Many thanks Robert,
Seems to have done the job for me.
--------------------------------------
GNU ddrescue 1.30
About to copy 395370 MBytes from '/dev/sdc' to 'img'
Starting positions: infile = 0 B, outfile = 0 B
Copy block size: 128 sectors Initial skip size: 119_296 sectors
Sector size: 512 Bytes
Press Ctrl-C to interrupt
Initial status (read from mapfile)
(sizes limited to domain from 0 B to 1_892_051 MiB of 1_953_514_584 KiB)
rescued: 224882 MB, tried: 9495 kB, bad-sector: 1536 B, bad areas: 3
Current status
Data preview:
150ED50000 7B CB 3A EE DF 48 00 7A C9 F6 D0 CA 32 97 AF F2
{.:..H.z....2...
150ED50010 E5 02 FC 27 A5 D2 2F 0E 45 32 F6 A6 75 67 29 1A
...'../.E2..ug).
150ED50020 CF 2C A0 51 D4 33 65 A6 DA C7 6C 4C 3A DC A8 35
.,.Q.3e...lL:..5
150ED50030 98 02 25 75 5B 2F E3 28 51 C2 4D 38 79 5E 03 97
..%u[/.(Q.M8y^..
150ED50040 08 D7 75 04 36 89 11 35 F8 0A A5 C6 EE 5D 5F E7
..u.6..5.....]_.
150ED50050 D3 BF E3 07 FE 74 CD 58 BA 52 EA 69 73 3E 2C 0D
.....t.X.R.is>,.
150ED50060 8B 76 9C 7D AF A5 F3 41 7F A5 FA 7A 85 83 9B 9C
.v.}...A...z....
150ED50070 AC 1E 89 8E 83 7A D3 0D 37 84 74 BE C9 7A 6B B8
.....z..7.t..zk.
ipos: 90443 MB, non-trimmed: 9494 kB, current rate: 13107 B/s
opos: 90443 MB, non-scraped: 0 B, average rate: 13935 B/s
non-tried: 170465 MB, bad-sector: 1536 B, error rate: 0 B/s
rescued: 224895 MB, bad areas: 3, run time: 15m 50s
pct rescued: 56.88%, read errors: 0, remaining time: 140d 10h
time since last successful read: 0s
Copying non-tried blocks... Pass 3 (forwards)
On 30/1/26 20:04, Robert Backhaus wrote:
Re-do the ntfsbitmap command, but do it on /dev/sdc use the offset
argument to tell it where the partition begins, using the numbers from
fdisk. If the partition you want starts at sector 1000, that would be
(if using the bash shell)
ntfsbitmap -i $((1000 * 512)) /dev/sdc domain_mapfile
That will allow you to recover the rest of the partition into your
existing image file. It will also ensure that the partition table is
recovered, too.
On Fri, 30 Jan 2026 at 19:54, Paul L Daniels <[email protected]> wrote:
I don't know what I was thinking but a week ago I started a
recovery on
the whole /dev/sdc (NTFS windows partition on /dev/sdc3) ( saved to
'img' and logged to sdc.log )
I've got *most* of the data I want already but today I realised my
mistake and instead built a recovery map using;
ddru_ntfsbitmap /dev/sdc3 domain_mapfile
Is there a way of merging what I've already recovered (~95%) in the
large /dev/sdc img+log or am I just better off waiting it out
again for
the new NTFS specific mapfile to be recovered?
I agree, it was a bad oversight.
Regards Paul.
--
Paul L Daniels - http://pldaniels.com
A.B.N. 19 500 721 806
--
Paul L Daniels -http://pldaniels.com
A.B.N. 19 500 721 806
