[aklug] Re: Data recovery

If you have access to a drive and can discover the block size of the
filesystem you should be able to write a script that matches the start
information of a block to magic headers and then reads things that can then
later be verified. Things like the song length. If you really needed to
get it recovered like that it's possible.

On Fri, Mar 7, 2014 at 8:14 AM, Damien Hull <dhull@section9.us> wrote:

> Thanks for the explanation. I thought there might be something going on
> with the file format. Just never new what that was. So, no “undelete” for
> MP3’s.
>
>
> --
> Damien Hull
> Network Engineer
> CCNP
>
> From: Josh Rhoades <kaiden11@gmail.com>
> Date: Thu, 6 Mar 2014 16:30:16 -0900
> To: "Jenkinson, John" <John.Jenkinson@alyeska-pipeline.com>
> Cc: admin <dhull@section9.us>, "aklug@aklug.org" <aklug@aklug.org>
> Subject: Re: [aklug] Re: Data recovery
>
> Seconded on the foremost.
>
> A terrible experience a few years ago demonstrated MP3s pose a problem for
> data carving: the format has "frames," such that two MP3 files can, in
> theory, be concatenated, and be considered a single file without having to
> re-encode.
>
> The result was that a recovery process that was looking for start/end
> patterns in the drive blocks, though mostly successful, ended up with half
> of the songs in a music collection starting with one song and ending with
> another. My friend wasn't super thrilled.
>
>
>
>
>
> On Thu, Mar 6, 2014 at 4:25 PM, Jenkinson, John <
> John.Jenkinson@alyeska-pipeline.com> wrote:
>
>> Foremost is one I use
>>
>>
>>
>> *From:* aklug-bounce@aklug.org [mailto:aklug-bounce@aklug.org] *On
>> Behalf Of *Damien Hull
>> *Sent:* Thursday, March 06, 2014 4:14 PM
>> *To:* aklug@aklug.org
>> *Subject:* [EXTERNAL]: [aklug] Data recovery
>>
>>
>>
>> The recent back and forth about “undelete” made me think about data
>> recovery tools. There are several applications that automate the data
>> carving process. I think they look at file headers and footers. Is there
>> one that recovers MP3’s?
>>
>>
>>
>> It’s been a while, but last time I checked I couldn’t find one.
>>
>>
>>
>>
>>
>> --
>>
>> Damien Hull
>>
>> Network Engineer
>>
>> CCNP
>>
>
>

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Fri Mar 7 14:50:24 2014