Syntaxe - photorec.sig

Utiliser PhotoRec pour récupérer des données perdues
Locked
Message
Author
sylviem
Posts: 1
Joined: 29 Dec 2017, 19:14

Syntaxe - photorec.sig

#1 Post by sylviem »

Bonjour,
J'ai perdu des images créées avec les cameras de mon appareil Canon et de mon mobile Nexus 5.
J'ai lu la doc, cependant l'exemple affiche la valeur '0' pour le paramètre 'offset of the signature'.
Peut-on utiliser une valeur autre que '0' pour ce paramètre? Exemple:

Content of '.photorec.sig' (en se fiant aux 2 dump qui suivent).
jpg DC 0x43616e6f6e20506f77657253686f742053583530204853
jpg BE 0x4e657875732035


Code: Select all

sylvie@blackPC:~$ hexdump -C /home/sylvie/Documents/00_inondation_nov_2017/03_photos/Canon/IMG_0937.JPG | more
00000000  ff d8 ff e1 35 fe 45 78  69 66 00 00 49 49 2a 00  |....5.Exif..II*.|
00000010  08 00 00 00 0d 00 0e 01  02 00 20 00 00 00 aa 00  |.......... .....|
00000020  00 00 0f 01 02 00 06 00  00 00 ca 00 00 00 10 01  |................|
00000030  02 00 18 00 00 00 d0 00  00 00 12 01 03 00 01 00  |................|
00000040  00 00 01 00 00 00 1a 01  05 00 01 00 00 00 e8 00  |................|
00000050  00 00 1b 01 05 00 01 00  00 00 f0 00 00 00 28 01  |..............(.|
00000060  03 00 01 00 00 00 02 00  00 00 32 01 02 00 14 00  |..........2.....|
00000070  00 00 f8 00 00 00 3b 01  02 00 01 00 00 00 00 00  |......;.........|
00000080  00 00 13 02 03 00 01 00  00 00 02 00 00 00 98 82  |................|
00000090  02 00 01 00 00 00 00 00  80 43 69 87 04 00 01 00  |.........Ci.....|
000000a0  00 00 0c 01 00 00 25 88  04 00 01 00 00 00 88 13  |......%.........|
000000b0  00 00 88 14 00 00 20 20  20 20 20 20 20 20 20 20  |......          |
000000c0  20 20 20 20 20 20 20 20  20 20 20 20 20 20 20 20  |                |
000000d0  20 20 20 20 20 00 43 61  6e 6f 6e 00 43 61 6e 6f  |     .Canon.Cano|
000000e0  6e 20 50 6f 77 65 72 53  68 6f 74 20 53 58 35 30  |n PowerShot SX50|
000000f0  20 48 53 00 b4 00 00 00  01 00 00 00 b4 00 00 00  | HS.............|
...

jpg DC 0x43616e6f6e20506f77657253686f742053583530204853

Code: Select all

sylvie@blackPC:~$ hexdump -C /home/sylvie/Documents/00_inondation_nov_2017/03_photos/N5/IMG_20171103_060616.jpg | more
00000000  ff d8 ff e1 76 ec 45 78  69 66 00 00 4d 4d 00 2a  |....v.Exif..MM.*|
00000010  00 00 00 08 00 0c 01 32  00 02 00 00 00 14 00 00  |.......2........|
00000020  00 9e 88 25 00 04 00 00  00 01 00 00 02 43 01 10  |...%.........C..|
00000030  00 02 00 00 00 08 00 00  00 b2 01 00 00 04 00 00  |................|
00000040  00 01 00 00 09 90 02 13  00 03 00 00 00 01 00 01  |................|
00000050  00 00 01 28 00 03 00 00  00 01 00 02 00 00 01 01  |...(............|
00000060  00 04 00 00 00 01 00 00  0c c0 01 1b 00 05 00 00  |................|
00000070  00 01 00 00 00 ba 01 12  00 03 00 00 00 01 00 01  |................|
00000080  00 00 87 69 00 04 00 00  00 01 00 00 00 ca 01 1a  |...i............|
00000090  00 05 00 00 00 01 00 00  00 c2 01 0f 00 02 00 00  |................|
000000a0  00 04 4c 47 45 00 00 00  02 49 32 30 31 37 3a 31  |..LGE....I2017:1|
000000b0  31 3a 30 33 20 30 36 3a  30 36 3a 31 38 00 4e 65  |1:03 06:06:18.Ne|
000000c0  78 75 73 20 35 00 00 00  00 48 00 00 00 01 00 00  |xus 5....H......|
000000d0  00 48 00 00 00 01 00 14  a0 01 00 03 00 00 00 01  |.H..............|
...

jpg BE 0x4e657875732035

Merci à l'avance pour votre aide.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Syntaxe - photorec.sig

#2 Post by cgrenier »

PhotoRec devrait par défaut récupérer ces photos.
Sans utiliser de fichier signature, que donne un "fidentify /home/sylvie/Documents/00_inondation_nov_2017/03_photos/Canon/IMG_0937.JPG" ?
Essayez aussi la version 7.1-WIP (cf https://www.cgsecurity.org/testdisk.pdf )

Locked