On Sun, Aug 14, 2005 at 01:02:17PM -0500, Eloy Perez wrote: | Does anyone have any experience with data recovery? Grabbing files off a | hidden ext2/3 partition? Rebuilding a partition table?
Having a partition be `hidden' is no big deal to Linux. Only Windows cares about that. As for rebuilding the partition table, as long as you haven't actually overwritten any of the partition itself, that's relatively simple -- you just use fdisk, create the partitions as they were before, and save. And then there's your data. If you don't know the sizes of your partitions, however, then it gets more tricky. You'd probably have to guess until it works, or scan the beginning of each cylinder for the signature of an ext3 partition ... | Here's what I my disk looked like before this whole thing started: | [Primary: Windows xp ntfs] [Primary: [logical: data ntfs] [logical: data | ntfs] [logical Linux swap] [logical linux root ext3]] If all you care about is the last partition, what you'll need to do is remember how big it was, do the math and subtract that many cylinders from the end of the disk and then create a partition that matches that, and see if it's correct (if mount -r /dev/whatever /mnt works and you see your data, it's probably correct.) If you created partitions that aren't on cylinder boundaries, then things get much worse -- you'll probably need to write something to scan the disk for the start of ext3 partitions. | One more detail: my laptop has no floppy drive :( One thing -- STOP WRITING TO YOUR HARD DRIVE! The more you do that, the more likely it is that you'll nuke the important stuff. You really should remove the drive and mount it in a desktop PC using a laptop/full sized IDE adaptor -- less than $10 at Frys. Have Linux already installed on the PC, and use that to work on stuff. Booting Knoppix on the laptop is another option. Do make a note of what the laptop thinks the geometry of the disk is -- it may be different on a PC. Linux will use the geometry as defined on the partition table on the disk, but that may be all screwed up right now. -- Doug McLaren, [EMAIL PROTECTED] "It's got a cop motor, a 440 cubic inch plant, it's got cop tires, cop suspension, cop shocks. It's a model made before catalytic converters so it'll run good on regular gas. What do you say, is it the new Bluesmobile or what?" _______________________________________________ Siglinux mailing list Siglinux@utacm.org http://www.utacm.org:81/mailman/listinfo/siglinux
