp7i7Qr7zLdQsHPvDf3HCrGyDtJLTc5UoqF bxhbBktQkuv9GMwBPlkEysQjyp3WCoj2jZMvRrb8tMo5QteLvbQYhb1c4vaUDaBap0k7 EWZyGcjvN0NOPVaLM3ioLgMFVvGbclOkzmMaxNOhdeT4VuXCUHRcxi0de7hRr8U/947J JPht3PTOVeMzar3t1rCC9eLwM8pd1SLME9ffEtNBgj+X7SYzgtYuDKgZbWuN3UeSUe7B uUK+eXlFZ3lcZFXJtGH44bVPe8cIMSqGBQFvc+mNLPDhmTACjKhADwynmb1MTr+PTUWh 8ITA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:reply-to:subject:date:message-id :in-reply-to:references:mime-version; bh=plv+8t4BNig2SJXnxBYODR1A1rJamWHVIzCflo8vrTk=; b=AC8UKCnIVqQ75iRSN5fAqyq2d1FKufeIN8NzPh8jDPremB0XV19vIuv4P3uAFbwptf kSY479m8jFRaHNK/9CsKOWip+8QWbFZ1Y7PdmHovUqb0eE978ZeJKiGXKrZaohnC1wAm YVzQK4LyfN3UX73KmEQi825Sdgo25gU11kq0z1S2WoaArZzYfWAmk/D028hI2kn/NVcN F+EKFZOt3UjPsblKARUXw4dPIlCm4ejlA9u2cYSSURf29tDswXJxWr/RAG2HL25b9KzE 484EQfiwDplwKej645SIzsLDzq0oYVzwYzS3gkuX+++0MP95xcgMSTYNtTKndehZ8iig Bmbw== X-Gm-Message-State: AA+aEWbtx2fGiYlzmdLg9h3SfD1PrhjEDdqeI1g49wvYxUULt/U/w0P0 g9R+ji8f6cfV60mIQ7J4I6T2hgHu X-Google-Smtp-Source: AFSGD/WWttOxnqtjYo42mqJdhXdvGHlnvyc12MVZEHajMYPWK2mEVmufcc/gVf2GK43H6xu39FKzvg== X-Received: by 2002:adf:b649:: with SMTP id i9mr16125811wre.70.1545154945884; Tue, 18 Dec 2018 09:42:25 -0800 (PST) Received: from dell_xps.localnet (230.3.169.217.in-addr.arpa. [217.169.3.230]) by smtp.gmail.com with ESMTPSA id 126sm4902177wmx.26.2018.12.18.09.42.24 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 18 Dec 2018 09:42:24 -0800 (PST) From: Mick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] data recovery advice needed Date: Tue, 18 Dec 2018 17:42:25 +0000 Message-ID: <1693425.EMckClofS5@dell_xps> In-Reply-To: References: <16801031.VxoPS861Co@peak> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart1650264.E0xGsDtTZs"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-Archives-Salt: 21d0f532-3e49-4e5d-9763-4f83c72a055e X-Archives-Hash: 6866a9a998f464e05412bdd9f32d3250 --nextPart1650264.E0xGsDtTZs Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="UTF-8" On Tuesday, 18 December 2018 17:11:28 GMT Jack wrote: > On 2018.12.18 04:43, Peter Humphrey wrote: > > On Monday, 17 December 2018 23:19:39 GMT Jack wrote: > >> At this point, I think I've forgotten the details, but using the > >> example of a 300G drive with 100G empty and then a 200G partition, > >> when I moved the partition to the beginning of the disk (using > >> gparted, as I remember) once it moved more than the first 100G of > >> the partition, it overwrote the beginning of the original partition, > >> and once it overwrote any of the directory structure it still needed > >> to know where stuff was, game over. > > > > Gparted can handle that without difficulty - I do it often - so I > > think you must be mistaken in the tool you used. > > No, not mistaken in which tool, but likely mistaken in my memory of the > exact course of events. It's possible the gparted move operation was > interrupted. Could have been an accidental Ctl-C or a power failure. > However, at this point, I'd need a better crystal ball looking > backwards to know for sure. > > > Sorry not to be more helpful... > > I have more responses for elsewhere in the thread, but I think any > further serious attempts at recovery are going to have to wait until I > buy a new disk or two, so I can do everything internal on the desktop, > and not on the laptop with USB. > > > -- > > Regards, > > Peter. > > Jack I know others have commented on the reliability of recovering data from drives connected via USB caddy, but I have had satisfactory results on a number of cases. The last time I tried to recover data from a failing disk, which had SMART End-to-End errors increasing continuously and read errors with ddrescue going up each time I ran it. I cloned the whole drive having run ddrescue backwards and forwards a couple of times. c/f/gdisk would see all partitions, but when I tried to mount the cloned /dev/sdb4 (NTFS) with ntfs-3g it complained there was no device found (/dev/sdb4). I got the same error with the failing drive. So, I used losetup with --offset on the failing drive itself over USB 2.0 and was able to mount and recover all the NTFS files. Over the years I've used clonezilla, ddrescue, testdisk, photorec and losetup to recover files. On a couple of times where data on the disk had been overwritten by subsequent operations, I was not able to recover the affected files. So, if when moving the partition data was overwritten I suspect it will be very difficult to recover this with conventional software tools. However, it doesn't hurt to try. :-) -- Regards, Mick --nextPart1650264.E0xGsDtTZs Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEt7MNaGaS6HvTUrEz6WnU8jC95dcFAlwZMYEACgkQ6WnU8jC9 5dfImQ//SUwjPZFFpUTm2Jdzs2sztxxiacvMs4A69v3ntI/DC5KSk3o3Sqy/PnRd ziaZ8QVBPLA7UG8PoBp+X+zhZzSUOMQnEKms/iu19FNIV8Omwdzd4xxCgEPxa235 QqASvL4y9sfNkUhg84tLSR9ESXIW/sOADCuGzbvqI9S+IjLUeTKneanjtaRbOjij XNWD0APnJR18oze99+UNpJ2eBi+D9dHNXhAq/2JC7DvozxlaNanGdrMXOUGKZpvJ Yj3QtvifjsQMX12QzQ2ZLuq3A1Sf+Wz1qrSgfjQxcYNizQSlsIs0IYnlkziWF9lh eGkIb1DMkvoQZFA2c8qCsnlgjQtkoyW7kDPxmrcAefURSJBxijH/fifj/dx4+ic4 AEScJ7kI5bxfy8aP3NQqa2dQ3i2rWC1LmYBinLfBxS4oCSiZLTz05nTV8hAa4iYi 8+5t15xRAyD6N+YV0HcvqS2dPlo7hEcLoxGt3Q21fLa/oqnqkLfn/D8cLGRqrzpz QTkHbNdr4rfSM9OGK23UCV+J3WvkAMBeAIDttAzfso94oJJbEF0Qb0o8Hlj9hoyy 7pM852OTJ4PW+mmO4mt/7wFmBshjYCAdkxBn99BT8V+TMVRNP/4FcbAWx++A37X8 vufLWoRvHfq2tRmcnQqRE1qBprbkrO3FXe/y0kkr80zUQecseTI= =btQr -----END PGP SIGNATURE----- --nextPart1650264.E0xGsDtTZs--