{"id":776,"date":"2014-11-27T20:35:05","date_gmt":"2014-11-27T20:35:05","guid":{"rendered":"https:\/\/stevepedwards.today\/DebianAdmin\/?p=776"},"modified":"2014-11-27T20:35:05","modified_gmt":"2014-11-27T20:35:05","slug":"cool-cmd-6-dd_rescue","status":"publish","type":"post","link":"https:\/\/stevepedwards.today\/DebianAdmin\/cool-cmd-6-dd_rescue\/","title":{"rendered":"Cool Cmd #6 – dd_rescue"},"content":{"rendered":"
<\/div>\n

<\/path><\/svg><\/i> \"Loading\"<\/p>\n

<\/div>\n

Continuing from the last Post, I want look at dd_rescue...
\n<\/span><\/p>\n

Simply, it recovers data blocks as small as 512k in fwd or rev directions to maximise the potential for reading bad sectors. If it can't, it continues on without quitting to the next sector, writing zeros in place of the corruption, which may mean possible recovery of a file once the file system is checked, then mounted again after recovery copying.
\n<\/span><\/p>\n

The input is an unmounted block device and the output is an image file usually, which can be mounted via loopback after processing...\u00a0<\/span><\/span><\/p>\n

# dd_rescue \/dev\/sdf1 \/sahara\/mstest.img<\/span>\u00a0<\/span><\/p>\n

dd_rescue: (info): ipos: 243776.0k, opos: 243776.0k, xferd: 243776.0k\u00a0<\/span><\/p>\n

errs: 0, errxfer: 0.0k, succxfer: 243776.0k\u00a0<\/span><\/p>\n

+curr.rate: 3493kB\/s, avg.rate: 3657kB\/s, avg.load: 3.0%\u00a0<\/span><\/p>\n

dd_rescue: (info): \/dev\/sdf1 (243810.0k): EOF\u00a0<\/span><\/p>\n

Summary for \/dev\/sdf1 -> \/sahara\/mstest.img:\u00a0<\/span><\/p>\n

dd_rescue: (info): ipos: 243810.0k, opos: 243810.0k, xferd: 243810.0k\u00a0<\/span><\/p>\n

errs: 0, errxfer: 0.0k, succxfer: 243810.0k\u00a0<\/span><\/p>\n

+curr.rate: 358kB\/s, avg.rate: 3652kB\/s, avg.load: 3.0%\u00a0<\/span><\/p>\n

# ls -ls \/sahara\/mstest.img<\/span>\u00a0<\/span><\/p>\n

243812<\/strong>\u00a0-rwxr-xr-x 1 root root 249661440 2012-05-14 01:06 \/sahara\/mstest.img<\/span>\u00a0<\/span><\/p>\n

It looks like it has copied the full\u00a0243MB<\/strong>\u00a0of card partition so far, so now to check and mount the image...<\/p>\n

# fsck.vfat \/sahara\/mstest.img<\/span><\/p>\n

dosfsck 3.0.1, 23 Nov 2008, FAT32, LFN\u00a0<\/span><\/p>\n

\/sahara\/mstest.img: 2 files, 10\/60888 clusters\u00a0<\/span><\/p>\n

To mount the image...
\n<\/strong><\/p>\n

# mount -o loop\u00a0\/sahara\/mstest.img \/mnt\/<\/em>\u00a0<\/span><\/span><\/p>\n

# ls\u00a0\/mnt\/<\/em>\u00a0<\/span><\/p>\n

hashes.txt ReportTemplate.doc\u00a0<\/span><\/p>\n

The files are there obviously this did not have to prove anything other than to copy and convert good data, as nothing was corrupt but shows the procedure of imaging original data.<\/p>\n

Now you can try on corrupt media\u00a0by making the dd_rescue image of it to maximise recovery of what is there and not overwriting the original further.
\n<\/span><\/p>\n

You do any further data recovery operations on the image, leaving the original corrupt media as is, to be able to make further images from if there is a problem or mistake in recovery.
\n<\/span><\/p>\n

See also testdisk<\/span> and photorec<\/span><\/p>\n

\"photorec.png\"<\/a><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

<\/div>\n

<\/path><\/svg><\/i> \"Loading\"<\/p>\n

<\/div>\n

Continuing from the last Post, I want look at dd_rescue... Simply, it recovers data blocks as small as 512k in fwd or rev directions to maximise the potential for reading bad sectors. If it can't, it continues on without quitting to the next sector, writing zeros in place of the corruption, which may mean possible ...\u00a0 Cool Cmd #6 – dd_rescue<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-776","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"a3_pvc":{"activated":true,"total_views":1,"today_views":0},"_links":{"self":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts\/776","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/comments?post=776"}],"version-history":[{"count":0,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/posts\/776\/revisions"}],"wp:attachment":[{"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/media?parent=776"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/categories?post=776"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stevepedwards.today\/DebianAdmin\/wp-json\/wp\/v2\/tags?post=776"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}