Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- root@kali:~# cat testdisk.log
- Mon Mar 28 12:55:43 2016
- Command line: TestDisk
- TestDisk 6.14, Data Recovery Utility, July 2013
- Christophe GRENIER <grenier@cgsecurity.org>
- http://www.cgsecurity.org
- OS: Linux, kernel 4.3.0-kali1-amd64 (#1 SMP Debian 4.3.3-5kali4 (2016-01-13)) x86_64
- Compiler: GCC 5.2
- Compilation date: 2015-09-13T21:27:20
- ext2fs lib: 1.42.13, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none
- /dev/sda: LBA, HPA, LBA48, DCO support
- /dev/sda: size 1465149168 sectors
- /dev/sda: user_max 1465149168 sectors
- /dev/sda: native_max 1465149168 sectors
- /dev/sda: dco 1465149168 sectors
- Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
- Hard disk list
- Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - APPLE HDD HTS541075A9E662, S/N:J89101B1GG9TNM, FW:JA2AB5D0
- Disk /dev/sdb - 16 GB / 15 GiB - CHS 15360 64 32, sector size=512 - Verbatim STORE N GO, FW:8.07
- Partition table type (auto): EFI GPT
- Disk /dev/sda - 750 GB / 698 GiB - APPLE HDD HTS541075A9E662
- Partition table type: EFI GPT
- Analyse Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
- hdr_size=92
- hdr_lba_self=1
- hdr_lba_alt=1465149167 (expected 1465149167)
- hdr_lba_start=34
- hdr_lba_end=1465149134
- hdr_lba_table=2
- hdr_entries=128
- hdr_entsz=128
- check_part_gpt failed for partition
- 3 P MS Data 1035436662 1102545525 67108864
- Current partition structure:
- 1 P MS Data 409640 394777167 394367528 [BOOTCAMP]
- 2 P Mac HFS 498446704 977979527 479532824
- No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
- 3 P MS Data 1035436662 1102545525 67108864
- 3 P MS Data 1035436662 1102545525 67108864
- 4 P Mac HFS 1398999744 1400269279 1269536
- search_part()
- Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
- NTFS at 25/127/15
- filesystem size 394367528
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- NTFS part_offset=209735680, part_size=201916174336, sector_size=512
- NTFS partition cannot be added (part_offset<part_size).
- NTFS at 25/127/15
- filesystem size 394367528
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- MS Data 409640 394777167 394367528 [BOOTCAMP]
- NTFS, blocksize=4096, 201 GB / 188 GiB
- MS Data 394778624 498444287 103665664
- exFAT, 53 GB / 49 GiB
- HFS+ magic value at 31026/222/29
- part_size 479532824
- Mac HFS 498446704 977979527 479532824
- HFS+ blocksize=4096, 245 GB / 228 GiB
- HFS+ magic value at 60892/185/34
- part_size 1269536
- Mac HFS 978241668 979511203 1269536
- HFS+ blocksize=4096, 650 MB / 619 MiB
- LVM magic value at 61603/47/26
- LVM magic value at 61653/151/5
- LVM magic value at 61867/20/32
- LVM magic value at 61960/129/60
- LVM magic value at 62018/43/11
- LVM magic value at 64147/97/7
- Unknown 1032594768 1762751979201871 1762750946607104
- WBFS, 902528 TB / 820844 TiB
- Partition not added.
- recover_EXT2: s_block_group_nr=0/2, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
- recover_EXT2: s_blocksize=4096
- recover_EXT2: s_blocks_count 65536
- recover_EXT2: part_size 524288
- MS Data 1036427984 1036952271 524288
- ext3 blocksize=4096 Large file Sparse superblock, 268 MB / 256 MiB
- block_group_nr 7
- recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
- recover_EXT2: s_block_group_nr=7/256, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
- recover_EXT2: s_blocksize=4096
- recover_EXT2: s_blocks_count 8388608
- recover_EXT2: part_size 67108864
- MS Data 1035436662 1102545525 67108864
- ext3 blocksize=4096 Large file Sparse superblock Backup superblock, 34 GB / 32 GiB
- LVM magic value at 68976/1/8
- FAT12 at 69848/158/31
- FAT1 : 1-1
- FAT2 : 2-2
- start_rootdir : 3
- Data : 35-894
- sectors : 896
- cluster_size : 4
- no_of_cluster : 215 (2 - 216)
- fat_length 1 calculated 1
- heads/cylinder 64 (FAT) != 255 (HD)
- sect/track 32 (FAT) != 63 (HD)
- FAT12 at 69848/158/31
- MS Data 1122118104 1122118999 896
- FAT12, blocksize=2048, 458 KB / 448 KiB
- recover_btrfs: part_size 13710979677795088
- MS Data 1122119259 13710980799914347 13710979677795088 [(%d stripes (%d substripes) of %lx)
- ]
- btrfs blocksize=1660946976 Backup superblock, 7020021 TB / 6384672 TiB
- This partition ends after the disk limits. (start=1122119259, size=13710979677795088, end=13710980799914347, disk end=1465149168)
- FAT32 at 69849/88/34
- Bad root_cluster
- check_FAT: Unusual media descriptor (0xf0!=0xf8)
- FAT12 at 69849/88/35
- FAT1 : 1-9
- FAT2 : 10-18
- start_rootdir : 19
- Data : 33-2879
- sectors : 2880
- cluster_size : 1
- no_of_cluster : 2847 (2 - 2848)
- fat_length 9 calculated 9
- FAT differs, FAT sectors=0-9/9
- heads/cylinder 2 (FAT) != 255 (HD)
- sect/track 18 (FAT) != 63 (HD)
- FAT12 at 69849/88/35
- MS Data 1122129763 1122132642 2880 [NO NAME]
- FAT12, blocksize=512, 1474 KB / 1440 KiB
- FAT12 at 73011/239/5
- FAT1 : 1-1
- FAT2 : 2-2
- start_rootdir : 3
- Data : 35-894
- sectors : 896
- cluster_size : 4
- no_of_cluster : 215 (2 - 216)
- fat_length 1 calculated 1
- heads/cylinder 64 (FAT) != 255 (HD)
- sect/track 32 (FAT) != 63 (HD)
- FAT12 at 73011/239/5
- MS Data 1172936776 1172937671 896
- FAT12, blocksize=2048, 458 KB / 448 KiB
- FAT32 at 73041/82/44
- Bad root_cluster
- check_FAT: Unusual media descriptor (0xf0!=0xf8)
- FAT12 at 73041/82/45
- FAT1 : 1-9
- FAT2 : 10-18
- start_rootdir : 19
- Data : 33-2879
- sectors : 2880
- cluster_size : 1
- no_of_cluster : 2847 (2 - 2848)
- fat_length 9 calculated 9
- FAT differs, FAT sectors=0-9/9
- heads/cylinder 2 (FAT) != 255 (HD)
- sect/track 18 (FAT) != 63 (HD)
- FAT12 at 73041/82/45
- MS Data 1173408875 1173411754 2880 [NO NAME]
- FAT12, blocksize=512, 1474 KB / 1440 KiB
- recover_btrfs: part_size 13710979677795088
- MS Data 1173561655 13710980851356743 13710979677795088 [(%d stripes (%d substripes) of %lx)
- ]
- btrfs blocksize=1660946976 Backup superblock, 7020021 TB / 6384672 TiB
- This partition ends after the disk limits. (start=1173561655, size=13710979677795088, end=13710980851356743, disk end=1465149168)
- HFS+ magic value at 87083/180/10
- part_size 1269536
- Mac HFS 1398999744 1400269279 1269536
- HFS+ blocksize=4096, 650 MB / 619 MiB
- HFS+ magic value at 87162/186/33
- part_size 64617704
- Mac HFS 1400269280 1464886983 64617704
- HFS+ blocksize=4096, 33 GB / 30 GiB
- Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
- Check the harddisk size: HD jumpers settings, BIOS detection...
- The harddisk (750 GB / 698 GiB) seems too small! (< 7020022 TB / 6384672 TiB)
- The following partitions can't be recovered:
- MS Data 1122119259 13710980799914347 13710979677795088 [(%d stripes (%d substripes) of %lx)
- ]
- btrfs blocksize=1660946976 Backup superblock, 7020021 TB / 6384672 TiB
- MS Data 1173561655 13710980851356743 13710979677795088 [(%d stripes (%d substripes) of %lx)
- ]
- btrfs blocksize=1660946976 Backup superblock, 7020021 TB / 6384672 TiB
- Results
- P MS Data 409640 394777167 394367528 [BOOTCAMP]
- NTFS, blocksize=4096, 201 GB / 188 GiB
- P MS Data 394778624 498444287 103665664
- exFAT, 53 GB / 49 GiB
- P Mac HFS 498446704 977979527 479532824
- HFS+ blocksize=4096, 245 GB / 228 GiB
- P Mac HFS 978241668 979511203 1269536
- HFS+ blocksize=4096, 650 MB / 619 MiB
- MS Data 1035436662 1102545525 67108864
- ext3 blocksize=4096 Large file Sparse superblock Backup superblock, 34 GB / 32 GiB
- MS Data 1036427984 1036952271 524288
- ext3 blocksize=4096 Large file Sparse superblock, 268 MB / 256 MiB
- P MS Data 1122118104 1122118999 896
- FAT12, blocksize=2048, 458 KB / 448 KiB
- P MS Data 1122129763 1122132642 2880 [NO NAME]
- FAT12, blocksize=512, 1474 KB / 1440 KiB
- P MS Data 1172936776 1172937671 896
- FAT12, blocksize=2048, 458 KB / 448 KiB
- P MS Data 1173408875 1173411754 2880 [NO NAME]
- FAT12, blocksize=512, 1474 KB / 1440 KiB
- P Mac HFS 1398999744 1400269279 1269536
- HFS+ blocksize=4096, 650 MB / 619 MiB
- P Mac HFS 1400269280 1464886983 64617704
- HFS+ blocksize=4096, 33 GB / 30 GiB
- P Mac HFS 1400269280 1464886983 64617704
- HFS+ blocksize=4096, 33 GB / 30 GiB
- Support for this filesystem hasn't been enable during compilation.
- P Mac HFS 1398999744 1400269279 1269536
- HFS+ blocksize=4096, 650 MB / 619 MiB
- Support for this filesystem hasn't been enable during compilation.
- dir_partition inode=0
- P MS Data 394778624 498444287 103665664
- exFAT, 53 GB / 49 GiB
- Directory /
- 6 -rwxr-xr-x 0 0 4096 28-Mar-2016 01:28 ._.Trashes
- 5 drwxr-xr-x 0 0 131072 28-Mar-2016 01:28 .Trashes
- P Mac HFS 498446704 977979527 479532824
- HFS+ blocksize=4096, 245 GB / 228 GiB
- Support for this filesystem hasn't been enable during compilation.
- dir_partition inode=0
- P MS Data 1122129763 1122132642 2880 [NO NAME]
- FAT12, blocksize=512, 1474 KB / 1440 KiB
- Directory /
- �<���$�.��rwxr-xr-x 0 0 0 6-Dec-1960 21:41
- 0 -r-xr-xr-x 0 0 0 31-Aug-2013 01:16 G���'� �.��?
- 0 -rwxr-xr-x 0 0 0 22-Apr-1917 02:11 ��'B���.'|7
- 0 -r-xr-xr-x 0 0 0 25-Jun-1910 11:53 ³ג��.�!�
- X 191 drwxr-xr-x 0 0 2tail: unrecognized file system type 0x794c7630 for ‘testdisk.log’. please report this to bug-coreutils@gnu.org. reverting to polling
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement