On Monday 11 November 2002 11:36 am, James Cadden wrote: > Rod, > > You described two pieces of digital media that were known to have data > on them, but when you examine them.....there is no data. What > methods/tools are you using to examine them? I had tried a piece of software called... photorescue. Downloaded a free trial version, and it didn't show me anything. The `display raw graph`` of data option showed absolutely nothing, so I don't know if it was not reading anything, or if there is nothing there to read. It did take some time to run, accessing the floppy (adapter). Using dd right now, but not getting anything off it. Trying to minimize the number of layers of abstraction between the device and being able to see the data. The smartmedia card is currently in a FlashPath Floppy adapter, in /dev/fd0 on (one) linux box, but now luck: # dd if=/dev/fd0 bs=1 count=65535 of=./test.img dd: reading `/dev/fd0': Input/output error 0+0 records in 0+0 records out Trying some different mount options to see if I can mount the media. No luck there. > Is that SCSI part of a raid? No, it is a standalone disk. Usually they make a copy before transport, but that option was not available this time. Thanks for the advice so far. Rod > Jim > > -----Original Message----- > From: Rod Hauser [mailto:rod42at_private] > Sent: Sunday, November 10, 2002 8:39 AM > To: forensicsat_private > Subject: 2 data recovery questions > > I have 2 data recovery situations that could use an opinion. > > 1) a 100GB+ scsi disk from an SGI that has data on it, but nothing is > visible. I'd prefer either a professional but affordable service > recommendation, or a freely downloadable toolkit, preferably Linux, but > I do > have another SGI I could load it on, too. > I've downloaded the PLAC toolkit iso, but haven't tried it yet. > Any other recommendations? > 2) a 3.3V 64MB SmartMedia card that was filled up in the camera, but now > > shows as blank (errors) both in the camera and in the FlashPath floppy > adapter. . I downloaded a piece of software that said it might read it, > but > it doesn't show any more data. I've considered buying a USB adapter > just to > try recovery one more way, but I do not have high hopes. > Any opinions to the contrary? > > TIA > Rod -- Rod Hauser, CISSP, LCA St Louis, Missouri, USA, Sol 3, Milky Way ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Sun Nov 17 2002 - 18:37:15 PST