I use Qubes operating system (linux, fedora based) booting side by side with windows. I have two SSDs. One is 256mb and the other 1tb. I boot from the smaller drive. Both operating systems are spread across both drives, with windows using the second drive for data.
I have a 1TB SSD which got the partition data overwritten. Using testdisk I can see my microsoft data and I already copied it away.My purpose was to recover about 201gb which is the second part of a logical volume for a LUKS encrypted partition. On the same drive I have a 50gb empty LUKS (apart from one file on the drive identifying it).
So, within 1TB, I have (not sure of the order)
About 600gb of Microsoft drive
50 GB useless LUKS partition
201 GB of the wanted LVM
This is what testdisk tells me about the Microsoft data:
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
I found the 50gb LUKS partition by using hexdump:
aae7000000 4c 55 4b 53 ba be 00 01 61 65 73 00 00 00 00 00 |LUKS....aes.....|
aae7000000 is 734019977216 in decimal.
This is also spotted by testdisk
D Linux filesys. data 1433632768 1433636863 4096
1433632768 (in 512 byte sectors) turns into 734019977216 (byte offset) in decimal which is aae7000000 (byte offset) in
I have two questions:
1. if I write this MS data will I trash my important 201gb of data?
2. From what I have given, can I work out the location of my 201gb partition so that I can look for the header? I am not sure if this will be marked as an LVM2 partition or something else. testdisk does not seem to find it.
Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
PartitionTrajic
- Posts: 5
- Joined: 30 Aug 2023, 09:01
-
recuperation
- Posts: 3043
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?
I don't unterstand your statement about the "second part". You have a LUKS encrypted partition. There is no segmentation of this partition into any kinds of parts.PartitionTrajic wrote: 30 Aug 2023, 09:21 I use Qubes operating system (linux, fedora based) booting side by side with windows. I have two SSDs. One is 256mb and the other 1tb. I boot from the smaller drive. Both operating systems are spread across both drives, with windows using the second drive for data.
I have a 1TB SSD which got the partition data overwritten. Using testdisk I can see my microsoft data and I already copied it away.My purpose was to recover about 201gb which is the second part of a logical volume for a LUKS encrypted partition.
Please describe how you come to the conclusion that your data is contained in a certain location within your encrypted partition.
Please post your complete logfile.
On the same drive I have a 50gb empty LUKS (apart from one file on the drive identifying it).
So, within 1TB, I have (not sure of the order)
About 600gb of Microsoft drive
50 GB useless LUKS partition
201 GB of the wanted LVM
This is what testdisk tells me about the Microsoft data:
Please explain what you mean by "writing this MS data".
I have two questions:
1. if I write this MS data will I trash my important 201gb of data?
Testdisk is able to find both:
2. From what I have given, can I work out the location of my 201gb partition so that I can look for the header? I am not sure if this will be marked as an LVM2 partition or something else. testdisk does not seem to find it.
https://www.cgsecurity.org/wiki/TestDisk
You have a complex storage configuration involving the installation of both LVM2 and LUKS compared to a straightforward unencrypted setup just containing formated partitions. Your initial setup order when installing both operating systems determines what you should find. If you had a LUKS encrypted partition and Testdisk does not find it you are done with Testdisk.
There is nothing readable behind the header which would allow for recreation of the header such as a "backup boot sector" that exists in unencrypted partitions formated with Microsoft file systems.
"TestDisk can find lost partitions for all of these file systems:" as stated here:
https://www.cgsecurity.org/wiki/TestDisk
As I don't run such complex configurations I can only provide you with my theoretical analysis:
Testdisk does not contain a LUKS or LVM emulator.
In your case you would have to operate Testdisk from Linux and start to find the bottom layer, say LUKS on the physical device directly.
Being succesful LUKS makes the content of the partition available under a different device name. After writing the LUKS partition information to the disk you would need to mount the LUKS partition and you would be given an unencrypted differently labeled device name that you would operate on to see if there is LVM information in terms of a partition or as a file. If you fail finding the LUKS partition Testdisk can't help you anymore.
Your configuration is prone for disaster because you are operating a secret Windows operating system which does not shut down completely by design. Spreading the operating systems over both devices increases the chance of Linux destroying a Windows file system that is technically not dismounted.
-
PartitionTrajic
- Posts: 5
- Joined: 30 Aug 2023, 09:01
Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?
Thanks for your response.
"Please post your complete logfile."
Posted at the end.
"Please explain what you mean by "writing this MS data"."
I don't care so much about the microsoft partition which testdisk is able to recover. I want to know if recovering this microsoft partition risks what I have left on the drives.
"I don't unterstand your statement about the "second part". You have a LUKS encrypted partition. There is no segmentation of this partition into any kinds of parts.
Please describe how you come to the conclusion that your data is contained in a certain location within your encrypted partition."
