Custom Files

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
driver
Posts: 3
Joined: 02 Aug 2016, 13:04

Custom Files

#1 Post by driver »

Trying to understand how to add custom files to photorec. All the examples are specific to being line "0" of the offset signature.

I will use this as an example.

[root@sysadminnas ~]# hexdump -C pre.dat | head
00000000 34 20 20 20 20 20 20 20 00 00 00 07 00 00 00 00 |4 ........|
00000010 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00000020 00 00 00 00 20 20 00 00 00 00 20 20 20 20 00 00 |.... .... ..|
00000030 00 00 00 00 00 00 53 4f 4c 55 54 49 4f 4e 20 20 |......SOLUTION |
00000040 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 | |

Trying to key off of SOLUTION. Not sure what I am missing.

dat 3 "SOLUTION"

The only ones that seem to work are on the first line. Like so.

dat 0 "4"

I appreciate any and all assistance.

driver
Posts: 3
Joined: 02 Aug 2016, 13:04

Re: Custom Files

#2 Post by driver »

Seems like this should be an easy one. I don't see why I can't key off of anything other than the first line.

Locked