On Thu, Jan 30, 2014 at 1:23 PM, Anton Aylward
On 01/30/2014 01:12 PM, Greg Freemyer wrote:
A file carver, such as foremost, testdisk, photrec works by scanning all sectors looking for recognizable file headers.
Once they find that, they do a linear scan of the drive in an effort to find the end of the file. In many cases, they just guess.
What about a disk with a LVM partition? Suppose the partition table gets destroyed ... Isn't the information about the LVM 'portable' and well contained? Can't it say "There's the file system ..."
I don't think so. If you set /dev/sda1 and /sdb2 to be the physical members of a LVM setup, then LVM maintains the location of the logical volumes it creates relative to the start of sda1 and sdb2. If you lose your partition table, LVM will no longer know where sda1 and sdb2 are, so it's relative information is useless. Now, recreating partition tables is not necessarily hard. I've used gpart a couple times to do that with great success. Greg -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org