cgsecurity.org

A few days ago I tried to select write while under EFI GPT. It said it was successful and I needed to reboot. After the reboot I still could not mount it and gpart couldn't see it. I tried selecting write 2 more times but no luck. Nothing on the drive was super critical so I've decided to move on ...

I tried select EFI GPT for the partition type. I see a Solaris partition type that mentions ufs. This option gives me a write option. Wanted to check before I tried that to see if it's worth a shot or a waste. Thanks.

Fri Jun 15 23:11:05 2018
Command line: TestDisk

TestDisk 7.0, Data Recovery ...

I can only see the UFS partition if I choose None for the partition type. That tells me I can't write because I choose None. Is there anything that can be done since it only appears under the None partition type?

I checked it again in testdisk. If I choose Intel for the part type i see the NTFS partition. If I choose none I see the UFS partition. Below is the log with just a quick search under each partition type.




Mon Jun 11 20:57:45 2018
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April ...

On the freebsd box it loaded as /dev/da1 so I updated the commands. After I ran them I restarted the server.


dd bs=8192 count=1 if=/dev/da1 of=backup_start_da1.dd
dd bs=8192 count=1 if=/dev/zero of=/dev/da1

Before reboot:
Jun 11 18:04:58 nas001 umass1 on uhub0
Jun 11 18:04:58 nas001 umass1 ...

The deep search finished. Here is the deep search section of the log file.

search_part()
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63
NTFS at 0/32/33
filesystem size 15628048384
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1 ...

I tried to attach the logs so far but it keeps telling me the extension is invalid. I tried a few different ones but no luck. Below are the 2 logs I have. The first is if I select Non partitioned media for the type, which is what it defaults to when I get to that screen. Here is see the ufs ...

I should have included the log. The deep search is still running. It's an 8TB drive. I let it run overnight but it's just at 40% now. Will probably be tomorrow before I can attach the log. I'll put it up here an ssson as it's finished. Thanks.

I have a WD My Book I purchased to migrate a FreeBSD server to a new one. It came with a 7.3TB ntfs partition. I did a gpart destroy -F and then created a new ufs filesystem. I did not remove the ntfs partition before i created the new one (feeling stupid as I type that sentence). The drive mounted ...