Need help restoring drives - ran sgdisk -e and now my data is gone

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Post Reply
Message
Author
musicelect
Posts: 1
Joined: Yesterday, 20:02

Need help restoring drives - ran sgdisk -e and now my data is gone

#1 Post by musicelect »

I had three drives which reported "The backup GPT table is not on the end of the device."
Recommendations were to run sgdisk -e /dev/sdx
I ran sgdisk -e on all three drives and now they show no data. I know the data is still there.

Is there a way to reverse what I did? I see lots of things suggested online, but I don't know what I'm doing.


I ran TestDisk and it finds a bunch of partitions, but my drives are 8TB, 24TB, and 26TB. The log file hit 449GB before filling up my system drive and stalling the os.

Has anyone encountered this or have knowledge around this that can help restore my partitions?

Thanks!
recuperation
Posts: 3144
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Need help restoring drives - ran sgdisk -e and now my data is gone

#2 Post by recuperation »

musicelect wrote: Yesterday, 20:16 I had three drives which reported "The backup GPT table is not on the end of the device."
Recommendations were to run sgdisk -e /dev/sdx
I ran sgdisk -e on all three drives and now they show no data. I know the data is still there.

Is there a way to reverse what I did? I see lots of things suggested online, but I don't know what I'm doing.
Please deliver a proper case description. How did your storage environment looked like before some incident happened? Disks? Partitions? File systems? Use of RAID or similar stuff?
Read the sgdisk manual to see what the parameter -e is for: Google "man sgdisk" then key [CTRL][F] and search for "-e". Why did you ran this command at all?
"I know the data is still there" is not a substitute for a proper case description.
As for the really useless sentence "I know the data is still there": You don't know. You guess. If you overwrite just the MFT in a NTFS file system the data still there, every byte. If it is defragmented your data degraded to a puzzle that a recovery software may only solve in little parts.

I ran TestDisk and it finds a bunch of partitions, but my drives are 8TB, 24TB, and 26TB. The log file hit 449GB before filling up my system drive and stalling the os.
Rerun TestDisk for each of your disks and interrupt TestDisk once the log file exceeds 10 kByte or copy the first 10 kByte into a new file if you have a longer text file. If a text editor has problems with the length of your log file use a hex editor to copy the first 10 kByte.
Has anyone encountered this or have knowledge around this that can help restore my partitions?
Please provide a smartmontools log file for each of your affected disks:

viewtopic.php?f=5&t=10910
Post Reply