cgsecurity.org

Posted: **21 Aug 2019, 15:26**

Hello,

I have a 3TB drive. I had a ext4 partition covering the whole drive.
I then accidentally deleted the partition (mixed up drive) and installed a CEPH OSD (which I think makes a Linux LVM on that disk?)

There was nearly nothing written onto the disk other then the partition info (I think somethin like 64Kb) before I realized and deleted the CEPH OSD and unmounted.

I tried using Testdisk to recover the partition however it does not find it.

Using PhotoRec I can recover many files. Is there a possibillity to recover the ext4 partition though?

Thank you
Daniel

Posted: **23 Aug 2019, 05:49**

TestDisk should be able to find the partition using Deeper Search (TestDisk, Analyse, Quick Search, Stop, Deeper Search...) using the ext4 backup superblock.

Posted: **29 Aug 2019, 05:45**

it finds lots of partitions (?) that cannot be recovered:

Code: Select all

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364801 255 63

The harddisk (3000 GB / 2794 GiB) seems too small! (< 5642 GB / 5254 GiB)
Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:
     Partition               Start        End    Size in sectors
>  MS Data                 63703038 5924233213 5860530176
   MS Data                 89917438 5950447613 5860530176
   MS Data                163842046 6024372221 5860530176                                                                                                                                   MS Data                191105022 6051635197 5860530176
   MS Data                573310974 6433841149 5860530176
   MS Data                629409790 6489939965 5860530176
   MS Data                819202046 6679732221 5860530176
   MS Data               1719928830 7580459005 5860530176
   MS Data               2143554616 8004084791 5860530176
   MS Data               2143646424 8004176599 5860530176

[ Continue ]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 3000 GB / 2794 GiB

Code: Select all


TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364801 255 63
     Partition               Start        End    Size in sectors
>P MS Data                    24296   58740455   58716160
 P Mac HFS               1342017428 1342148516     131089
 P MS Data               2475863980 2482764109    6900130 [BsF^CM-2M-3 @M-+M-|c ^R
 P MS Data               2962917105 2969689758    6772654 [N~[aQM-5P~V|1~L^^~K
 P Mac HFS               3052294036 3052425124     131089

cgsecurity.org

Recover ext4 partition deleted & overwritten

Recover ext4 partition deleted & overwritten

Re: Recover ext4 partition deleted & overwritten

Re: Recover ext4 partition deleted & overwritten