I found the size of the needed partition from my LVM configuration files under dracut. I have the 112.259 GB (what I call the first part) on the unaffected disk. It is the 201.335 gb LVM data (which I call the second part) which I want.
Here is the log file (continued in next post)
"Please post your complete logfile."
Posted at the end.
"Please explain what you mean by "writing this MS data"."
I don't care so much about the microsoft partition which testdisk is able to recover. I want to know if recovering this microsoft partition risks what I have left on the drives.
"I don't unterstand your statement about the "second part". You have a LUKS encrypted partition. There is no segmentation of this partition into any kinds of parts.
Please describe how you come to the conclusion that your data is contained in a certain location within your encrypted partition."
I found the size of the needed partition from my LVM configuration files under dracut. I have the 112.259 GB (what I call the first part) on the unaffected disk. It is the 201.335 gb LVM data (which I call the second part) which I want.
Code: Select all
pv0 {
id = "Wf70xv-UMGP-jq5J-CmH1-jFX4-OHGH-WZBrDX"
device = "/dev/mapper/luks-d6c940d9-2bdd-4ebb-93e9-12b9eac24012" # Hint only
status = ["ALLOCATABLE"]
flags = []
dev_size = 235423744 # 112.259 Gigabytes
pe_start = 2048
pe_count = 28738 # 112.258 Gigabytes
}
pv1 {
id = "4VL0R0-xnFu-FYgn-rfDt-Ntzy-chWu-E2Y9Q1"
device = "[unknown]" # Hint only
status = ["ALLOCATABLE"]
flags = ["MISSING"]
dev_size = 422230016 # 201.335 Gigabytes
pe_start = 2048
pe_count = 51541 # 201.332 Gigabytes
}Code: Select all
Tue Aug 29 08:38:10 2023
Command line: TestDisk
TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 6.2.9-300.fc38.x86_64 (#1 SMP PREEMPT_DYNAMIC Thu Mar 30 22:32:58 UTC 2023) x86_64
Compiler: GCC 13.0
ext2fs lib: 1.46.5, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.4
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 62 GB / 57 GiB - CHS 59184 64 32, sector size=512, FW:PMAP
Disk /dev/sdb - 5000 GB / 4657 GiB - CHS 4769275 64 32, sector size=512 - G-TECH ArmorATD, FW:2004
Disk /dev/mapper/live-base - 8128 MB / 7752 MiB - 15876096 sectors (RO), sector size=512
Disk /dev/mapper/live-rw - 8128 MB / 7752 MiB - 15876096 sectors, sector size=512
Disk /dev/dm-0 - 8128 MB / 7752 MiB - 15876096 sectors, sector size=512
Disk /dev/dm-1 - 8128 MB / 7752 MiB - 15876096 sectors (RO), sector size=512
Disk /dev/loop0 - 1987 MB / 1895 MiB - 3882136 sectors (RO), sector size=512
Disk /dev/loop1 - 8128 MB / 7752 MiB - 15876096 sectors (RO), sector size=512
Disk /dev/loop2 - 34 GB / 32 GiB - 67108864 sectors, sector size=512
Disk /dev/loop3 - 1073 GB / 999 GiB - 2097151488 sectors, sector size=512
Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32, sector size=512
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32, sector size=512
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT
Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 1050623 1048576
2 P Linux filesys. data 1050624 42993663 41943040
3 P Linux filesys. data 42993664 1953523711 1910530048
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Results
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
interface_write()
1 P Mac HFS 195035778 1596607175 1401571398
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
HFS magic value at 95232/20/5
HFS magic value at 95396/31/17
part_size 221396550
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
HFS magic value at 95396/31/19
LVM magic value at 104822/25/31
LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster
LVM magic value at 124527/24/2
LVM magic value at 126876/43/19
LVM magic value at 135492/49/29
HFS magic value at 191173/16/18
part_size 1090949124
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
HFS magic value at 191173/16/20
LVM magic value at 202766/23/27
HFS magic value at 214925/18/6
part_size 1317033
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
HFS magic value at 214925/18/8
part_size 1317033
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
LVM magic value at 225723/27/11
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster
LVM magic value at 233552/22/6
HFS magic value at 244019/17/11
part_size 366510082
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
HFS magic value at 244019/17/13
part_size 366510082
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
HFS magic value at 265240/19/19
part_size 1913126914
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)
HFS magic value at 265240/19/21
HFS magic value at 317998/0/8
part_size 381810007
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
HFS magic value at 317998/0/10
part_size 381810007
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
HFS magic value at 348356/21/9
part_size 137953282
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
HFS magic value at 348356/21/11
part_size 137953282
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
LVM magic value at 410177/38/6
LVM magic value at 413001/20/17
LVM magic value at 424204/35/1
HFS magic value at 436113/28/21
part_size 3522321515
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)
HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition
LVM magic value at 467234/43/13
HFS magic value at 503128/11/27
part_size 1187152130
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)
HFS magic value at 503128/11/29
LVM magic value at 507712/43/15
HFS magic value at 517703/27/20
part_size 5965314
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
HFS magic value at 517703/27/22
part_size 5965314
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
LVM magic value at 517982/58/12
LVM magic value at 518746/47/3
LVM magic value at 518791/46/9
LVM magic value at 518810/40/28
LVM magic value at 519310/51/1
LVM magic value at 520277/51/6
LVM magic value at 520456/11/6
LVM magic value at 521516/55/18
LVM magic value at 524451/50/9
LVM magic value at 524579/31/29
LVM magic value at 525018/33/23
LVM magic value at 527966/11/9
LVM magic value at 528344/12/8
LVM magic value at 528922/17/31
LVM magic value at 539503/51/20
LVM magic value at 540294/41/2
LVM magic value at 541772/23/14
LVM magic value at 541780/33/15
LVM magic value at 542071/37/15
LVM magic value at 542078/56/28
LVM magic value at 543402/13/3
LVM magic value at 544327/54/8
LVM magic value at 545313/56/17
LVM magic value at 546568/18/17
LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
Results
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14
interface_write()
No partition found or selected for recovery
simulate write!
