我会尽力尽可能准确地描述我的情况。
总而言之：
SATA 2To HDD 有 2 个分区失败
拒绝启动
通过适配器从 USB 插入并启动。
磁盘显示为
/dev/sde，有时会显示分区
/dev/sde1, /dev/sde2。我只关心
/dev/sde2，它很大 (1.8To)无法安装它们
“foremost”未能提取任何内容
尝试了两次 ddrescue，但不太成功（2To 中恢复了 300Gb）
我无法理解的奇怪错误：
ddrescue: /dev/sde: Unaligned read error. Is sector size correct?无法挂载img文件
彻底迷失了……
带日志的较长版本：
我有一个 2To HDD，有 2 个 NTFS 分区：
Disk /dev/sde: 1,82 TiB, 2000398934016 bytes, 3907029168 sectors
Disk model: 001-1CH164
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0xf0e9674b
Device Boot Start End Sectors Size Id Type
/dev/sde1 2048 102402047 102400000 48,8G 7 HPFS/NTFS/exFAT
/dev/sde2 102402048 3907024895 3804622848 1,8T 7 HPFS/NTFS/exFAT
我绝对不关心第一个分区，我想要的全部来自第二个分区。
该磁盘位于SATA 端口上。上周它突然失败，我无法在插入磁盘的情况下启动。
我买了一个 SATA -> USB 适配器并成功启动。
磁盘显示为，/dev/sde但无法安装。它只工作过一次，当我尝试复制时失败了。再也不。
我尝试过，foremost因为我在之前失败的驱动器上取得了很大的成功。正如您所猜测的，它不起作用。
我尝试了两次 ddrescue，以下是输出：
% sudo ddrescue -n -b512 /dev/sde /home/quentin/nfs/data/forensic/ntfs_data.img /home/quentin/ntfs/ddrescue_data
GNU ddrescue 1.26
Press Ctrl-C to interrupt
ipos: 1996 GB, non-trimmed: 2928 kB, current rate: 0 B/s
opos: 1996 GB, non-scraped: 0 B, average rate: 1193 kB/s
non-tried: 1984 GB, bad-sector: 0 B, error rate: 771 B/s
rescued: 15587 MB, bad areas: 0, run time: 3h 37m 36s
pct rescued: 0.77%, read errors: 109, remaining time: 133d 11h
time since last successful read: 1m 25s
Copying non-tried blocks... Pass 1 (forwards)
ipos: 15607 MB, non-trimmed: 7823 kB, current rate: 0 B/s
opos: 15607 MB, non-scraped: 0 B, average rate: 1193 kB/s
non-tried: 1984 GB, bad-sector: 0 B, error rate: 771 B/s
rescued: 15587 MB, bad areas: 0, run time: 3h 37m 36s
pct rescued: 0.77%, read errors: 218, remaining time: n/a
time since last successful read: 1m 25s
Copying non-tried blocks... Pass 2 (backwards)
ipos: 25915 MB, non-trimmed: 10327 MB, current rate: 0 B/s
opos: 25915 MB, non-scraped: 0 B, average rate: 1193 kB/s
non-tried: 0 B, bad-sector: 0 B, error rate: 165 MB/s
rescued: 15587 MB, bad areas: 0, run time: 3h 37m 37s
pct rescued: 0.77%, read errors: 157788, remaining time: n/a
time since last successful read: 1m 26s
Copying non-tried blocks... Pass 5 (forwards)
ipos: 15587 MB, non-trimmed: 10327 MB, current rate: 0 B/s
opos: 15587 MB, non-scraped: 0 B, average rate: 1193 kB/s
non-tried: 0 B, bad-sector: 0 B, error rate: 10169 MB/s
rescued: 15587 MB, bad areas: 0, run time: 3h 37m 37s
pct rescued: 0.77%, read errors: 157788, remaining time: n/a
time since last successful read: 1m 26s
Trimming failed blocks... (forwards)
ddrescue: /dev/sde: Unaligned read error. Is sector size correct?
