Re: Recovering forensic data from a failed boot

2012-01-30 Thread Joe Zeff
On 01/30/2012 04:27 PM, Michael Hennebry wrote: IIRC the BIOS will try to boot from the first disc it finds. If said disc is not bootable, it will complain without trying elsewhere. The messages aren't from the BIOS, but come up during boot. If nothing else, I don't know of any BIOS that woul

Re: Recovering forensic data from a failed boot

2012-01-30 Thread Michael Hennebry
On Mon, 30 Jan 2012, Joe Zeff wrote: I do, however, have a little more data: ever since the "upgrade," my laptop's been unable to mount CD/DVD discs although it never had any trouble under F14. If I put a DVD into the drive and try to reboot to a 3.x kernel, instead of getting error messages

Re: Recovering forensic data from a failed boot

2012-01-30 Thread Joe Zeff
On 01/30/2012 01:38 PM, jdow wrote: First one must take a dd level record of the infected disk(s). The disk isn't infected. It just won't boot into any 3.x kernel, but boots fine with the last kernel from F14. I do, however, have a little more data: ever since the "upgrade," my laptop's be

Re: Recovering forensic data from a failed boot

2012-01-30 Thread jdow
On 2012/01/30 13:21, Joe Zeff wrote: On 01/08/2012 11:28 AM, Kernel Guardian wrote: Maybe could help to boot into runlevel 3, and turn on debug on in systemd. Or try to boot into single user. I've had too many other things going on to deal with this for quite some time. However, I did learn vi

Re: Recovering forensic data from a failed boot

2012-01-30 Thread Joe Zeff
On 01/08/2012 11:28 AM, Kernel Guardian wrote: Maybe could help to boot into runlevel 3, and turn on debug on in systemd. Or try to boot into single user. I've had too many other things going on to deal with this for quite some time. However, I did learn via fedoraforums that there are severa

Re: Recovering forensic data from a failed boot

2012-01-08 Thread Joe Zeff
On 01/08/2012 11:28 AM, Kernel Guardian wrote: Maybe could help to boot into runlevel 3, and turn on debug on in systemd. Or try to boot into single user. Thank you. I hadn't known about debug (I presume I could do that while running the old kernel and then try booting the newer one?) Single

Recovering forensic data from a failed boot

2012-01-07 Thread Joe Zeff
As I may have mentioned before, my laptop runs F16 but will only boot properly from my last F14 kernel. All attempts to boot from a 3.X kernel fail before gdm starts. Are there any logs that survive after I reboot into the old 2.X kernel so that I can see just what's happening? I presume tha