| 1 |
On Wednesday 08 Feb 2012 11:33:42 Hinnerk van Bruinehsen wrote: |
| 2 |
> On 08.02.2012 12:02, Michael Mol wrote: |
| 3 |
> > On Tue, Feb 7, 2012 at 6:28 PM, Christopher Kurtis Koeber |
| 4 |
> > |
| 5 |
> > <ckoeber@×××××.com> wrote: |
| 6 |
> >> Hello, |
| 7 |
> >> |
| 8 |
> >> I am trying to recover MySQL databases (which were properly shut |
| 9 |
> >> down) from an EXT4 formatted hard disk. |
| 10 |
> > |
| 11 |
> > What happened to require the recovery? Which parts of the database |
| 12 |
> > server shut down properly, and which didn't? |
| 13 |
> > |
| 14 |
> >> I loaded the SystemRescueCD distro that you can get online and |
| 15 |
> >> when running TestDisk I can see the partitions but I cannot |
| 16 |
> >> recover said partitions because it tells me the structure is bad |
| 17 |
> >> (any options here, by the way?) |
| 18 |
|
| 19 |
|
| 20 |
> You could try Autopsy & sleuthkit[1]. |
| 21 |
> Before you do anything to the drive it would be wise to copy it via dd |
| 22 |
> so that no accidental write makes anythoing worse... |
| 23 |
> |
| 24 |
> |
| 25 |
> |
| 26 |
> [1] http://www.sleuthkit.org/autopsy/desc.php |
| 27 |
|
| 28 |
|
| 29 |
Definitely create an image of the partition first, rather than keep accessing |
| 30 |
the real thing. At this moment you don't know what caused the corruption - it |
| 31 |
could well be a warning of worse things to come as far as this drive is |
| 32 |
concerned ... ;-) |
| 33 |
|
| 34 |
It is much better if you create the image with dd-rescue/ddrescue (can't |
| 35 |
recall which of the two packages is claimed to be better). You may also want |
| 36 |
to make a backup copy of the image in case you embark on any destructive |
| 37 |
operations on it. |
| 38 |
|
| 39 |
Multiple passes with ddrescue may recover more bits/bytes so hopefully you'll |
| 40 |
have a more complete set of data to work with. |
| 41 |
|
| 42 |
|
| 43 |
> >> With PhotoRec, I can recover parts of the MySQL Database but I |
| 44 |
> >> cannot get the important *.MYD files because I guess PhotoRec |
| 45 |
> >> doesn't have the signatures for that type of file. |
| 46 |
> >> |
| 47 |
> >> So, any options I have at this point? |
| 48 |
|
| 49 |
You can use dd or hexdump to pick up some blocks at the start of a known good |
| 50 |
*.MYD file, create a signature for PhotoRec and add it on the list of files to |
| 51 |
check for. |
| 52 |
|
| 53 |
See the instruction of how to go about this here: |
| 54 |
|
| 55 |
http://www.cgsecurity.org/wiki/Add_your_own_extension_to_PhotoRec |
| 56 |
-- |
| 57 |
Regards, |
| 58 |
Mick |
Archives