Hi, The needed data appears to be in the expected file, but at a very unexpected location. So I am landing into unknown territory and I need some time to investigate.
I do not need more data for now, you can allow the file system to be updated again, and we will restart from the beginning when I know more about the issue. Regards Jean-Pierre (also see below) Jelle de Jong wrote: > Dear Jean-Piere, > > The stream.data.full.gz file: > https://powermail.nu/owncloud/index.php/s/6Y0WXs7WQclpOBM This is the full file, and it is ok. I was trying to avoid this, but being in unknown land, I now have to expand the investigation zone, so the full file would have to be needed. No worry, there is no user data there. > # attempt to compile searchseq.c: > http://paste.debian.net/plainh/49252e03/ This failed because you used the option -c which prevents from building an executable. I should have quoted the compilation command : gcc -o searchseq searchseq.c > > # grep and other info how I generated the stream.data.full.gz file: > http://paste.debian.net/plainh/34a9c9ec > > Again thank you for your help! > > Kind regards, > > Jelle de Jong > > On 05/02/17 17:44, Jean-Pierre André wrote: >> Hi, >> >> Jelle de Jong wrote: >>> Hi Jean-Piere, >>> >>> The requested stream.data.gz file: >>> https://powermail.nu/nextcloud/index.php/s/QmbQLnrLZneIScT >> >> Well, this is unexpected : the data does not match. >> I assume it has been relocated, but I have no idea >> where it could be. This situation does not occur in >> my test partition, so I need your help. >> >> Basically, I have to find the following hexadecimal >> digest somewhere : C1F41B5197F9B31AFE5D65585CA4F8F8 >> As the files are big, I have to rely on you doing >> some investigation. >> >> I first assume this is to be found in the expected >> file (00190000.00010000.ccc), and you may first check >> whether "grep" (or "strings") find the printable >> sub-sequence "]eX\" in it : >> grep '\]eX\\' /mnt/sr7-sdb2/..etc../00190000.00010000.ccc >> >> If so, use the attached program searchseq to find out >> precisely where the sequence is located : >> ./findseq C1F41B5197F9B31AFE5D65585CA4F8F8 /mnt/sr7-sdb2/..etc.. >> (I have included the source code, you may compile it if >> you are uneasy executing foreign code). >> >> If it finds it, take the decimal location, divide by 512 >> and post three records around this location. Assuming >> you get 123456789, dividing by 512 yields 241126, so you >> post three records from 241125 (so 241126 and nearby). >> Then play the dd command with needed adaptations and make >> the output available : >> dd if=FILE bs=512 skip=START count=3 | gzip > stream.data.gz >> >> Thank you for your help and good luck ! >> >> Jean-Pierre ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ ntfs-3g-devel mailing list ntfs-3g-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel
