Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

eppur_se_muova

(38,908 posts)
16. Thanks, that's how I seem to have found some of my files ...
Sat Sep 5, 2015, 01:50 PM
Sep 2015

... still trying to recover all of them (there's a lot -- hundreds).

Fortunately, I have two functioning Linux partitions on the same disk as the one that got trashed -- and all about the same size, so block size is the same. The files I am looking for all have precisely the same length, and I can check their contents by running the program that created them (slow, but effective). I found a viable hex search string by comparing several files generated by the same program on one of the bootable partitions.

I've fallen back to using the older program Foremost -- the instructions (and configuration file!) are apparently the original from which those of Scalpel were modified, minus the confusing mistake. And Foremost compiled with nary a glitch. Just need some more time and I think I'll have recovered all I can, and can resume my projects.

Recommendations

0 members have recommended this reply (displayed in chronological order):

Nope - never heard of it left-of-center2012 Aug 2015 #1
That's kind of how I found out about scalpel ... eppur_se_muova Aug 2015 #2
You're on Linux? gvstn Aug 2015 #3
I've been searching the Web already ... eppur_se_muova Aug 2015 #4
Your problem is exactly like mine--complete destruction of the file table. gvstn Aug 2015 #5
TestDisk/PhotoRec is what got me the 850K (or so) nameless files. eppur_se_muova Aug 2015 #6
Good Luck. gvstn Aug 2015 #7
A little w0nderer Aug 2015 #8
Thanks, looks like some useful info in that article. eppur_se_muova Aug 2015 #9
:-) slackware based w0nderer Aug 2015 #10
Well, "compile from source" drives me nuts. eppur_se_muova Sep 2015 #11
compile from source shouldn't be done WHEN you have to rescue w0nderer Sep 2015 #12
Yeah, I'm aware of the situation in that last sentence. Not average user stuff. eppur_se_muova Sep 2015 #13
is this a linux box or a mac os x box? w0nderer Sep 2015 #14
Autopsy is now supported by CAINE -- interface is fairly easy. eppur_se_muova Nov 2017 #20
Do you know generally about the file format a2liberal Sep 2015 #15
Thanks, that's how I seem to have found some of my files ... eppur_se_muova Sep 2015 #16
Awesome! a2liberal Sep 2015 #17
Spam deleted by MIR Team Bernadest Jan 2017 #18
data recovery tools for iPhone Vamksery Feb 2018 #22
welc gopiscrap Feb 2018 #23
No clue from me, but have you tried Ars Technica forums? They have helped me a lot. fleabiscuit Jan 2017 #19
Spam deleted by MIR Team wbcrogdin Dec 2017 #21
Latest Discussions»Help & Search»Computer Help and Support»Anyone here ever use Scal...»Reply #16