New options :
Dump : No
Align partition: Yes
Expert mode : No
New options :
Dump : No
Align partition: Yes
Expert mode : No
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT
Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 1050623 1048576
2 P Linux filesys. data 1050624 42993663 41943040
3 P Linux filesys. data 42993664 1953523711 1910530048
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Results
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P Linux filesys. data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P Linux LVM2 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
interface_write()
1 P Linux filesys. data 195035778 1596607175 1401571398
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
HFS magic value at 95232/20/5
HFS magic value at 95396/31/17
part_size 221396550
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
HFS magic value at 95396/31/19
LVM magic value at 104822/25/31
LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster
LVM magic value at 124527/24/2
LVM magic value at 126876/43/19
LVM magic value at 135492/49/29
HFS magic value at 191173/16/18
part_size 1090949124
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
HFS magic value at 191173/16/20
LVM magic value at 202766/23/27
HFS magic value at 214925/18/6
part_size 1317033
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
HFS magic value at 214925/18/8
part_size 1317033
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
LVM magic value at 225723/27/11
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster
LVM magic value at 233552/22/6
HFS magic value at 244019/17/11
part_size 366510082
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
HFS magic value at 244019/17/13
part_size 366510082
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
HFS magic value at 265240/19/19
part_size 1913126914
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)
HFS magic value at 265240/19/21
HFS magic value at 317998/0/8
part_size 381810007
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
HFS magic value at 317998/0/10
part_size 381810007
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
HFS magic value at 348356/21/9
part_size 137953282
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
HFS magic value at 348356/21/11
part_size 137953282
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
LVM magic value at 410177/38/6
LVM magic value at 413001/20/17
LVM magic value at 424204/35/1
HFS magic value at 436113/28/21
part_size 3522321515
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)
HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition
LVM magic value at 467234/43/13
HFS magic value at 503128/11/27
part_size 1187152130
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)
HFS magic value at 503128/11/29
LVM magic value at 507712/43/15
HFS magic value at 517703/27/20
part_size 5965314
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
HFS magic value at 517703/27/22
part_size 5965314
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
LVM magic value at 517982/58/12
LVM magic value at 518746/47/3
LVM magic value at 518791/46/9
LVM magic value at 518810/40/28
LVM magic value at 519310/51/1
LVM magic value at 520277/51/6
LVM magic value at 520456/11/6
LVM magic value at 521516/55/18
LVM magic value at 524451/50/9
LVM magic value at 524579/31/29
LVM magic value at 525018/33/23
LVM magic value at 527966/11/9
LVM magic value at 528344/12/8
LVM magic value at 528922/17/31
LVM magic value at 539503/51/20
LVM magic value at 540294/41/2
LVM magic value at 541772/23/14
LVM magic value at 541780/33/15
LVM magic value at 542071/37/15
LVM magic value at 542078/56/28
LVM magic value at 543402/13/3
LVM magic value at 544327/54/8
LVM magic value at 545313/56/17
LVM magic value at 546568/18/17
LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
Results
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14
interface_write()
No partition found or selected for recovery
simulate write!
