[opensuse] hosed my MBR

2007-04-13 Thread Joe Zien 

Hosed my MBR

I tried to restore the MBR on my tower with a saved backup MBR with dd 
if=/dev/hda etc...
which I created on my laptop. Dumb Dumb Dumb.I though that they were 
both win XP on the 1st

drive, it should work. Was I stupid to try this. Now I'm in a fine mess.
I had 11 partitions on my hda drive and hda6 - 11 were removed from /dev

Now this is what I got running fdisk -l :

Warning: ignoring extra data in partition table 5
Warning: ignoring extra data in partition table 5
Warning: ignoring extra data in partition table 5
Warning: invalid flag 0x434b of partition table 5 will be corrected by 
w(rite)


Disk /dev/hda: 80.0 GB, 80026361856 bytes
255 heads, 63 sectors/track, 9729 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

  Device Boot  Start End  Blocks   Id  System
/dev/hda1   *   11657133098217  HPFS/NTFS
/dev/hda2   18864   19457 4770360   12  Compaq diagnostics
Partition 2 does not end on cylinder boundary.
/dev/hda33258611622959720c  W95 FAT32 (LBA)
Partition 3 does not end on cylinder boundary.
/dev/hda46116   18864   1023926405  Extended
Partition 4 does not end on cylinder boundary.
/dev/hda5   ?   74338  184463   884580633   79  Unknown

Partition table entries are not in disk order

Disk /dev/hdb: 80.0 GB, 80026361856 bytes
255 heads, 63 sectors/track, 9729 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

  Device Boot  Start End  Blocks   Id  System
/dev/hdb1   *   1 980 7871818+  83  Linux
/dev/hdb2 9811937 7687102+  83  Linux
/dev/hdb31938972962589240f  W95 Ext'd (LBA)
/dev/hdb519382065 1028128+  82  Linux swap / Solaris
/dev/hdb62066410516386268+  83  Linux
/dev/hdb74106601715358108+  83  Linux
/dev/hdb86018741311213338+  83  Linux
/dev/hdb974148203 6345643+  83  Linux
/dev/hdb10   82048792 473   83  Linux
/dev/hdb11   87939729 7526421   83  Linux
++

The hda* drive shows some of the partitions from my laptop.
My hdb* drive has all my backup linux so no loss.

I could repartition the a drive but gparted doesn't see the whole a 
drive and neither does

PartionMagic.

I reinstalled grub in the MBR of hda and I cann boot all my linux on the 
hdb drive,

SuSE 10.2 boots up on /dev/hdb11 shown above with "fdisk -l"

I tried using a boot floppy from win 98SE using "fdisk /MBR", that 
didn't work.


1. If I reinstall XP would that restore the MBR?
2. Would "fixmbr" work from the XP rescue disk?
3. If I interchanged the hda and hdb drives, would the new hda (hdb) 
have a good MBR?

4. Would the hdb (hda) partitions be visible?

I really need some help on how to re-format the a drive.

This problem slowed down my computer,
What a mess

jozien
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [opensuse] hosed my MBR

2007-04-13 Thread Sunny 

On 4/13/07, Greg Freemyer <[EMAIL PROTECTED]> wrote:

On 4/13/07, Joe Zien <[EMAIL PROTECTED]> wrote:
> Hosed my MBR

Sounds like you already restored the boot code and all you need to
restore is the partition table.

I would use gpart to try that.  Be sure to read the man page and save
away a copy of your current MBR.

Good Luck
Greg


DiskTest is good free linux software for partition table recovery. You
can use it with any live distro (like knoppix). It's included with
INSERT linux as well (50M live distro). Also, this software is part of
Universal Boot CD.



--
Svetoslav Milenov (Sunny)

Even the most advanced equipment in the hands of the ignorant is just
a pile of scrap.
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [opensuse] hosed my MBR

2007-04-13 Thread Greg Freemyer 

On 4/13/07, Joe Zien <[EMAIL PROTECTED]> wrote:

Hosed my MBR


Sounds like you already restored the boot code and all you need to
restore is the partition table.

