[Discuss] FAT data recovery through Linux?
Michael Foltinek
foltinek at gmail.com
Wed Jul 18 14:59:21 PDT 2007
I'd say it depends on what the problem actually is. There's a utility
called testdisk that will recreate partition tables; it saved my bacon
one time.
If that's not your problem, then perhaps you have text files (or files
with text in them) that you know the contents of; in that case,
perhaps you want to dd the disk into small output files and simply
grep for the data. If the file is fragmented, that might not be
enough, so then I'd probably break out sleuthkit and use some of its
tools.
I'm not sure if it's part of the sleuthkit, but there's another
utility called foremost (that might be the old name, or original
version; you know how OSS can be) that might be the right tool. See
http://www.samag.com/documents/s=8859/sam0309a/sam0309a.htm for more
info.
I think googling "linux FAT forensic" will give you some good pointers.
On 7/17/07, R. Langkamer <techie at mcfarlanecomputing.net> wrote:
> Hello all,
>
> I have a FAT32 partition that does not mount on any system I have (yes,
> even in Linux) and it has data that I would really like to access. I
> found a windows application that will recover the data, but I would much
> rather boot into my Linux install and do the work there.
> I have tried my GooFu, but it must be weak as I am unable to find
> anything about using Linux to recover data.
> I know how to use dd, but my understanding is that it makes an exact
> copy and this won't help me.
>
> Does anyone have any leads they can offer?
>
> Thanks in advance!
>
> --
>
> www.langkamerit.com
> _______________________________________________
> Discuss mailing list
> Discuss at vlug.org
> http://ladybug.vlug.org/cgi-bin/mailman/listinfo/discuss
>
--
True compassion is more than flinging a coin at a beggar; it comes to
see that an edifice which produces beggars needs restructuring.
- Dr. Martin Luther King Jr.
More information about the Discuss
mailing list