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT
Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 1050623 1048576
2 P Linux filesys. data 1050624 42993663 41943040
3 P Linux filesys. data 42993664 1953523711 1910530048
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Results
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
interface_write()
1 P Mac HFS 195035778 1596607175 1401571398
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
interface_write()
1 P MS Data 195035778 1596607175 1401571398
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
HFS magic value at 95232/20/5
HFS magic value at 95396/31/17
part_size 221396550
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
HFS magic value at 95396/31/19
LVM magic value at 104822/25/31
LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster
LVM magic value at 124527/24/2
LVM magic value at 126876/43/19
LVM magic value at 135492/49/29
HFS magic value at 191173/16/18
part_size 1090949124
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
HFS magic value at 191173/16/20
LVM magic value at 202766/23/27
HFS magic value at 214925/18/6
part_size 1317033
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
HFS magic value at 214925/18/8
part_size 1317033
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
LVM magic value at 225723/27/11
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster
LVM magic value at 233552/22/6
HFS magic value at 244019/17/11
part_size 366510082
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
HFS magic value at 244019/17/13
part_size 366510082
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
HFS magic value at 265240/19/19
part_size 1913126914
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)
HFS magic value at 265240/19/21
HFS magic value at 317998/0/8
part_size 381810007
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
HFS magic value at 317998/0/10
part_size 381810007
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
HFS magic value at 348356/21/9
part_size 137953282
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
HFS magic value at 348356/21/11
part_size 137953282
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
LVM magic value at 410177/38/6
LVM magic value at 413001/20/17
LVM magic value at 424204/35/1
HFS magic value at 436113/28/21
part_size 3522321515
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)
HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition
LVM magic value at 467234/43/13
HFS magic value at 503128/11/27
part_size 1187152130
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)
HFS magic value at 503128/11/29
LVM magic value at 507712/43/15
HFS magic value at 517703/27/20
part_size 5965314
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
HFS magic value at 517703/27/22
part_size 5965314
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
LVM magic value at 517982/58/12
LVM magic value at 518746/47/3
LVM magic value at 518791/46/9
LVM magic value at 518810/40/28
LVM magic value at 519310/51/1
LVM magic value at 520277/51/6
LVM magic value at 520456/11/6
LVM magic value at 521516/55/18
LVM magic value at 524451/50/9
LVM magic value at 524579/31/29
LVM magic value at 525018/33/23
LVM magic value at 527966/11/9
LVM magic value at 528344/12/8
LVM magic value at 528922/17/31
LVM magic value at 539503/51/20
LVM magic value at 540294/41/2
LVM magic value at 541772/23/14
LVM magic value at 541780/33/15
LVM magic value at 542071/37/15
LVM magic value at 542078/56/28
LVM magic value at 543402/13/3
LVM magic value at 544327/54/8
LVM magic value at 545313/56/17
LVM magic value at 546568/18/17
LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
Results
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Last edited by PartitionTrajic on 31 Aug 2023, 11:06, edited 2 times in total.
-
PartitionTrajic
- Posts: 5
- Joined: 30 Aug 2023, 09:01
Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?
The file was too big so I had to continue here. I also deleted listings of all my windows files, which I think are not interesting.
Code: Select all
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14
interface_write()
No partition found or selected for recovery
simulate write!
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT
Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 1050623 1048576
2 P Linux filesys. data 1050624 42993663 41943040
3 P Linux filesys. data 42993664 1953523711 1910530048
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Results
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
P MBR 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P MBR 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P HPFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P ext4 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P HPUX Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P HPUX Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
P HPUX Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
interface_write()
1 P MS Data 195035778 1596607175 1401571398
simulate write!
Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 1050623 1048576
2 P Linux filesys. data 1050624 42993663 41943040
3 P Linux filesys. data 42993664 1953523711 1910530048
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Results
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P MBR 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MBR 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P HPFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P exFAT 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P HFS+ 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P exFAT 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:NTFS signature is missing.
NTFS signature is missing.
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
1 P MS Data 195035778 1596607175 1401571398
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
HFS magic value at 95232/20/5
HFS magic value at 95396/31/17
part_size 221396550
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
HFS magic value at 95396/31/19
LVM magic value at 104822/25/31
LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster
LVM magic value at 124527/24/2
LVM magic value at 126876/43/19
LVM magic value at 135492/49/29
HFS magic value at 191173/16/18
part_size 1090949124
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
HFS magic value at 191173/16/20
LVM magic value at 202766/23/27
HFS magic value at 214925/18/6
part_size 1317033
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
HFS magic value at 214925/18/8
part_size 1317033
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
LVM magic value at 225723/27/11
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster
LVM magic value at 233552/22/6
HFS magic value at 244019/17/11
part_size 366510082
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
HFS magic value at 244019/17/13
part_size 366510082
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
HFS magic value at 265240/19/19
part_size 1913126914
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)
HFS magic value at 265240/19/21
HFS magic value at 317998/0/8
part_size 381810007
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
HFS magic value at 317998/0/10
part_size 381810007
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
HFS magic value at 348356/21/9
part_size 137953282
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
HFS magic value at 348356/21/11
part_size 137953282
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
LVM magic value at 410177/38/6
LVM magic value at 413001/20/17
LVM magic value at 424204/35/1
HFS magic value at 436113/28/21
part_size 3522321515
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)
HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition
LVM magic value at 467234/43/13
HFS magic value at 503128/11/27
part_size 1187152130
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)
HFS magic value at 503128/11/29
LVM magic value at 507712/43/15
HFS magic value at 517703/27/20
part_size 5965314
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
HFS magic value at 517703/27/22
part_size 5965314
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
LVM magic value at 517982/58/12
LVM magic value at 518746/47/3
LVM magic value at 518791/46/9
LVM magic value at 518810/40/28
LVM magic value at 519310/51/1
LVM magic value at 520277/51/6
LVM magic value at 520456/11/6
LVM magic value at 521516/55/18
LVM magic value at 524451/50/9
LVM magic value at 524579/31/29
LVM magic value at 525018/33/23
LVM magic value at 527966/11/9
LVM magic value at 528344/12/8
LVM magic value at 528922/17/31
LVM magic value at 539503/51/20
LVM magic value at 540294/41/2
LVM magic value at 541772/23/14
LVM magic value at 541780/33/15
LVM magic value at 542071/37/15
LVM magic value at 542078/56/28
LVM magic value at 543402/13/3
LVM magic value at 544327/54/8
LVM magic value at 545313/56/17
LVM magic value at 546568/18/17
LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
Results
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14
interface_write()
No partition found or selected for recovery
simulate write!
