Re: extcarve - ext2,ext3,ext4 file carving tool

"Lakshmipathi.G" <[email protected]> Tue, 14 Jun 2011 12:48:13 +0530
Newsgroups gmane.comp.file-systems.ext3.user
Message-ID <[email protected]>
> extcarve, fails to recover any of my files, it is keeping print
> messages like this:
>
> no header found.at all
> Searching Unused block 415494 which contains non-zero data:
>
> no header found.at all
> Searching Unused block 415495 which contains non-zero data:
>
> I saw almost a million of such lines.
>

It will scan for unused/deleted blocks (415494, 415495 etc). While scanning
It throws out such  output  messages.
When I finds valid header+footer it saves them on external drive. As of now,
extcarve can recover  only limited non-fragmented files of type
png,jpg,gif,html,c/cpp/php,pdf .(recoverd filename will begin with
extcarve<random-char>.extenstion)

current version of tool ,will not recover a partial files - It needs to be
find both header and footer.

extcarve it still running or completed ?   If its completed and didn't
recover any files ,then possible reason would be -
1).Deleted files are fragmented,so extcarve can't find footer.
2).Deleted files doesn't belong to currently supported file types.
3).Or simply extcarve has a bug,that needs to fixed. :P




-- 
----
Cheers,
Lakshmipathi.G
FOSS Programmer.
www.giis.co.in

_______________________________________________
Ext3-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/ext3-users