TestDisk doesn't seem to write parition

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
maxxer
Posts: 1
Joined: 13 Sep 2012, 03:48

TestDisk doesn't seem to write parition

#1 Post by maxxer »

Hello all,
I have an Intel matrix RAID composed of 4 2Tb drives in Stripe, no parity or mirror. (yes I know)
As many users experience, minor modifications to BIOS, power failure etc can cause corruption of metadata on one of the disk and cause it to fall out of the array, effectively destroying the whole array.

Now, I have used TestDisk several times in the past to effortlessly correct this problem.

This time, however, after going through these steps.
1. Delete array
2. Rebuild New array with same disks
3. Recover and write via TestDisk
4. Repair boot on first partition.

While TestDIsk successfully identifies 2 partitions (8TB RAID split into 2 partitions), it only successfully wrote the first partition.

Rerunning TestDisk, selecting Analyse, quick search, intel (tried both 32bit and 64bit versions), TestDIsk Once again recognizes both partitions (although it now takes about 20 minutes to find the second), but when I try to write changes and reboot it seems like nothing has changed / nothing has been rewritten to disk .

Running TestDisk again produces the exact same results.

Log file is attached.

Any thoughts/insight greatly appreciated.

EDIT: thought I could attach the log, instead it is copied below



Wed Sep 12 23:24:01 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, September 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-09-01T21:55:20
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=8001585938432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=8001585938432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=159934054400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2199023255040
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
filewin32_getfilesize(\\.\Z:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\Z:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\Z:
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - INTEL SS DSA2M160G2GC, S/N:VCOP490900B561A0NG, FW:2CV1
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972804 255 63, sector size=512 - Intel Raid 0 Volume, S/N:Volume_0000, FW:1.0.

Partition table type (auto): Intel
Disk /dev/sdb - 8001 GB / 7452 GiB - Intel Raid 0 Volume
Partition table type: Intel

Analyse Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972804 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 16/113/34
check_part_i386 failed for partition type 07
Current partition structure:
1 * HPFS - NTFS 16 113 34 267365 202 36 4294967295 [Samples]
Invalid NTFS or EXFAT boot
2 P HPFS - NTFS 267349 89 4 534698 178 6 4294967295
2 P HPFS - NTFS 267349 89 4 534698 178 6 4294967295
Space conflict between the following two partitions
1 * HPFS - NTFS 16 113 34 267365 202 36 4294967295 [Samples]
2 P HPFS - NTFS 267349 89 4 534698 178 6 4294967295

search_part()
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972804 255 63
NTFS at 16/113/34
filesystem size 4294967295
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 267365 202 36 4294967295 [Samples]
NTFS, blocksize=4096, 2199 GB / 2047 GiB
NTFS at 318721/179/51
filesystem size 10507829248
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 318721 179 51 972803 210 15 10507829248 [Big]
NTFS, blocksize=4096, 5380 GB / 5010 GiB
file_pread(5,2,buffer,2743195648(972804/20/17)) ReadFile Incorrect function.

file_pread(5,1,buffer,2743195648(972804/20/17)) ReadFile Incorrect function.

file_pread(5,2,buffer,2743196420(972804/32/33)) lseek err Invalid argument
file_pread(5,1,buffer,2743196420(972804/32/33)) lseek err Invalid argument
file_pread(5,2,buffer,2743196483(972804/33/33)) lseek err Invalid argument
file_pread(5,1,buffer,2743196483(972804/33/33)) lseek err Invalid argument
file_pread(5,8,buffer,2743195648(972804/20/17)) ReadFile Incorrect function.

file_pread(5,1,buffer,2743195648(972804/20/17)) ReadFile Incorrect function.

file_pread(5,15,buffer,2743195649(972804/20/18)) lseek err Invalid argument
file_pread(5,3,buffer,2743195664(972804/20/33)) lseek err Invalid argument
file_pread(5,3,buffer,2743195711(972804/21/17)) lseek err Invalid argument
file_pread(5,8,buffer,2743195727(972804/21/33)) lseek err Invalid argument
file_pread(5,11,buffer,2743195774(972804/22/17)) lseek err Invalid argument
file_pread(5,2,buffer,2743197696(972804/52/49)) lseek err Invalid argument

Results
* HPFS - NTFS 16 113 34 267365 202 37 4294967296 [Samples]
NTFS, blocksize=4096, 2199 GB / 2048 GiB
P HPFS - NTFS 318721 179 51 972803 210 15 10507829248 [Big]
NTFS, blocksize=4096, 5380 GB / 5010 GiB
Can't open backup.log file: No such file or directory
interface_load
Can't open backup.log file: No such file or directory
interface_load

interface_write()
1 * HPFS - NTFS 16 113 34 267365 202 37 4294967296 [Samples]
2 P HPFS - NTFS 318721 179 51 972803 210 15 10507829248 [Big]

Locked