Re: [sleuthkit-users] EXT2 superblock

[Linux T. <lin...@ya...>]

--- Brian Carrier <ca...@sl...> wrote:
 
> No, because the first partition is not typically
> until sector 63, which 
> is ~32K into the disk.  Sectors 1 to 62 may contain
> boot code and the 
> system will no longer boot, but the FS data should
> be fine.  Superblock 
> is two more sectors into the partition and the group
> descriptors are a 
> few more KB in after that (depending on the FS block
> size).


So using common 4k block size all should be left
alone.


> So, Lisa's file system should still be intact, the
> issue is finding out 
> where it starts and ends.
> 
> brian

This should be easy then, yes?  Use fdisk and create
same exact partition layout.  Then fsck and specify
good backup superblock?

-lt


		
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail