Page 1 of 2
Wrote the partition table thinking I'd fix it...
Posted: 12 Nov 2015, 21:23
by tomtailford
UH OH...
I have a GRAID disk (EXFAT striped raid) which was showing up as RAW in windows and asked for a format. On the Mac the device showed, but the single partition didn't - and first aid didn't do anything.
Ran Testdisk and after analysing I could see the partition and all the files
I wrote the partition structure to disk and now I can't access the files (I thought this would fix it, but should have read the manual!)
Now I can't see the files as it says "support for this filesystem hasn't been implemented"
Also, it's saying the filesystem is Mac HFS, but pretty sure I set it up as EXFAT.
Hopefully I've not managed to destroy all my data
Re: Wrote the partition table thinking I'd fix it...
Posted: 14 Nov 2015, 13:50
by cgrenier
If you have the testdisk.log file where TestDisk recorded what you have done, please post it.
If TestDisk has managed to find your exfat partition once, it will find it again.
Re: Wrote the partition table thinking I'd fix it...
Posted: 15 Nov 2015, 13:48
by tomtailford
Thanks again for your help!
I was using a mac at the time and there doesn't appear to be a testdisk.log file in the folder where I ran the application from. Any suggestions?
Thanks,
Tom
Re: Wrote the partition table thinking I'd fix it...
Posted: 16 Nov 2015, 17:59
by whitmell
If you get this resolved, please post here as I have done the same thing and haven't yet found a solution. If I fix mine I will post my solution here.
Re: Wrote the partition table thinking I'd fix it...
Posted: 19 Nov 2015, 21:02
by cgrenier
Go in testdisk directory, sort the file by date/time, the log file is probably the most recent.
Re: Wrote the partition table thinking I'd fix it...
Posted: 20 Nov 2015, 13:33
by tomtailford
Code: Select all
Thu Nov 12 19:59:43 2015
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Darwin, kernel 14.3.0 (Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.2
Compiler: GCC 4.0
Compilation date: 2015-04-18T13:01:34
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.4
Hard disk list
Disk /dev/disk0 - 251 GB / 233 GiB - 490234752 sectors (RO), sector size=512
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors, sector size=512
Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO), sector size=512
Disk /dev/rdisk1 - 8001 GB / 7451 GiB - 15627911168 sectors, sector size=512
Partition table type (auto): EFI GPT
Disk /dev/disk1 - 8001 GB / 7451 GiB
Partition table type: EFI GPT
Analyse Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=15627911167 (expected 15627911167)
hdr_lba_start=34
hdr_lba_end=15627911134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 40 409639 409600
2 P Mac HFS 409640 15627648983 15627239344
s
search_part()
Disk /dev/rdisk1 - 8001 GB / 7451 GiB - 15627911168 sectors
FAT32 at 40/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)
FAT32 at 40/0/1
EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
HFS+ magic value at 409640/0/1
HFS+ magic value at 409640/0/1
part_size 2742337456
Mac HFS 409640 15627648983 15627239344
HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
Results
P EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
P Mac HFS 409640 15627648983 15627239344
HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
P Mac HFS 409640 15627648983 15627239344
HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
P Mac HFS 409640 15627648983 15627239344
HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
40 409639 409600
2 P Unknown 411648 2743007231 2742595584
Invalid partition structure.
Analyse Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=15627911167 (expected 15627911167)
hdr_lba_start=34
hdr_lba_end=15627911134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 40 409639 409600
2 P Mac HFS 409640 15627648983 15627239344
search_part()
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors
FAT32 at 40/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)
FAT32 at 40/0/1
EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
HFS+ magic value at 409640/0/1
HFS+ magic value at 409640/0/1
part_size 2742337456
Mac HFS 409640 15627648983 15627239344
HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
Results
P EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
P Mac HFS 409640 15627648983 15627239344
HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
interface_load
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors Thu Nov 12 19:31:44 2015
1 P Unknown 40 409639 409600
2 P Unknown 411648 2743007231 2742595584
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors Thu Nov 12 19:47:46 2015
1 P Unknown 40 409639 409600
2 P Unknow
search_part()
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors
FAT32 at 40/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)
FAT32 at 40/0/1
EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
FAT32 at 46/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)
set_FAT_info: name from BS used
FAT32 at 46/0/1
EFI System 46 409645 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
NTFS at 264192/0/1
heads/cylinder 255 (NTFS) != 1 (HD)
sect/track 63 (NTFS) != 1 (HD)
filesystem size 2048000
sectors_per_cluster 8
mft_lcn 85333
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=135266304, part_size=1048576000, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 264192/0/1
heads/cylinder 255 (NTFS) != 1 (HD)
sect/track 63 (NTFS) != 1 (HD)
filesystem size 2048000
sectors_per_cluster 8
mft_lcn 85333
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 264192 2312191 2048000
NTFS, blocksize=4096, 1048 MB / 1000 MiB
HFS+ magic value at 409640/0/1
HFS+ magic value at 409640/0/1
part_size 2742337456
Mac HFS 409640 15627648983 15627239344
HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
HFS+ magic value at 409642/0/1
MS Data 411648 15627909119 15627497472
exFAT, blocksize=262144, 8001 GB / 7451 GiB
MS Data 411660 15627909131 15627497472
exFAT, blocksize=262144, 8001 GB / 7451 GiB
MS Data 411660 15627909131 15627497472
exFAT, blocksize=262144, 8001 GB / 7451 GiB
Search for partition aborted
Results
EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
EFI System 46 409645 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
MS Data 264192 2312191 2048000
NTFS, blocksize=4096, 1048 MB / 1000 MiB
Mac HFS 409640 15627648983 15627239344
HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
MS Data 411648 15627909119 15627497472
exFAT, blocksize=262144, 8001 GB / 7451 GiB
MS Data 411660 15627909131 15627497472
exFAT, blocksize=262144, 8001 GB / 7451 GiB
Re: Wrote the partition table thinking I'd fix it...
Posted: 30 Nov 2015, 13:20
by tomtailford
Does this log help at all?
Just wondering if I have any chance of recovering my files?
Test disk did show me my files before I screwed it up somehow!
Thanks,
Tom
Re: Wrote the partition table thinking I'd fix it...
Posted: 01 Dec 2015, 08:58
by Fiona
I'm not as much an Apple tech savvy.
But as far as I know, TestDisk can't list files of a HFS+-partition.
Currently you have a an HFS+-partition in your partition table.
Current partition structure:
1 P EFI System 40 409639 409600
2 P Mac HFS 409640 15627648983 15627239344
Did you already search for your EXFAT-Partition again?
Fiona
Re: Wrote the partition table thinking I'd fix it...
Posted: 01 Dec 2015, 09:17
by tomtailford
Testdisk sees disk, I choose EFI GPT partition table type, Analyse, Quick Search:
- Quick search result
- image1.PNG (49.67 KiB) Viewed 3962 times
Now conducting a deeper search... I have a feeling it didn't let me do this before?
Re: Wrote the partition table thinking I'd fix it...
Posted: 01 Dec 2015, 09:18
by tomtailford
Fingers crossed it will find something...
- image2.PNG (64.04 KiB) Viewed 3961 times