Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Suggestion... #138

Open
Zibri opened this issue Feb 3, 2023 · 1 comment
Open

Suggestion... #138

Zibri opened this issue Feb 3, 2023 · 1 comment

Comments

@Zibri
Copy link

Zibri commented Feb 3, 2023

Can you all please try this?

Install sg3_utils for linux or cygwin.

Open a bash shell.

determine the device name of your drive using sg_scan

dev=YOUR_DEVICE

copy and paste this line:

printf -v sec $((0x$(sg_raw 2>/dev/null -r 8k $dev 85 09 0e 00 00 00 10 00 80 00 00 00 00 10 2f 00 -o -|cut -c 9-16|xxd -l 16 -ps|rev|while read -N1 a;do read -N1 b;echo -n $b$a;done|cut -c 3-)))

echo Sector is: $sec

then go check that sector (echo $sec)

alternatively if you know the device name (not the sg_raw one) you can:

dd if=/dev/sdc bs=512 skip=$sec count=1 of=DUMPED.bin
Since I don't know what's there, put count=128 or more..

You might find the the block reallymine is looking for without searching the whole hd.

On my 14 TB harddrive this points to a sector (which in my case is empty because it is all empty now)

@Zibri
Copy link
Author

Zibri commented Feb 3, 2023

Data view in Victoria
image

By the way I have the same data also in ID 98. You might want to check that too.

printf -v sec $((0x$(sg_raw 2>/dev/null -r 8k $dev 85 09 0e 00 00 00 10 00 98 00 00 00 00 10 2f 00 -o -|cut -c 9-16|xxd -l 16 -ps|rev|while read -N1 a;do read -N1 b;echo -n $b$a;done|cut -c 3-)))

echo Sector is: $sec

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant