?

Log in

No account? Create an account
Wakum Mata!
Politcally Incorrect Musings
Linux Support 
12th-Jun-2007 07:29 am
linux
rixende, I can't post a reply. I am not her friend. Point her here, please.

----

Heya systemgoddess.

rixende said you had a problem that I might be able to help you with.

Let me see if I can deduce what you have:

A Linux box with SCSI HDD using Reiser FS. I use ext3 at home.

What you will need is a Live CD. Hakin9 has a live CD with useful security utilities on it. Essentially that is what you are looking for: security utilities.

Boot with the live CD and then run crack, John The Ripper, Slurpie, or other password cracking utilities. I don't know what the Hackin9 disk has. Probably crack.

Good luck and let me know how it goes.
Comments 
12th-Jun-2007 02:36 pm (UTC) - Not in the loop
For those of you NOT in the loop on this, I am helping someone recover their lost root password.

Cracking other people's systems is WRONG and ILLEGAL. Just don't do it.
12th-Jun-2007 02:47 pm (UTC)
I left her a note to come here.....I'm sure she'll comment when she sees it.
12th-Jun-2007 05:26 pm (UTC)
Oh, it's not a password issue. The issue is that the hard drive crashed, it was reformatted and then we discovered that the msql files that were needed were on the reformatted drive. OOOOPS! We've managed to hook up a Windoze machine to the afflicted server but it didn't find the files we need. We've been looking for a Linux based recovery solution that recovers Resier FS. I found an open source solution but that didn't find anything at all on the drive in question. If anyone has any ideas I would surely like to hear them.
12th-Jun-2007 07:39 pm (UTC)
Hmmm... I'll keep looking. Reiser FS is still a bit new and not as popular as ext2/3. May be a bit.

12th-Jun-2007 07:56 pm (UTC)
Thanks so much, I appreciate anything you can come up with :-)
13th-Jun-2007 05:55 pm (UTC) - Something useful...
From this link comes the following:


UPDATE (11 August, 2005): For even more hopeless data loss cases, try Foremost.

NOTE: These steps are only for really bad hard disk muck-ups and accidentally deleted files. For normal filesystem inconsistencies, don't use these steps!

1. Once you realize that you've lost data, don't do anything else on that partition - you may cause that data to be overwritten by new data.
2. Unmount that partition. e.g., umount /home
3. Find out what actual device this partition refers to. You can usually get this information from the file /etc/fstab. We'll assume here that the device is /dev/hda3.
4.

Run the command: reiserfsck --rebuild-tree -S -l /root/recovery.log /dev/hda3

You need to be root to do this. Read the reiserfsck man page for what these options do and for more options. Some interesting options are '--rebuild-sb, --check'

After the command finishes, which might be a long time for a big partition, you can take a look at the logfile /root/recovery.log if you wish.
5. Mount your partition: mount /home
6. Look for the lost+found directory in the root of the partition. Here, that would be: /home/lost+found
7. This directory contains all the files that could be recovered. Unfortunately, the filenames are not preserved for a lot of files. You'll find some sub-directories - filenames within those are preserved!
8. Look through the files and copy back what you need.



I hope that helps!
13th-Jun-2007 06:06 pm (UTC) - Re: Something useful...
And a commercial solution called "Kernel Recovery for ReiserFS":

http://www.datarecoverylinux.com/

----

Thinking about your situation, you may need to install the HDD into another Linux box that has been configured with the appropriate software. Then mount the harddrive and perform your recovery on it. Afterwards you can reinstall it in the original machine.

If your Linux box does not have a DVD burner, it may be a good idea to get one and use it to make regular backups. Or you can have a cron job perform an automated network back up to a large file server.
13th-Jun-2007 08:42 pm (UTC) - Re: Something useful...
From the Gentoo website we have this:

6. Maintenance

ReiserFS and filesystem corruption issues -- how to fix them, etc

If your ReiserFS partition is corrupt, try booting the Gentoo Install CD and run reiserfsck --rebuild-tree on the corrupted filesystem. This should make the filesystem consistent again, although you may have lost some files or directories due to the corruption.


13th-Jun-2007 09:08 pm (UTC) - still brainstorming...
Hmmmm.....A low level format will totally blow away the inodes making it nigh impossible to recover any useful data (it does in FAT, anyway). Mind you, the data will still be there, but the formatting of the disk will be totally lost and there is no longer any way to tell how the data sectors of any fragmented files were connected. This is where computer forensics comes into play.


You could try reiserfsck --rebuild-tree -S and see if that works for you.
14th-Jun-2007 02:05 pm (UTC) - Re: still brainstorming...
Thanks so much for all the suggestions. We've given up and sent it to a data recovery place. Hopefully they can get somewhere with it. We have learned from what you've sent us though so it wasn't a wasted effort. Thanks again and have a great day :-)
Lydia
This page was loaded Oct 24th 2017, 5:36 am GMT.