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT
Partition table type (auto): EFI GPT
Partition table type (auto): EFI GPT
Disk /dev/nvme1n1 - 1000 GB / 931 GiB
Partition table type: EFI GPT
Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 1050623 1048576
2 P Linux filesys. data 1050624 42993663 41943040
3 P Linux filesys. data 42993664 1953523711 1910530048
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Results
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P exFAT 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P MBR 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P MBR 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P MS LDM MetaData 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS LDM MetaData 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
1 P MS LDM MetaData 195035778 1596607175 1401571398
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P FAT32 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
dir_partition inode=0
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
FAT: Can't list files, bad sector size.
Directory /
gpt_change_part_type
Change partition type:
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
1 P EFI System 195035778 1596607175 1401571398
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P Extended Boot 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P Extended Boot 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P Extended Boot 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P exFAT 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.
P Extended Boot 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P Extended Boot 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P Extended Boot 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MBR 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MBR 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P Linux LVM 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P Linux LVM 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P Linux filesys. data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P Linux filesys. data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P Linux LVM2 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
P Extended Boot 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P HFS+ 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P Extended Boot 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P exFAT 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.
P EFI System 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filNTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
esystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Reserved 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P exFAT 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.
P MS Reserved 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P exFAT 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Not an exFAT boot sector.
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS LDM Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS LDM Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
P MS LDM Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P GFS2 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS LDM Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
1 P MS Data 195035778 1596607175 1401571398
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
HFS magic value at 95232/20/5
HFS magic value at 95396/31/17
part_size 221396550
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
HFS magic value at 95396/31/19
LVM magic value at 104822/25/31
LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster
LVM magic value at 124527/24/2
LVM magic value at 126876/43/19
LVM magic value at 135492/49/29
HFS magic value at 191173/16/18
part_size 1090949124
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
HFS magic value at 191173/16/20
LVM magic value at 202766/23/27
HFS magic value at 214925/18/6
part_size 1317033
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
HFS magic value at 214925/18/8
part_size 1317033
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
LVM magic value at 225723/27/11
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster
LVM magic value at 233552/22/6
HFS magic value at 244019/17/11
part_size 366510082
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
HFS magic value at 244019/17/13
part_size 366510082
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
HFS magic value at 265240/19/19
part_size 1913126914
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)
HFS magic value at 265240/19/21
HFS magic value at 317998/0/8
part_size 381810007
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
HFS magic value at 317998/0/10
part_size 381810007
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
HFS magic value at 348356/21/9
part_size 137953282
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
HFS magic value at 348356/21/11
part_size 137953282
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
LVM magic value at 410177/38/6
LVM magic value at 413001/20/17
LVM magic value at 424204/35/1
HFS magic value at 436113/28/21
part_size 3522321515
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)
HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition
LVM magic value at 467234/43/13
HFS magic value at 503128/11/27
part_size 1187152130
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)
HFS magic value at 503128/11/29
LVM magic value at 507712/43/15
HFS magic value at 517703/27/20
part_size 5965314
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
HFS magic value at 517703/27/22
part_size 5965314
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
LVM magic value at 517982/58/12
LVM magic value at 518746/47/3
LVM magic value at 518791/46/9
LVM magic value at 518810/40/28
LVM magic value at 519310/51/1
LVM magic value at 520277/51/6
LVM magic value at 520456/11/6
LVM magic value at 521516/55/18
LVM magic value at 524451/50/9
LVM magic value at 524579/31/29
LVM magic value at 525018/33/23
LVM magic value at 527966/11/9
LVM magic value at 528344/12/8
LVM magic value at 528922/17/31
LVM magic value at 539503/51/20
LVM magic value at 540294/41/2
LVM magic value at 541772/23/14
LVM magic value at 541780/33/15
LVM magic value at 542071/37/15
LVM magic value at 542078/56/28
LVM magic value at 543402/13/3
LVM magic value at 544327/54/8
LVM magic value at 545313/56/17
LVM magic value at 546568/18/17
LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
Results
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14
interface_write()
No partition found or selected for recovery
simulate write!
Analyse Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 1050623 1048576
2 P Linux filesys. data 1050624 42993663 41943040
3 P Linux filesys. data 42993664 1953523711 1910530048
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Results
P Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test0
interface_write()
1 P Mac HFS 195035778 1596607175 1401571398
interface_write()
1 P Mac HFS 195035778 1596607175 1401571398
NTFS signature is missing.
NTFS signature is missing.
gpt_change_part_type
Change partition type:
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Change partition type:
P NTFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
P MS Data 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
1 P MS Data 195035778 1596607175 1401571398
search_part()
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
HFS magic value at 95232/20/3
part_size 1401571398
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
HFS magic value at 95232/20/5
HFS magic value at 95396/31/17
part_size 221396550
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
HFS magic value at 95396/31/19
LVM magic value at 104822/25/31
LVM magic value at 110961/35/2
check_FAT: Bad number of sectors per cluster
LVM magic value at 124527/24/2
LVM magic value at 126876/43/19
LVM magic value at 135492/49/29
HFS magic value at 191173/16/18
part_size 1090949124
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
HFS magic value at 191173/16/20
LVM magic value at 202766/23/27
HFS magic value at 214925/18/6
part_size 1317033
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
HFS magic value at 214925/18/8
part_size 1317033
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
LVM magic value at 225723/27/11
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
block_group_nr 27743
recover_EXT2: part_offset problem
check_FAT: Bad number of sectors per cluster
LVM magic value at 233552/22/6
HFS magic value at 244019/17/11
part_size 366510082
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
HFS magic value at 244019/17/13
part_size 366510082
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
HFS magic value at 265240/19/19
part_size 1913126914
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
This partition ends after the disk limits. (start=543212146, size=1913126914, end=2456339059, disk end=1953525168)
HFS magic value at 265240/19/21
HFS magic value at 317998/0/8
part_size 381810007
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
HFS magic value at 317998/0/10
part_size 381810007
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
HFS magic value at 348356/21/9
part_size 137953282
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
HFS magic value at 348356/21/11
part_size 137953282
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
LVM magic value at 410177/38/6
LVM magic value at 413001/20/17
LVM magic value at 424204/35/1
HFS magic value at 436113/28/21
part_size 3522321515
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
This partition ends after the disk limits. (start=893160340, size=3522321515, end=4415481854, disk end=1953525168)
HFS magic value at 436113/28/23
check_FAT: Bad jump in FAT partition
LVM magic value at 467234/43/13
HFS magic value at 503128/11/27
part_size 1187152130
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
This partition ends after the disk limits. (start=1030406522, size=1187152130, end=2217558651, disk end=1953525168)
HFS magic value at 503128/11/29
LVM magic value at 507712/43/15
HFS magic value at 517703/27/20
part_size 5965314
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
HFS magic value at 517703/27/22
part_size 5965314
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
LVM magic value at 517982/58/12
LVM magic value at 518746/47/3
LVM magic value at 518791/46/9
LVM magic value at 518810/40/28
LVM magic value at 519310/51/1
LVM magic value at 520277/51/6
LVM magic value at 520456/11/6
LVM magic value at 521516/55/18
LVM magic value at 524451/50/9
LVM magic value at 524579/31/29
LVM magic value at 525018/33/23
LVM magic value at 527966/11/9
LVM magic value at 528344/12/8
LVM magic value at 528922/17/31
LVM magic value at 539503/51/20
LVM magic value at 540294/41/2
LVM magic value at 541772/23/14
LVM magic value at 541780/33/15
LVM magic value at 542071/37/15
LVM magic value at 542078/56/28
LVM magic value at 543402/13/3
LVM magic value at 544327/54/8
LVM magic value at 545313/56/17
LVM magic value at 546568/18/17
LVM magic value at 548317/4/31
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 700015/63/32
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 1433600000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=1433632767, size=1433600000, end=2867232766, disk end=1953525168)
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Disk /dev/nvme1n1 - 1000 GB / 931 GiB - CHS 953869 64 32
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2260 GB / 2105 GiB)
The following partitions can't be recovered:
Mac HFS 543212146 2456339059 1913126914
HFS blocksize=67108864, 979 GB / 912 GiB
Mac HFS 893160340 4415481854 3522321515 [/ ]
HFS blocksize=33554432, 1803 GB / 1679 GiB
Mac HFS 1030406522 2217558651 1187152130
HFS blocksize=16777216, 607 GB / 566 GiB
MS Data 1433632767 2867232766 1433600000
NTFS, blocksize=4096, 734 GB / 683 GiB
Results
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1433600000 linear /dev/nvme1n1 32768" | dmsetup create test0
echo "0 366510082 linear /dev/nvme1n1 133241388" | dmsetup create test1
echo "0 1401571398 linear /dev/nvme1n1 195035778" | dmsetup create test2
echo "0 221396550 linear /dev/nvme1n1 195372016" | dmsetup create test3
echo "0 381810007 linear /dev/nvme1n1 269449908" | dmsetup create test4
echo "0 1090949124 linear /dev/nvme1n1 391522833" | dmsetup create test5
echo "0 1317033 linear /dev/nvme1n1 438849952" | dmsetup create test6
echo "0 1317033 linear /dev/nvme1n1 440166981" | dmsetup create test7
echo "0 366510082 linear /dev/nvme1n1 499751466" | dmsetup create test8
echo "0 137953282 linear /dev/nvme1n1 575480490" | dmsetup create test9
echo "0 381810007 linear /dev/nvme1n1 651259911" | dmsetup create test10
echo "0 137953282 linear /dev/nvme1n1 713433768" | dmsetup create test11
echo "0 5965314 linear /dev/nvme1n1 1054291317" | dmsetup create test12
echo "0 5965314 linear /dev/nvme1n1 1060256627" | dmsetup create test13
echo "0 4096 linear /dev/nvme1n1 1433632768" | dmsetup create test14
Mac HFS 1060256627 1066221940 5965314
HFS blocksize=33554432, 3054 MB / 2912 MiB
Support for this filesystem hasn't been implemented.
