Re: [sleuthkit-users] Recovering files from damaged disk
Brought to you by:
carrier
From: Seth A. <set...@su...> - 2006-01-03 19:41:15
|
On Fri, Dec 30, 2005 at 08:58:10PM +0100, Paul Bakker wrote: > Just use dd with conv=3Dnoerror,sync as arguments.. > (Take bs small as that is the size of data is "skips" on error If you=20 > want to be REALLY thorough use bs=3D1, but be ready to wait for a LONG ti= me!) The dd_rescue tool will try to make the best of both worlds here: http://www.garloff.de/kurt/linux/ddrescue/ The two block sizes are a performance optimization. Large block sizes result in superior performance, but in case of errors, you want to try to salvage every single sector. So hardbs is best be set to the hardware sector size (most often 512 bytes) and softbs to a large value, such as the default 16k. |