Re: [gentoo-user] Is my data gone?

2010-04-30 Thread Neil Bothwick
On Thu, 29 Apr 2010 18:43:41 -0400, dhk wrote:

 While setting up a new disk I accidentally ran mke2fs /dev/sda1
 instead of mke2fs /dev/hda1.  When I realized the mistake (about 2
 seconds later) I hit Ctrl-C before mke2fs was done.  Now I can't
 mount the drive.  Is there a way to read the drive to get the data off
 or is it unrecoverable?

The data is still there, mke2fs just reset the superblock. Photorec will
recover file contents from a filesystem like this. It only recovers the
contents, not the metadata, so you'll end up with files with meaningless
names, but as they are video files I suspect there are not too many of
them and they are fairly easy to identify. At least it's less work than
importing and editing them all again.


-- 
Neil Bothwick

I am in total control, but don't tell my wife.


signature.asc
Description: PGP signature


Re: [gentoo-user] Is my data gone?

2010-04-30 Thread KH

Am 30.04.2010 10:44, schrieb Neil Bothwick:

On Thu, 29 Apr 2010 18:43:41 -0400, dhk wrote:


While setting up a new disk I accidentally ran mke2fs /dev/sda1
instead of mke2fs /dev/hda1.  When I realized the mistake (about 2
seconds later) I hit Ctrl-C before mke2fs was done.  Now I can't
mount the drive.  Is there a way to read the drive to get the data off
or is it unrecoverable?


The data is still there, mke2fs just reset the superblock. Photorec will
recover file contents from a filesystem like this. It only recovers the
contents, not the metadata, so you'll end up with files with meaningless
names, but as they are video files I suspect there are not too many of
them and they are fairly easy to identify. At least it's less work than
importing and editing them all again.




It will also find files you already deleted. I had this with an SD Card 
once and it is a lot of work to go throu all the files and see what it is.


kh



Re: [gentoo-user] Is my data gone?

2010-04-30 Thread Stroller


On 29 Apr 2010, at 23:53, Alan McKinnon wrote:


On Friday 30 April 2010 00:43:41 dhk wrote:

While setting up a new disk I accidentally ran mke2fs /dev/sda1
instead of mke2fs /dev/hda1.  When I realized the mistake (about 2
seconds later) I hit Ctrl-C before mke2fs was done.  Now I can't  
mount
the drive.  Is there a way to read the drive to get the data off or  
is

it unrecoverable?



For all practical intents and purposes, and for all reasonable  
values of

effectively, your data is effectively gone.

Money, lots of money, could tip the sales in your favour.


What? What?

Photorec will recover the data.


Stroller.




Re: [gentoo-user] Is my data gone?

2010-04-30 Thread Neil Bothwick
On Fri, 30 Apr 2010 11:14:45 +0200, KH wrote:

  The data is still there, mke2fs just reset the superblock. Photorec
  will recover file contents from a filesystem like this. It only
  recovers the contents, not the metadata, so you'll end up with files
  with meaningless names, but as they are video files I suspect there
  are not too many of them and they are fairly easy to identify. At
  least it's less work than importing and editing them all again.

 It will also find files you already deleted. I had this with an SD Card 
 once and it is a lot of work to go throu all the files and see what it
 is.

Of course it will, since that is what it does, find deleted files.
Whether their directory entries were deleted with rm or mke2fs is
irrelevant because photorec looks for chains of blocks on the disk.


-- 
Neil Bothwick

One of the nice things about standards is that there are so many of them.


signature.asc
Description: PGP signature


Re: [gentoo-user] Is my data gone?

2010-04-30 Thread Peter Humphrey
On Friday 30 April 2010 09:44:01 Neil Bothwick wrote:

 The data is still there, mke2fs just reset the superblock. Photorec
 will recover file contents from a filesystem like this. It only
 recovers the contents, not the metadata, so you'll end up with files
 with meaningless names, but as they are video files I suspect there
 are not too many of them and they are fairly easy to identify. At
 least it's less work than importing and editing them all again.

There's also a program that will attempt to link together the various 
files that belong to each image (I assume video works in a similar way), 
which greatly lessens the work

I don't remember its name at the moment, but Google ought to be able 
to find it.

-- 
Rgds
Peter.



Re: [gentoo-user] Is my data gone?

2010-04-30 Thread lee

Stroller wrote:


On 29 Apr 2010, at 23:53, Alan McKinnon wrote:


On Friday 30 April 2010 00:43:41 dhk wrote:

While setting up a new disk I accidentally ran mke2fs /dev/sda1
instead of mke2fs /dev/hda1. When I realized the mistake (about 2
seconds later) I hit Ctrl-C before mke2fs was done. Now I can't mount
the drive. Is there a way to read the drive to get the data off or is
it unrecoverable?



For all practical intents and purposes, and for all reasonable values of
effectively, your data is effectively gone.

Money, lots of money, could tip the sales in your favour.


What? What?

Photorec will recover the data.


Stroller.



side note... i think we all have done this at some point...

F :P



Re: [gentoo-user] Is my data gone?

2010-04-29 Thread Alan McKinnon
On Friday 30 April 2010 00:43:41 dhk wrote:
 While setting up a new disk I accidentally ran mke2fs /dev/sda1
 instead of mke2fs /dev/hda1.  When I realized the mistake (about 2
 seconds later) I hit Ctrl-C before mke2fs was done.  Now I can't mount
 the drive.  Is there a way to read the drive to get the data off or is
 it unrecoverable?


For all practical intents and purposes, and for all reasonable values of 
effectively, your data is effectively gone.

Money, lots of money, could tip the sales in your favour.

This is why you made backups. You did make backups, right?

-- 
alan dot mckinnon at gmail dot com



Re: [gentoo-user] Is my data gone?

2010-04-29 Thread dhk
On 04/29/2010 06:53 PM, Alan McKinnon wrote:
 On Friday 30 April 2010 00:43:41 dhk wrote:
 While setting up a new disk I accidentally ran mke2fs /dev/sda1
 instead of mke2fs /dev/hda1.  When I realized the mistake (about 2
 seconds later) I hit Ctrl-C before mke2fs was done.  Now I can't mount
 the drive.  Is there a way to read the drive to get the data off or is
 it unrecoverable?
 
 
 For all practical intents and purposes, and for all reasonable values of 
 effectively, your data is effectively gone.
 
 Money, lots of money, could tip the sales in your favour.
 
 This is why you made backups. You did make backups, right?
 

The disk was for video so I do have the tapes around, but I lost my
current edits.  Finished products were burned to disk.  Most of the data
was stuff I finished and was trying to decide what to do with, guess
that decision's been made.  Hopefully I'll never have to recreate them.

Anyway to pick up the disk from the middle?  I really don't want to go
through the tapes and download them again.

Thanks,

dhk



Re: [gentoo-user] Is my data gone?

2010-04-29 Thread Paul Hartman
On Thu, Apr 29, 2010 at 5:43 PM, dhk dhk...@optonline.net wrote:
 While setting up a new disk I accidentally ran mke2fs /dev/sda1
 instead of mke2fs /dev/hda1.  When I realized the mistake (about 2
 seconds later) I hit Ctrl-C before mke2fs was done.  Now I can't mount
 the drive.  Is there a way to read the drive to get the data off or is
 it unrecoverable?

Before attempting anything I would clone the drive to a spare and then
attempt recovery on the clone. (because sometimes trying to fix it can
just make things worse).

You can try something like testdisk, and of course try fsck first. Or
one of many commercial programs such as those listed here which
probably do the same thing as testdisk:

http://unformat-ext2.qarchive.org/

There's no simple unformat command or anything that I know of,
though. Sorry :(