Mac HFS 1054291317 1060256630 5965314
HFS found using backup sector!, 3054 MB / 2912 MiB
Support for this filesystem hasn't been implemented.
Mac HFS 713433768 851387049 137953282
HFS blocksize=16777216, 70 GB / 65 GiB
Support for this filesystem hasn't been implemented.
Mac HFS 651259911 1033069917 381810007
HFS blocksize=4194304, 195 GB / 182 GiB
Support for this filesystem hasn't been implemented.
Mac HFS 575480490 713433771 137953282
HFS found using backup sector!, 70 GB / 65 GiB
Support for this filesystem hasn't been implemented.
Mac HFS 499751466 866261547 366510082
HFS blocksize=16777216, 187 GB / 174 GiB
Support for this filesystem hasn't been implemented.
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
Support for this filesystem hasn't been implemented.
Mac HFS 440166981 441484013 1317033
HFS blocksize=16384, 674 MB / 643 MiB
Support for this filesystem hasn't been implemented.
Mac HFS 438849952 440166984 1317033
HFS found using backup sector!, 674 MB / 643 MiB
Support for this filesystem hasn't been implemented.
Mac HFS 391522833 1482471956 1090949124 [Hšh!qa$¢@
',Ž]
HFS blocksize=16777216, 558 GB / 520 GiB
Support for this filesystem hasn't been implemented.
Mac HFS 269449908 651259914 381810007
HFS found using backup sector!, 195 GB / 182 GiB
Support for this filesystem hasn't been implemented.
Mac HFS 195372016 416768565 221396550
HFS blocksize=67108864, 113 GB / 105 GiB
Support for this filesystem hasn't been implemented.
Mac HFS 195035778 1596607175 1401571398
HFS blocksize=67108864, 717 GB / 668 GiB
Support for this filesystem hasn't been implemented.
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
Support for this filesystem hasn't been implemented.
ntfs_device_testdisk_io_ioctl() unimplemented
dir_partition inode=5
MS Data 32768 1433632767 1433600000 [970EVO_WIN]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
Directory /
5 dr-xr-xr-x 0 0 0 12-Aug-2023 21:47 .
5 dr-xr-xr-x 0 0 0 12-Aug-2023 21:47 ..
1005 -r--r--r-- 0 0 5100273664 12-Aug-2023 14:23 pagefile.sys
Mac HFS 133241388 499751469 366510082
HFS found using backup sector!, 187 GB / 174 GiB
Support for this filesystem hasn't been implemented.
Linux filesys. data 1433632768 1433636863 4096
LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
Support for this filesystem wasn't enabled during compilation.
interface_write()
No partition found or selected for recovery
simulate write!
TestDisk exited normally.-
recuperation
- Posts: 3043
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?
Sorry, I can't foresee what is going on with your disk. Yes, you can trash everything. As you already recovered the content of your Microsoft data partition there is no reason to write this partition into the partition table. Duplicate your disk instead and you can try everything out!PartitionTrajic wrote: 30 Aug 2023, 09:21 I have two questions:
1. if I write this MS data will I trash my important 201gb of data?
Obviously you are trying to repair your failed disk without having cloned it.
The logfile shows at least two Microsoft partitions. The second one spans at least the whole disk. I don't know if Testdisk would let you write this one. If you mount your Microsoft partition in read/write mode you have a good chance of making recovery impossible.
