I ran PhotoRec on a 30TB filesystem to scan for HDF 5 files. I created a custom signature with correct file header in hexadecimal. The scan found over 1000 files, which is great. My question is the following. With the header info, PhotoRec knows where the files begin, but how does it know where they end? I have looked at some of the files and it seems that many of them contain garbage data. I used the following signature:
h5 0 0x894844460d0a1a0a010000000008080004
Is this the best approach? Is there a better way or more efficient way to recover the files?
Thanks!
HDF 5 File Recovery
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
cgrenier
- Site Admin
- Posts: 5432
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: HDF 5 File Recovery
It's best to not disable the other file types when recovering files, this will avoid overlarge files but you will always get garbage at the end of recovered files when using only a magic header/signature.