I REALLLY need help recovering a Linux partition. I do have a logfile. I had a Linux partition and a Windows partition. Linux is what I need to recover. At first attempt, I ran testdisk analyse. When it returned with one result-Linux- I selected this and wrote table, without pressing P to list files. This was my first time using testdisk and I was excited when testdisk returned a result showing Linux. Thinking everything is fine, I rebooted and attempted to boot Linux. Nothing showed up. I opened gparted to look at the partitions. I now have one ext4 partition, and two unallocated partitions. From top to bottom, in this order: unallocated, ext4 Linux, unallocated. Before I ran testdisk and had working partitions: Linux, Windows 7.
I ran testdisk again, and did deeper search. Results returned with six D Linux and one hpfs-ntfs Windows. Linux's results are listed first, and Windows last. After pressing P for Windows, the root folder shows. Again, Linux is what I need.
Here the info from logfile. I really thank you for your help!!!!!
Thu Apr 23 03:39:50 2015
Command line: TestDisk
TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.2.0-51-generic (#77-Ubuntu SMP Wed Jul 24 20:18:19 UTC 2013) x86_64
Compiler: GCC 4.6
Compilation date: 2012-02-05T07:15:52
ext2fs lib: 1.42, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EZRX-00D8PB0, S/N:WD-WCC4M1624260, FW:80.00A80
Disk /dev/sdb - 8004 MB / 7633 MiB - CHS 1020 247 62, sector size=512 - SanDisk Cruzer Blade, FW:1.26
Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EZRX-00D8PB0
Partition table type: Intel
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424
Backup partition structure
partition_save
Computes LBA from CHS for Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
1 * Linux 60590 214 41 182191 77 30 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60590 214 41 182191 77 30 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB
recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60591 57 11 182191 174 63 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB
recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60591 89 43 182191 207 32 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB
recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60593 197 21 182194 60 10 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB
recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60599 195 13 182200 58 2 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB
recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60600 232 49 182201 95 38 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB
NTFS at 121600/182/55
filesystem size 1953509376
sectors_per_cluster 8
mft_lcn 786432
Please help!!!!! Recovery of Linux partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Re: Please help!!!!! Recovery of Linux partition
Didn't find the result of Deeper Search.
Did you interrupt your scan running Deeper Search?
Fiona
Did you interrupt your scan running Deeper Search?
Fiona
Re: Please help!!!!! Recovery of Linux partition
Hello hello. I only ran deeper search. I interrupted analysis within a few seconds, and ran deeper search which took five hours. Sent private message. Thank you!!!!
Re: Please help!!!!! Recovery of Linux partition
Hello hello.Here is the testdisk logfile from new test. I could only use testdisk 6.14 in knoppix. I couldn't get testdisk 7.0 to work. After I extracted folder, I sudo testdisk-7.0 /testdisk_static, and get this message in terminal,"command not found. How do I install testdisk. 7.0?
I regarding the logfile, I don't know what to do next to recover Linux partition. Thanks for your help.
Thu Apr 23 21:26:52 2015
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, September 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.9.6 (#25 SMP PREEMPT Sat Jun 15 15:27:01 CEST 2013) i686
Compiler: GCC 4.7
Compilation date: 2012-12-16T16:55:56
ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.4, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EZRX-00D8PB0, S/N:WD-WCC4M1624260, FW:80.00A80
Disk /dev/sdb - 8019 MB / 7648 MiB - CHS 1022 247 62, sector size=512 - PNY USB 2.0 FD, FW:8192
Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EZRX-00D8PB0
Partition table type: Intel
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
I regarding the logfile, I don't know what to do next to recover Linux partition. Thanks for your help.
Thu Apr 23 21:26:52 2015
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, September 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.9.6 (#25 SMP PREEMPT Sat Jun 15 15:27:01 CEST 2013) i686
Compiler: GCC 4.7
Compilation date: 2012-12-16T16:55:56
ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.4, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EZRX-00D8PB0, S/N:WD-WCC4M1624260, FW:80.00A80
Disk /dev/sdb - 8019 MB / 7648 MiB - CHS 1022 247 62, sector size=512 - PNY USB 2.0 FD, FW:8192
Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EZRX-00D8PB0
Partition table type: Intel
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
Re: Please help!!!!! Recovery of Linux partition
Hello hello. I ran a third test with full analyse, then deeper search. The first testlog I posted was only with deeper search.There are some details I think I should mention. The very first time I ran testdisk, I used analyse. It returned with one Linux partion. I did not check to see if there were any files. I usedthe "write" option. The second time I ran testdisk, I selected the only Linux partition listed using analyse. I pressed P to list files and it shows, "file not found, filesystem may be damaged". So, it looks like I wrote a partition that had no files in it or was damaged. When I open gparted, it shows three partitions: unallocated-464.31Gib, /dev/sda1-931.51 flags=boot, unallocated-467.36GiB. I don't know how to find the Linux partition that contains the filesystem. I don't know how to reverse what I did. New logfile posted below. Thanks for your help.
Fri Apr 24 03:05:49 2015
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, September 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.9.6 (#25 SMP PREEMPT Sat Jun 15 15:27:01 CEST 2013) i686
Compiler: GCC 4.7
Compilation date: 2012-12-16T16:55:56
ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.4, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EZRX-00D8PB0, S/N:WD-WCC4M1624260, FW:80.00A80
Disk /dev/sdb - 8019 MB / 7648 MiB - CHS 1022 247 62, sector size=512 - PNY USB 2.0 FD, FW:8192
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10 EZEX-00BN5A0, FW:0041
Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EZRX-00D8PB0
Partition table type: Intel
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB
Results
* Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB
dir_partition inode=2
* Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB
ext2fs_dir_iterate failed with error 1.
Directory /
interface_write()
1 * Linux 60590 214 41 182191 77 30 1953511424
Fri Apr 24 03:05:49 2015
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, September 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.9.6 (#25 SMP PREEMPT Sat Jun 15 15:27:01 CEST 2013) i686
Compiler: GCC 4.7
Compilation date: 2012-12-16T16:55:56
ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.4, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EZRX-00D8PB0, S/N:WD-WCC4M1624260, FW:80.00A80
Disk /dev/sdb - 8019 MB / 7648 MiB - CHS 1022 247 62, sector size=512 - PNY USB 2.0 FD, FW:8192
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10 EZEX-00BN5A0, FW:0041
Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EZRX-00D8PB0
Partition table type: Intel
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB
Results
* Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB
dir_partition inode=2
* Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB
ext2fs_dir_iterate failed with error 1.
Directory /
interface_write()
1 * Linux 60590 214 41 182191 77 30 1953511424
Re: Please help!!!!! Recovery of Linux partition
What OS do you currently use?
Also have given you an answer through PN.
Using your topic here is appreciated.
Fiona
Also have given you an answer through PN.
Using your topic here is appreciated.
Fiona
Re: Please help!!!!! Recovery of Linux partition
Hello hello. I sent PM. I will post here too. I was using Linux and Windows 7 before I had this problem. I was using Linux most of the time. As stated in PM, testdisk forum that .png and .jpeg files are invalid when trying to post a screenshot of gparted showing my disks. What file extensions should I use to post screenshot picture?