I think it's weird to ask me to give you a green light for such a kamikaze mission. What if I said "Yes, no problem, go ahead!" and it fails? Common sense should have told you not to do that. Remember, you don't have an idea where your partitions are located.
I don't know. You are beyond the scope of Testdisk now.2. From what I have given, can I work out the location of my 201gb partition so that I can look for the header? I am not sure if this will be marked as an LVM2 partition or something else. testdisk does not seem to find it.
-
PartitionTrajic
- Posts: 5
- Joined: 30 Aug 2023, 09:01
Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?
Thanks again for taking the time to respond.
"I think it's weird to ask me to give you a green light for such a kamikaze mission. What if I said "Yes, no problem, go ahead!" and it fails?"
I'm asking questions to learn about testdisk. It doesn't mean I will follow a particular course of action.
If I create an image of this problem SSD with dd (byte for byte copy) can I run testdisk on that?
Note, the 50GB disk mentioned below is an empty partition. I found the size by mounting it and checking the details:
type: LUKS1
cipher: aes-xts-plain64
keysize: 512 bits
key location: dm-crypt
device: /dev/loop4
loop: /dev/nvme1n1
sector size: 512
offset: 4096 sectors
size: 519888304 sectors
mode: readonly
I think the map of my problem SSD goes like this
MS data start 32768
MS data end 1433632767
MS Data size 1433600000
50GB start 1433632768 blocks [0xaae7000000 byte offset]
50GB end 1433632768 + 95487448 = 1529120216 blocks (782909550592 byte offset)
50GB size 95487448
So I am looking for the new things at 1529120216 blocks = (782909550592 bytes)? Do I simply look at the log file and search for finding LVM magic numbers from this point?
"LVM magic value at 135492/49/29"
How do I interpret these numbers which are in the log file?
"I think it's weird to ask me to give you a green light for such a kamikaze mission. What if I said "Yes, no problem, go ahead!" and it fails?"
I'm asking questions to learn about testdisk. It doesn't mean I will follow a particular course of action.
If I create an image of this problem SSD with dd (byte for byte copy) can I run testdisk on that?
Note, the 50GB disk mentioned below is an empty partition. I found the size by mounting it and checking the details:
type: LUKS1
cipher: aes-xts-plain64
keysize: 512 bits
key location: dm-crypt
device: /dev/loop4
loop: /dev/nvme1n1
sector size: 512
offset: 4096 sectors
size: 519888304 sectors
mode: readonly
I think the map of my problem SSD goes like this
MS data start 32768
MS data end 1433632767
MS Data size 1433600000
50GB start 1433632768 blocks [0xaae7000000 byte offset]
50GB end 1433632768 + 95487448 = 1529120216 blocks (782909550592 byte offset)
50GB size 95487448
So I am looking for the new things at 1529120216 blocks = (782909550592 bytes)? Do I simply look at the log file and search for finding LVM magic numbers from this point?
"LVM magic value at 135492/49/29"
How do I interpret these numbers which are in the log file?
-
recuperation
- Posts: 3043
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?
Use a backup and you can do what you want without harm.PartitionTrajic wrote: 02 Sep 2023, 00:07 I'm asking questions to learn about testdisk. It doesn't mean I will follow a particular course of action.
Please read the manual.If I create an image of this problem SSD with dd (byte for byte copy) can I run testdisk on that?
I never used LVM. I don't know how the internal structures of LVM work. I can't help you here.
Note, the 50GB disk mentioned below is an empty partition. I found the size by mounting it and checking the details:
type: LUKS1
cipher: aes-xts-plain64
keysize: 512 bits
key location: dm-crypt
device: /dev/loop4
loop: /dev/nvme1n1
sector size: 512
offset: 4096 sectors
size: 519888304 sectors
mode: readonly
I think the map of my problem SSD goes like this
MS data start 32768
MS data end 1433632767
MS Data size 1433600000
50GB start 1433632768 blocks [0xaae7000000 byte offset]
50GB end 1433632768 + 95487448 = 1529120216 blocks (782909550592 byte offset)
50GB size 95487448
So I am looking for the new things at 1529120216 blocks = (782909550592 bytes)? Do I simply look at the log file and search for finding LVM magic numbers from this point?
"LVM magic value at 135492/49/29"
How do I interpret these numbers which are in the log file?
I can only give you some generic advice:
Reproduce your broking setup by installing a new working one and compare your logically? broken disk with the healthy one.
-
PartitionTrajic
- Posts: 5
- Joined: 30 Aug 2023, 09:01
Re: Will writing my MSDATA trash my LVM2 (LUKS) data on the same drive?
Thanks again for your help. I'm juggling this along with taking my dad in and out of hospital, so it hasn't had my full attention.
I freed up some space to copy out the interesting part of the problem drive. Once it is copied I will experiment on it to see if I can find the LVM partition.
I freed up some space to copy out the interesting part of the problem drive. Once it is copied I will experiment on it to see if I can find the LVM partition.