Unrecognized disk label of a external HD

 
Thread Tools Search this Thread
Special Forums Hardware Unrecognized disk label of a external HD
# 8  
Old 11-12-2010
Quote:
Originally Posted by COKEDUDE
I saw it a few times. How would I pipe that in a log file? Less keeps on getting stuck on me when I try to search. This is the command I used and it just made a empty log file.
Code:
sudo dd if=/dev/sdb count=$((2*16384)) | hexdump -C | > /home/bob/Desktop/lspci

Remove the extra pipe.

Code:
sudo dd if=/dev/sdb count=$((2*16384)) | hexdump -C > /home/bob/Desktop/logfile.txt ; less /home/bob/logfile.txt

Quote:
Since I do see NTFS how would I fix it?
Much like I said; create a boot sector that matches the place where you found the partition. Without knowing where you found NTFS though, that may be difficult. I'm reluctant to give too general instructions lest it be my fault your drive gets messed up.

Here's a dump I managed to get from the very start of an NTFS partition:
Code:
00000000  eb 52 90 4e 54 46 53 20  20 20 20 00 02 08 00 00  |.R.NTFS    .....|
00000010  00 00 00 00 00 f8 00 00  3f 00 ff 00 3f 00 00 00  |........?...?...|
00000020  00 00 00 00 80 00 80 00  9b 7d 97 0f 00 00 00 00  |.........}......|
00000030  00 00 0c 00 00 00 00 00  10 00 00 00 00 00 00 00  |................|
00000040  f6 00 00 00 01 00 00 00  91 09 c8 74 39 c8 74 2a  |...........t9.t*|
00000050  00 00 00 00 fa 33 c0 8e  d0 bc 00 7c fb b8 c0 07  |.....3.....|....|
00000060  8e d8 e8 16 00 b8 00 0d  8e c0 33 db c6 06 0e 00  |..........3.....|
00000070  10 e8 53 00 68 00 0d 68  6a 02 cb 8a 16 24 00 b4  |..S.h..hj....$..|
00000080  08 cd 13 73 05 b9 ff ff  8a f1 66 0f b6 c6 40 66  |...s......f...@f|
00000090  0f b6 d1 80 e2 3f f7 e2  86 cd c0 ed 06 41 66 0f  |.....?.......Af.|

Since you only see a raw device though, not a partition, yours won't be at zero.

Last edited by Corona688; 11-12-2010 at 03:41 PM..
# 9  
Old 11-12-2010
For some reason I can now see my partition in Nautilus (my file manager) but I can't mount it.

When I do this command should which one should I be using?
Code:
sudo fdisk /dev/sdb
sudo fdisk /dev/sdb1

Also more information is showing up in sudo fdisk -l. The first time I tried it I couldn't see the part I am putting in between stars below.
Code:
~ $ sudo fdisk -l

Disk /dev/sda: 100.0 GB, 100030242816 bytes
255 heads, 63 sectors/track, 12161 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x000c8b89

   Device Boot      Start         End      Blocks   Id  System
/dev/sda1               1        1245     9999360   83  Linux
/dev/sda2            1246        5478    33998849    5  Extended
/dev/sda3   *        5479       12161    53681197+   7  HPFS/NTFS
/dev/sda5            1246        1743     3998720   82  Linux swap / Solaris
/dev/sda6            1744        5478    29999104   83  Linux

Disk /dev/sdb: 203.9 GB, 203928109056 bytes
255 heads, 63 sectors/track, 24792 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x9503c6ab

**************************************************************************************************************************
   Device Boot      Start         End      Blocks   Id  System
/dev/sdb1               1       24792   199141708+   7  HPFS/NTFS

**************************************************************************************************************************

It now thinks I at least have a valid partition table.

---------- Post updated at 05:35 PM ---------- Previous update was at 05:10 PM ----------

Quote:
Originally Posted by Corona688
Remove the extra pipe.

Code:
sudo dd if=/dev/sdb count=$((2*16384)) | hexdump -C > /home/bob/Desktop/logfile.txt ; less /home/bob/logfile.txt

Much like I said; create a boot sector that matches the place where you found the partition. Without knowing where you found NTFS though, that may be difficult. I'm reluctant to give too general instructions lest it be my fault your drive gets messed up.

