dd_rescue for copying hard drives with bad sectors
I don't know if this has been covered before, but knoppix includes the program dd_rescue which is really a brilliant program for copying/imaging hard drives with bad sectors.
dd will give you lots of trouble when it encounters bad sectors, usually truncating the output or exiting when it gets a read error.
dd_rescue is much more forgiving.
"dd_rescue" without parameters will give you a list of command line parameters. Note that the command line syntax is much different from dd.
For example, "dd_rescue /dev/hda /dev/null" will copy from /dev/hda to /dev/null . I like to use this as a read test to see if an entire hard drive can be read.
I had a failing hard drive whose LBA sector 0 was completely unreadable. dd wouldn't even want to look at it. With dd_rescue I was able to get most of the good data off of this drive. Interestingly, knoppix 5.1 wouldn't even give me a /dev/hda in the device directory as it couldn't read the partition table in LBA 0 and kept retrying ad infinitum. I tried knoppix 3.9 and knoppix 6.0.1 and they would give me a /dev/hda even if LBA 0 was bad.
What happens when drive stop responding?
I am using Knoppix 6.2.1 and dd_rescue to try and recover files from a failing hard drive with bad sectors. The drive has one NTFS partition and is in an external USB enclosure. In Windows XP, I can access the drive until a bad sector is read and then the drive becomes unresponsive. It is like the drive was disconnected from the USB port.
So running Knoppix 6.2.1, I was hoping to recover any files that are still readable with dd_rescue. However, once dd_rescue reads a bad sector, the hard drive appears to become unresponsive (unmounted?) and dd_rescue starts scrolling a lot of errors. I have allowed dd_rescue to run for well over an hour scrolling errors. Should I allow dd_rescue to complete or is there some way of forcing the hard drive from being unmounted?
Re: What happens when drive stop responding?
Quote:
Originally Posted by mifronte
I am using Knoppix 6.2.1 and dd_rescue to try and recover files from a failing hard drive with bad sectors. The drive has one NTFS partition and is in an external USB enclosure. In Windows XP, I can access the drive until a bad sector is read and then the drive becomes unresponsive. It is like the drive was disconnected from the USB port.
So running Knoppix 6.2.1, I was hoping to recover any files that are still readable with dd_rescue. However, once dd_rescue reads a bad sector, the hard drive appears to become unresponsive (unmounted?) and dd_rescue starts scrolling a lot of errors. I have allowed dd_rescue to run for well over an hour scrolling errors. Should I allow dd_rescue to complete or is there some way of forcing the hard drive from being unmounted?
It sounds to me like a pretty severe situation; I've been advised by others in this forum to use "Hiren's Boot CD" in the past when Knoppix was insufficient. If you search it out on the web you can download it (the best place to get it, back when I needed it, was a Thai server) and there are a LOT of great tools on there. I ended up using a version of Microsoft's disk scanning utility "chkdsk" (no additional license required) that worked a lot better than the one in XP to recover from errors on my NTFS partition. Look for other posts within these fora for more details, or elsewhere on the web.
Krishna :D
What happens when drive stops responding?
Often times, a really bad drive will stop responding. You can abort the dd_rescue program with a CTRL+C. Sometimes I will attempt to skip over a really bad area by aborting and then retrying with the skip option. Can't remember the exact syntax off the top of my head but running dd_rescue with no parameters should tell you.
You can also install GNU ddrescue; using the synaptic package manager from the knoppix GUI which is a dd_rescue like program (but spelled differently).
The GNU ddrescue program will use a log file and skip over LARGE bad areas on the drive automatically, then come back later and try to fill in the gaps. Works really well and can often recover more than dd_rescue which is geared to make a single pass. However, nothing can recover from a drive that is really stuffed up...