[23:54 quentin@qkzk forensic]% lsa
.rw-rw-r--@ 16G root 19 févr. 21:43 ntfs_data.img
[9:24 quentin@qkzk forensic]% sudo ddrescue -n -b4096 /dev/sde /home/quentin/nfs/data/forensic/ntfs_data.img /home/quentin/ntfs/ddrescue_data
GNU ddrescue 1.26
Press Ctrl-C to interrupt
Initial status (read from mapfile)
rescued: 15587 MB, tried: 10327 MB, bad-sector: 0 B, bad areas: 0
Current status
ipos: 1999 GB, non-trimmed: 10331 MB, current rate: 0 B/s
opos: 1999 GB, non-scraped: 0 B, average rate: 1566 kB/s
non-tried: 1682 GB, bad-sector: 4096 B, error rate: 762 B/s
rescued: 307649 MB, bad areas: 1, run time: 2d 3h 47m
pct rescued: 15.37%, read errors: 126, remaining time: 12d 11h 21m
time since last successful read: 1m 26s
Copying non-tried blocks... Pass 1 (forwards)
ipos: 96555 MB, non-trimmed: 10337 MB, current rate: 0 B/s
opos: 96555 MB, non-scraped: 0 B, average rate: 1566 kB/s
non-tried: 1682 GB, bad-sector: 4096 B, error rate: 762 B/s
rescued: 307649 MB, bad areas: 1, run time: 2d 3h 47m
pct rescued: 15.37%, read errors: 252, remaining time: n/a
time since last successful read: 1m 26s
Copying non-tried blocks... Pass 2 (backwards)
ipos: 353249 MB, non-trimmed: 45605 MB, current rate: 0 B/s
opos: 353249 MB, non-scraped: 0 B, average rate: 1566 kB/s
non-tried: 1647 GB, bad-sector: 4096 B, error rate: 5768 MB/s
rescued: 307649 MB, bad areas: 1, run time: 2d 3h 47m
pct rescued: 15.37%, read errors: 538394, remaining time: n/a
time since last successful read: 1m 28s
Copying non-tried blocks... Pass 5 (forwards)
ddrescue: /dev/sde: Unaligned read error. Is sector size correct?
[19:20 quentin@qkzk forensic]% lsa
.rw-rw-r--@ 319G root 22 févr. 13:13 ntfs_data.img
dmesg 给出了很多我不确定理解的错误。这是一个小摘录：
[264476.032135] blk_update_request: critical target error, dev sde, sector 622305296 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[264481.400606] sd 7:0:0:0: [sde] tag#19 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=5s
[264481.400637] sd 7:0:0:0: [sde] tag#19 Sense Key : Illegal Request [current]
[264481.400644] sd 7:0:0:0: [sde] tag#19 Add. Sense: Invalid field in cdb
[264481.400652] sd 7:0:0:0: [sde] tag#19 CDB: Read(10) 28 00 25 17 a0 10 00 00 08 00
[264481.400657] blk_update_request: critical target error, dev sde, sector 622305296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[264481.400673] Buffer I/O error on dev sde, logical block 77788162, async page read
[264485.351873] sd 7:0:0:0: [sde] tag#16 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=3s
[264485.351902] sd 7:0:0:0: [sde] tag#16 Sense Key : Illegal Request [current]
[264485.351910] sd 7:0:0:0: [sde] tag#16 Add. Sense: Invalid field in cdb
[264485.351917] sd 7:0:0:0: [sde] tag#16 CDB: Read(10) 28 00 25 17 a0 10 00 00 08 00
[264485.351922] blk_update_request: critical target error, dev sde, sector 622305296 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[264485.351937] Buffer I/O error on dev sde, logical block 77788162, async page read
正如你所猜测的，大约有 20 个屏幕出现类似的错误......
因为我真的很困惑，所以我尝试挂载 .img 文件，但没有成功：
[19:18 quentin@qkzk forensic]% sudo losetup -P /dev/loop0 /home/quentin/nfs/data/forensic/ntfs_data.img
[19:19 quentin@qkzk forensic]% ls /dev/loop*
/dev/loop-control /dev/loop0p1 /dev/loop1 /dev/loop3 /dev/loop5 /dev/loop7
/dev/loop0 /dev/loop0p2 /dev/loop2 /dev/loop4 /dev/loop6
[19:19 quentin@qkzk forensic]% sudo mount /dev/loop0p2 /mnt/ntfs_data
Failed to read last sector (3804622846): Invalid argument
HINTS: Either the volume is a RAID/LDM but it wasn't setup yet,
or it was not setup correctly (e.g. by not using mdadm --build ...),
or a wrong device is tried to be mounted,
or the partition table is corrupt (partition is smaller than NTFS),
or the NTFS boot sector is corrupt (NTFS size is not valid).
Failed to mount '/dev/loop0p2': Invalid argument
The device '/dev/loop0p2' doesn't seem to have a valid NTFS.
Maybe the wrong device is used? Or the whole disk instead of a
partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
我尝试了其他方法，也没有成功。
我无法理解 ddrescue 给出的错误消息：
ddrescue: /dev/sde: Unaligned read error. Is sector size correct?
ddrescue 是否已正确完成？我什至都不确定！
接下来我应该做什么？
- 再次运行 ddrescue 吗？
- 尝试从 .img 中删除一些文件？ （如何 ？）
很抱歉给您带来了令人困惑且冗长的消息，但我真的很迷失和震惊。提前致谢，