Je n'ai pas réussi à obtenir un ssd de 2To pour faire un fichier image, et Crucial n'a pas répondu à ma demande concernant la taille des secteurs physiques dépareillés. Je tente testdisk en l'état sur le clone réalisé ainsi, avec son log en dessous :
Code: Select all
me@me-OptiPlex-380:~$ cat testdisk.log
Fri Jan 13 20:15:05 2023
Command line: TestDisk
TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 5.15.0-58-generic (#64-Ubuntu SMP Thu Jan 5 11:43:13 UTC 2023) x86_64
Compiler: GCC 11.2
ext2fs lib: 1.46.5, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.3
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 976773168 sectors
/dev/sda: user_max 976773168 sectors
/dev/sda: native_max 976773168 sectors
/dev/sda: dco 976773168 sectors
/dev/sdb: LBA, LBA48 support
/dev/sdb: size 1953525168 sectors
/dev/sdb: user_max 1953525168 sectors
/dev/sdc: LBA, LBA48 support
/dev/sdc: size 1953525168 sectors
/dev/sdc: user_max 1953525168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop6 - 0 B - 0 sectors (RO), sector size=512
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5000LPLX-08ZNTT0, S/N:WD-WX51AA8KDXZ3, FW:05.01A05
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - CT1000MX500SSD1, S/N:2112E58E828D, FW:M3CR033
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - CT1000MX500SSD1, S/N:2112E58E7843, FW:M3CR033
Disk /dev/loop0 - 4096 B - 8 sectors (RO), sector size=512
Disk /dev/loop1 - 64 MB / 61 MiB - 126760 sectors (RO), sector size=512
Disk /dev/loop10 - 96 MB / 91 MiB - 187776 sectors (RO), sector size=512
Disk /dev/loop11 - 311 KB / 304 KiB - 608 sectors (RO), sector size=512
Disk /dev/loop12 - 250 MB / 238 MiB - 488400 sectors (RO), sector size=512
Disk /dev/loop13 - 363 MB / 346 MiB - 709280 sectors (RO), sector size=512
Disk /dev/loop2 - 163 MB / 155 MiB - 318728 sectors (RO), sector size=512
Disk /dev/loop3 - 260 MB / 248 MiB - 509456 sectors (RO), sector size=512
Disk /dev/loop4 - 85 MB / 81 MiB - 166424 sectors (RO), sector size=512
Disk /dev/loop5 - 48 MB / 45 MiB - 93920 sectors (RO), sector size=512
Disk /dev/loop7 - 290 KB / 284 KiB - 568 sectors (RO), sector size=512
Disk /dev/loop8 - 52 MB / 49 MiB - 102048 sectors (RO), sector size=512
Disk /dev/loop9 - 66 MB / 63 MiB - 129584 sectors (RO), sector size=512
Partition table type (auto): EFI GPT
Disk /dev/sdc - 1000 GB / 931 GiB - CT1000MX500SSD1
Partition table type: EFI GPT
Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144
check_part_gpt failed for partition
2 P MS Data 264192 1345535 1081344 [Basic data partition]
check_part_gpt failed for partition
4 P MS Data 1552384 1949325311 1947772928
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144
1 P MS Reserved 34 262177 262144
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
2 P MS Data 264192 1345535 1081344 [Basic data partition]
2 P MS Data 264192 1345535 1081344 [Basic data partition]
3 P EFI System 1347584 1552383 204800
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
4 P MS Data 1552384 1949325311 1947772928
4 P MS Data 1552384 1949325311 1947772928
5 P MS Data 1949327360 1953521663 4194304 [Basic data partition] [ITE]
search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 2/42/41
filesystem size 1266011080
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=17825792, part_size=648197672960, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/42/41
filesystem size 1266011080
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 34816 1266045895 1266011080
NTFS, blocksize=4096, 648 GB / 603 GiB
NTFS at 117515/141/2
filesystem size 1886334976
sectors_per_cluster 8
mft_lcn 695904
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1552384 1887887359 1886334976
NTFS found using backup sector, blocksize=4096, 965 GB / 899 GiB
NTFS at 117515/141/2