Here's a dump I managed to get from the very start of an NTFS partition:
Code:
00000000  eb 52 90 4e 54 46 53 20  20 20 20 00 02 08 00 00  |.R.NTFS    .....|
00000010  00 00 00 00 00 f8 00 00  3f 00 ff 00 3f 00 00 00  |........?...?...|
00000020  00 00 00 00 80 00 80 00  9b 7d 97 0f 00 00 00 00  |.........}......|
00000030  00 00 0c 00 00 00 00 00  10 00 00 00 00 00 00 00  |................|
00000040  f6 00 00 00 01 00 00 00  91 09 c8 74 39 c8 74 2a  |...........t9.t*|
00000050  00 00 00 00 fa 33 c0 8e  d0 bc 00 7c fb b8 c0 07  |.....3.....|....|
00000060  8e d8 e8 16 00 b8 00 0d  8e c0 33 db c6 06 0e 00  |..........3.....|
00000070  10 e8 53 00 68 00 0d 68  6a 02 cb 8a 16 24 00 b4  |..S.h..hj....$..|
00000080  08 cd 13 73 05 b9 ff ff  8a f1 66 0f b6 c6 40 66  |...s......f...@f|
00000090  0f b6 d1 80 e2 3f f7 e2  86 cd c0 ed 06 41 66 0f  |.....?.......Af.|

Since you only see a raw device though, not a partition, yours won't be at zero.
Could you please try? It now at least thinks I have a partition table Smilie. Check my previous post.

Last edited by Scott; 11-20-2010 at 06:54 AM.. Reason: Code tags, please...
# 10  
Old 11-12-2010
Quote:
I also found this and this looks promising .
Code:
00007f80  eb f2 c3 0d 0a 41 20 64  69 73 6b 20 72 65 61 64  |.....A disk read|
00007f90  20 65 72 72 6f 72 20 6f  63 63 75 72 72 65 64 00  | error occurred.|
00007fa0  0d 0a 4e 54 4c 44 52 20  69 73 20 6d 69 73 73 69  |..NTLDR is missi|
00007fb0  6e 67 00 0d 0a 4e 54 4c  44 52 20 69 73 20 63 6f  |ng...NTLDR is co|
00007fc0  6d 70 72 65 73 73 65 64  00 0d 0a 50 72 65 73 73  |mpressed...Press|
00007fd0  20 43 74 72 6c 2b 41 6c  74 2b 44 65 6c 20 74 6f  | Ctrl+Alt+Del to|
00007fe0  20 72 65 73 74 61 72 74  0d 0a 00 00 00 00 00 00  | restart........|
00007ff0  00 00 00 00 00 00 00 00  83 a0 b3 c9 00 00 55 aa  |..............U.|
00008000  05 00 4e 00 54 00 4c 00  44 00 52 00 04 00 24 00  |..N.T.L.D.R...$.|
00008010  49 00 33 00 30 00 00 e0  00 00 00 30 00 00 00 00  |I.3.0......0....|

See the 0xAA55 at offset 0x7FFD. This is the signature for the end of the NTFS boot sector. $BOOT in NTFS MFT terminology. This is MFT entry 7. It is the only NTFS metadata file that has a static location.

Per NTFS design docs, a backup copy of the boot sector always exists either at the middle of the volume or at last. To date, the backup copy has been placed in the last sector. Compare these two sectors to see if there is a difference.

Frankly, I don't think you will find a difference. Something else is going on. Did you "unmount" this disk cleanly the last time you used it?
# 11  
Old 11-13-2010
Quote:
Originally Posted by fpmurphy
See the 0xAA55 at offset 0x7FFD. This is the signature for the end of the NTFS boot sector. $BOOT in NTFS MFT terminology. This is MFT entry 7. It is the only NTFS metadata file that has a static location.

Per NTFS design docs, a backup copy of the boot sector always exists either at the middle of the volume or at last. To date, the backup copy has been placed in the last sector. Compare these two sectors to see if there is a difference.

Frankly, I don't think you will find a difference. Something else is going on. Did you "unmount" this disk cleanly the last time you used it?
I wasn't given the ability to do that. I was watching some videos in XP and all of a sudden I couldn't access my data any more. I don't understand what happened. I thought watching some videos is a very simple thing.
# 12  
Old 11-13-2010
Hmm, NTFS dirty bit is probably set then. Try mounting it on a regular Windows system and running the chkntfs utility from the command prompt.
# 13  
Old 11-14-2010
Quote:
Originally Posted by fpmurphy
Hmm, NTFS dirty bit is probably set then. Try mounting it on a regular Windows system and running the chkntfs utility from the command prompt.
If my memory is correct you have to have a drive letter for chkntfs to work correctly. Is that correct? In windows It has no drive letter. I am also not able to assign it a drive letter with disk management. Is there a way to ignore this problem?
# 14  
Old 11-16-2010
Quote:
Originally Posted by COKEDUDE
For some reason I can now see my partition in Nautilus (my file manager) but I can't mount it.