I would use gpart to try that.  Be sure to read the man page and save
away a copy of your current MBR.

Good Luck
Greg
--
Greg Freemyer
The Norcross Group
Forensics for the 21st Century
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [opensuse] hosed my MBR

2007-04-13 Thread Carlos E. R. 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


The Friday 2007-04-13 at 14:27 -0400, Joe Zien wrote:

> if=/dev/hda etc...
> which I created on my laptop. Dumb Dumb Dumb.I though that they were both win
> XP on the 1st
> drive, it should work. Was I stupid to try this. Now I'm in a fine mess.
> I had 11 partitions on my hda drive and hda6 - 11 were removed from /dev

You overwrote the partition table.

You can try to guess what the partitions were using gpart, or create a 
fully new partition table with fdisk (linux) and loose all data there. You 
can also recreate the partition table if you have a printed copy.

- -- 
Cheers,
   Carlos E. R.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFGIBIKtTMYHG2NR9URAoBzAJ9P4qJ5pmRgenywR0VO1OcKqMir2wCfTZSx
Qnx7Utd159WBWHdXcYatHVI=
=VzJt
-END PGP SIGNATURE-

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [opensuse] hosed my MBR

2007-04-13 Thread Joe Zien 

Greg Freemyer wrote:

On 4/13/07, Joe Zien <[EMAIL PROTECTED]> wrote:

Hosed my MBR


Sounds like you already restored the boot code and all you need to
restore is the partition table.

I would use gpart to try that.  Be sure to read the man page and save
away a copy of your current MBR.

Good Luck
Greg

Below is a copy of my partation table that is 3 months old:

Disk /dev/hda: /dev/hdb 80.0 GB, 8002631856 bytes
255 heads, 63 sectors/track, 9729 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

  Device  BootStartEndBlocksIdSystem
/dev/hda111657  13309821  7HPFS/NTFS
/dev/hda2 16582783   9044595  cW95 FAT32 
(LBA)

/dev/hda3 27844186  11269597  83Linux
/dev/hda4 41879729  44524147  fW95 Ext'd 
(LBA)
/dev/hda5 41874252530113  82Linux 
swap / Solaris

/dev/hda6 42535671  11398086  83Linux
/dev/hda7 56725738538146  83Linux
/dev/hda8 57395805538146  83Linux
/dev/hda9 58065934   1036161   82Linux 
swap / Solaris

/dev/hda10 59356452   4160803   83Linux
/dev/hda11 64537060   4883728  83Linux
/dev/hda12 70617668   4883728  83Linux
/dev/hda13 76698443   6225156  83Linux
/dev/hda14 84449729  1032976383Linux

I know that hda1 - hda10 have not changed, hda11 - 14 were changed,
how will that effect the table?

Will changing the table effect my hdb drive, the table is correct for hdb.
I installed grub in hda and all my linux's work fine. Don't want to mess 
up the hdb drive.

Can I just change the table for the hda drive?
My main concern is to boot the hda drive so I can re-partion the hda 
drive and boot XP,

I only use XP for a few programs that are not available in linux

jozien
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [opensuse] hosed my MBR

2007-04-14 Thread Carlos E. R. 
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


The Saturday 2007-04-14 at 01:00 -0400, Joe Zien wrote:

> Below is a copy of my partation table that is 3 months old:
> 
...

> 
> I know that hda1 - hda10 have not changed, hda11 - 14 were changed,
> how will that effect the table?

Just use gpart as already advised to guess the partition table. You can 
use the table you posted to validate the data gpart will give you, at 
least for the first ten partitions. The other four, with luck, you will 
have to accept the guesstimates.

- -- 
Cheers,
   Carlos E. R.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFGIMa8tTMYHG2NR9URAlrPAJ9JidYAcX3+dMF/dv1zoHJRxenPWQCfd0ZK
ZW8GrMyI9PPLE1oYVgVVu7U=
=6COA
-END PGP SIGNATURE-

-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]