cgsecurity.org

ok sent you 2 files
1. test.rar original dvr file (Brand Name Micae)
2. f7672373.rar - this is a recovered file where 2 videos are merged stitched together.

Can you send me 1 or 2 more original dad files ? I need to find more information about this file format. What is the brand of your DVR ?
Looks like I will need to develop some code to deal with this file format instead of a signature.

ok I will, send a few more
the DVR brand is Micae
can it be that the dvr is keeping files in a different format and then when you export them they are in a different format
in order to export, you specify a time frame and it exports the files in such frame
I sent one 500MB files which is exactly 1 hout of video.

I have uploaded a new 7.0-WIP. Can you try it ?

ok will try today
should I add the photorec.sig or is it already in there?

No don't use this time the signature file. I have added some C code to deal with this file format.

unfortunately it is again thousands of small files
but the dad files starting at the same sector are with different size now

for example f7611397.dad was 4249kb in the previous recovery, the same file is 897 kb now

when I open them I think this time all files contain only 1 cam, so I think you solved the cam merge
but now the remaining part of the files are gone

An example of the files from a certain sector to another sector are as attached.
From 7600308 to 7633582
Old recovery recovers 9 files of 16.8Mb
New recovery recovers 6 files of 3.97Mb

Also the recupdir directories are different as you can see above

wow I had left this recovery open and it's been 24 hours and there is still 27 hours remaining 122.000 files recovered

There may be a fragmentation problem if the video recorders opens simultaneously a file by camera, stores a frame for each camera and loops. Without some disk layout knowledge I can't help you anymore.

Ok thank you very much for everything.
I will try to mix and match what I recovered, thank you