Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!1.eu.feeder.erje.net!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail From: Tim Watts Newsgroups: comp.os.linux.misc Subject: Re: Recovering an EXT3 FS - hopeless if inode list is overwritten? Date: Fri, 22 May 2015 09:24:56 +0100 Lines: 21 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-Trace: individual.net l6YqoJHK7oDpZMM+AnC6SQWfTNjli2e836D8qYWQOs9lO9LPw6 X-Orig-Path: squidward.dionic.net!not-for-mail Cancel-Lock: sha1:tyWlRl+fFIbX3HyjcIkidB2Ph9U= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 In-Reply-To: Xref: csiph.com comp.os.linux.misc:14836 On 22/05/15 09:05, Charles T. Smith wrote: > I'm trying to recover an ext3 fs I blew away by dd(1)-ing to a flash > drive - but the device name got changed under me :( > > When I look at the alternate superblocks, it looks like the inode list > starts at the 11th block of the fs... > > Is it safe to say that if I overwrite the beginning of a very large > filesystem, there's no way to recover any of the data, because the inodes > will likely all be gone? > > Or, is there also a redundant copy of the inode list somewhere? I think the inode table only has one copy. There are multiple superblocks at intervals and recovering a copy of one of those might be worth a try - but I suspect you've blown the inode table away: https://ext4.wiki.kernel.org/index.php/Ext4_Disk_Layout#Layout