When I do this command should which one should I be using?
sudo fdisk /dev/sdb
sudo fdisk /dev/sdb1
/dev/sdb. You don't fdisk a partition.
Quote:
Could you please try? It now at least thinks I have a partition table Smilie. Check my previous post.
Well, my directions would've been on how to get that partition table back. That it has is both very good and very bad news; something's seriously wrong with either the drive or the USB cage for a sector to just vanish and return like that! Also good that you posted it here. Armed with that you have enough information to recreate it from scratch if it vanishes again.

If windows doesn't see the partition table, first off I would rewrite the same partition table back to it, just 'w' from fdisk /dev/sdb. If there's anything odd in it preventing windows from seeing the partitions, that may clear it.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. SCO

Unsuccessful install due to unrecognized disk issue

Dear Community! i try to instaled the sco 6 in hp proliant ML350g8 but unsucces, the trouble when i do instaled it undetected hardisk please help me :(:o (7 Replies)
Discussion started by: mnr
7 Replies

2. HP-UX

Expert Recovery Shell - Fatal Error: Unrecognized disk layout

I have a B.11.31 U ia64 system where I swremove the disk driver "SerialSCSI-00 B.11.31.1303 PCI-X/PCI-E SerialSCSI" (by mistake). afterwards the system won;t boot because of the missing disk drivers. I'm trying to recover my kernel by using the image HP-ux_11_31_disc_1.iso Run an Expert... (1 Reply)
Discussion started by: black_fender
1 Replies

3. Hardware

Unrecognized disk label on my external HD

Hi everyone, I have an external hard drive and I accidentally deleted the partition table. Can I restore my files? If I try to run the f-disk command this is what it says Disk /dev/sda: 320.1 GB, 320072933376 bytes 255 heads, 63 sectors/track, 38913 cylinders, total 625142448 sectors Units =... (1 Reply)
Discussion started by: Sampa
1 Replies

4. Solaris

Script to label a disk

Hi Guys, Do you have any script to label a disk automatically. It is part of my script but I am not able to find solution to label this inside script without user intervention. (2 Replies)
Discussion started by: prashant2507198
2 Replies

5. Solaris

label a slice on disk erorr

Hi there, I am trying to do root volume mirroring on SunFire V210 server. I have two disks in it.First one is c1t0do and second one is c1t1do. Both disks already have partitions in them so I am deleting the partitions of second disk(c1t1do) using format command and selecting cylinder start 0... (2 Replies)
Discussion started by: newbi8321
2 Replies

6. UNIX for Dummies Questions & Answers

How to read a disk label?

Hi there, I'm wondering how to display a disk label (why not edit it but I don't need that yet). I found several commands on forums like disklabel and diskinfo but I can't find them on my system and don't know the package they belong to. Can you help me? Cheers Santiago (2 Replies)
Discussion started by: chebarbudo
2 Replies

7. Solaris

Help:"Bad checksum in disk label" and "Can't open disk label package"?

Hello, I'm brand new to Sun/Solaris. I have a Sun Blade 150, with SunOS 5.8. I wanted to make a backup to prevent future data loss, so I put the disk in a normal PC with Windows XP to try to make a backup with Norton Ghost, the disk was detected, but not the file volume, so I place the disk... (6 Replies)
Discussion started by: Resadija
6 Replies

8. Solaris

ZFS disk label missing

I 'm having problem in importing a zfs pool was getting error device missing and upon further digging found that labels on my disk for zpool are missing Does anyone know how to recover from it ? root@essapl020-u006 # zdb -l /dev/dsk/emcpower0c --------------------------------------------... (0 Replies)
Discussion started by: fugitive
0 Replies

9. Solaris

Warning: No Disk Label

Hi Fellows, I am trying to mirror 2 identical disks on a SUN Ultra 10 machines (with new installation of Solaris 8). In the process, I found 2 issues: 1. prtvtoc /dev/rdsk/c0t0d0s0 | fmthard -s - /dev/rdsk/c0t1d0s0 Result: Disk partitions between the 2 disks do not match up. 2. manually... (2 Replies)
Discussion started by: o51974
2 Replies

10. UNIX for Dummies Questions & Answers

Cannot label disk when partitions are in use as described

:confused: Hello, In my Solaris system, I want to resize my mounted home directory slice. 1.I unmount the slice, #umount /export/home 2.Resize the directory #format>partition> 3.#format>label 4.#format>Cannot label disk when partitions are in use as described. So, How can label ? Thanks (2 Replies)
Discussion started by: XNOR
2 Replies
Login or Register to Ask a Question