[SWLUG] RAID Array data recovery

[Matthew Moore]

justin wrote:
> On Thu, 2009-09-24 at 21:55 +0100, Matthew Moore wrote:
>> justin wrote:
>>> On Thu, 2009-09-24 at 21:30 +0100, Matthew Moore wrote:

>>>
>> root at hugh:/home/matt# fdisk -l /dev/md0
>>
>> Disk /dev/md0: 1000.2 GB, 1000215543808 bytes
>> 255 heads, 63 sectors/track, 121602 cylinders
>> Units = cylinders of 16065 * 512 = 8225280 bytes
>>
>>     Device Boot      Start         End      Blocks   Id  System
>> /dev/md0p1               1       60801   488384001   fd  Linux raid
>> autodetect
>>
>> Which is odd, as it ought to be a ext3 partition.  Is it possible to
>> recover the ext3 partition that is on there?
> try fsck and/or mounting the device it says there, see if thats where
> you ext3 partiton has gone.
> 
> the partition type label shouldnt affect the commands.

fsck, e2fsck -b 32768 and mount run on /dev/md0p1 all return the same
superblock error as before.

> if all else fails and you cant find a valid filesystem then there are
> some free forensics tools around that will search a raw block device for
> the tell-tale signatures of certain file types and try to recover them

Ok, I'll take a look.

Do you think the dd approach I outlined would work tho?

Cheers,

Matt