filesystem size 1886334976
sectors_per_cluster 8
mft_lcn 695904
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1887887359 3774222334 1886334976
NTFS, blocksize=4096, 965 GB / 899 GiB
This partition ends after the disk limits. (start=1887887359, size=1886334976, end=3774222334, disk end=1953525168)
NTFS at 121339/226/39
filesystem size 1947772928
sectors_per_cluster 8
mft_lcn 695904
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1552384 1949325311 1947772928
NTFS found using backup sector, blocksize=4096, 997 GB / 928 GiB
NTFS at 121339/226/39
filesystem size 1947772928
sectors_per_cluster 8
mft_lcn 695904
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS: Can't read MFT
MS Data 1949325311 3897098238 1947772928
NTFS, blocksize=4096, 997 GB / 928 GiB
This partition ends after the disk limits. (start=1949325311, size=1947772928, end=3897098238, disk end=1953525168)
NTFS at 121340/4/8
filesystem size 1947774976
sectors_per_cluster 8
mft_lcn 695904
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1552384 1949327359 1947774976
NTFS found using backup sector, blocksize=4096, 997 GB / 928 GiB
NTFS at 121340/4/8
filesystem size 1947774976
sectors_per_cluster 8
mft_lcn 695904
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS: Can't read MFT
MS Data 1949327359 3897102334 1947774976
NTFS, blocksize=4096, 997 GB / 928 GiB
This partition ends after the disk limits. (start=1949327359, size=1947774976, end=3897102334, disk end=1953525168)
NTFS at 121340/4/9
filesystem size 4194304
sectors_per_cluster 8
mft_lcn 262144
mftmirr_lcn 2053
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1945133057 1949327360 4194304
NTFS found using backup sector, blocksize=4096, 2147 MB / 2048 MiB
NTFS at 121340/4/9
filesystem size 4194304
sectors_per_cluster 8
mft_lcn 262144
mftmirr_lcn 2053
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1949327360 1953521663 4194304 [ITE]
NTFS, blocksize=4096, 2147 MB / 2048 MiB
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1995 GB / 1858 GiB)
The following partitions can't be recovered:
MS Data 1887887359 3774222334 1886334976
NTFS, blocksize=4096, 965 GB / 899 GiB
MS Data 1949325311 3897098238 1947772928
NTFS, blocksize=4096, 997 GB / 928 GiB
MS Data 1949327359 3897102334 1947774976
NTFS, blocksize=4096, 997 GB / 928 GiB
Results
MS Data 34816 1266045895 1266011080
NTFS, blocksize=4096, 648 GB / 603 GiB
MS Data 1552384 1887887359 1886334976
NTFS found using backup sector, blocksize=4096, 965 GB / 899 GiB
MS Data 1552384 1949325311 1947772928
NTFS found using backup sector, blocksize=4096, 997 GB / 928 GiB
MS Data 1552384 1949327359 1947774976
NTFS found using backup sector, blocksize=4096, 997 GB / 928 GiB
MS Data 1945133057 1949327360 4194304
NTFS found using backup sector, blocksize=4096, 2147 MB / 2048 MiB
MS Data 1949327360 1953521663 4194304 [ITE]
NTFS, blocksize=4096, 2147 MB / 2048 MiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1266011080 linear /dev/sdc 34816" | dmsetup create test0
echo "0 1886334976 linear /dev/sdc 1552384" | dmsetup create test1
echo "0 1947772928 linear /dev/sdc 1552384" | dmsetup create test2
echo "0 1947774976 linear /dev/sdc 1552384" | dmsetup create test3
echo "0 4194304 linear /dev/sdc 1945133057" | dmsetup create test4
echo "0 4194304 linear /dev/sdc 1949327360" | dmsetup create test5
interface_write()
No partition found or selected for recovery
simulate write!
TestDisk exited normally.
me@me-OptiPlex-380:~$
J'ai quitté là avec "Q" (j'ai essayé, l'option Quit n'était pas affichée ici) car il y avait trop de possibilités que je ne comprends pas.
C'est curieux : le Quick Scan fait un saut instantané de 0 ~78800cylindres/64%, puis une longue analyse de cylindres jusqu'à 121600/121600 100%. À l'écran on a même l'impression qu'il commence le Quick Scan à 64%.