Mystery Drives adventure ( #100DaysToOffload Day 16)
So once again i have missed a few day(like 4) . Partly because wow time flies and i suck at keeping a routine and also because someday i just have nothing to write. I try but some days by the time i have the time it's bed time...
Anyways onto today post. In a previous post i found 2 HDD's when cleaning my desk. Today lets see what's on them.
So first i went with the biggest
Once i plugged it in it seemed to have a hard time spinning up but once it did i ran dmesg
[12492.016974] usb 1-5: new high-speed USB device number 5 using xhci_hcd
[12492.165816] usb 1-5: New USB device found, idVendor=04fc, idProduct=0c25, bcdDevice= 1.03
[12492.165818] usb 1-5: New USB device strings: Mfr=2, Product=3, SerialNumber=1
[12492.165819] usb 1-5: Product: USB to Serial-ATA bridge
[12492.165820] usb 1-5: Manufacturer: Sunplus Technology Inc.
[12492.165821] usb 1-5: SerialNumber: SAMSUNG HMS25YJ9EZC24659
[12492.183863] usb-storage 1-5:1.0: USB Mass Storage device detected
[12492.184046] scsi host16: usb-storage 1-5:1.0
[12493.218807] scsi 16:0:0:0: Direct-Access SAMSUNG HM641JI PQ: 0 ANSI: 2
[12493.218931] sd 16:0:0:0: Attached scsi generic sg12 type 0
[12493.219551] sd 16:0:0:0: [sdj] 1250263728 512-byte logical blocks: (640 GB/596 GiB)
[12493.223065] sd 16:0:0:0: [sdj] Write Protect is off
[12493.223068] sd 16:0:0:0: [sdj] Mode Sense: 38 00 00 00
[12493.226057] sd 16:0:0:0: [sdj] No Caching mode page found
[12493.226060] sd 16:0:0:0: [sdj] Assuming drive cache: write through
[12493.271298] sdj: sdj1 sdj2 sdj3
[12493.287066] sd 16:0:0:0: [sdj] Attached SCSI disk
[12495.078929] sd 16:0:0:0: [sdj] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=1s
[12495.078932] sd 16:0:0:0: [sdj] tag#0 Sense Key : Medium Error [current]
[12495.078933] sd 16:0:0:0: [sdj] tag#0 Add. Sense: Unrecovered read error
[12495.078935] sd 16:0:0:0: [sdj] tag#0 CDB: Read(10) 28 00 4a 85 82 a0 00 00 08 00
[12495.078937] blk_update_request: critical medium error, dev sdj, sector 1250263712 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[12497.208218] sd 16:0:0:0: [sdj] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=2s
[12497.208221] sd 16:0:0:0: [sdj] tag#0 Sense Key : Medium Error [current]
[12497.208222] sd 16:0:0:0: [sdj] tag#0 Add. Sense: Unrecovered read error
[12497.208225] sd 16:0:0:0: [sdj] tag#0 CDB: Read(10) 28 00 4a 85 82 a0 00 00 08 00
[12497.208227] blk_update_request: critical medium error, dev sdj, sector 1250263712 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[12497.208230] Buffer I/O error on dev sdj, logical block 156282964, async page read
[12498.162779] BTRFS: device label root devid 1 transid 264523 /dev/sdj3 scanned by udevd (10554)
Oh that does not look good. But it can see a BTRFS filesystem on it so that's a good thing. Not what i was expecting. I assumed it would have an NTFS partition. so what's on this...
➤ sudo mount /dev/sdj3 /mnt/usbtmp
marcg@thebeach:~
➤ ls /mnt/usbtmp/
. bin dev home lib64 opt root sbin sys usr
.. boot etc lib mnt proc run srv tmp var
Ok it has a linux system on it...mine?
marcg@thebeach:~
➤ ls /mnt/usbtmp/home
. .. marcg
Yep mine for sure
marcg@thebeach:~
➤ ls -la /mnt/usbtmp/home/marcg/
total 488
drwx------ 1 marcg users 566 Jun 30 2016 .
drwxr-xr-x 1 root root 10 Dec 27 2015 ..
-rw------- 1 marcg users 359 Apr 15 2016 .bash_history
-rw-r--r-- 1 marcg users 21 Nov 23 2015 .bash_logout
-rw-r--r-- 1 marcg users 57 Nov 23 2015 .bash_profile
-rw-r--r-- 1 marcg users 274 Dec 27 2015 .bashrc
drwx------ 1 marcg users 266 Mar 26 2016 .cache
drwx------ 1 marcg users 330 Jun 20 2016 .config
drwxr-xr-x 1 marcg users 27412 Jul 1 2016 Desktop
-rw-r--r-- 1 marcg users 23 Dec 27 2015 .dmrc
drwxr-xr-x 1 marcg users 56 Jun 26 2016 Documents
drwxr-xr-x 1 marcg users 11810 Jun 27 2016 Downloads
-rw------- 1 marcg users 16 Dec 27 2015 .esd_auth
-rw-r--r-- 1 marcg users 18674 Feb 24 2016 'Essay- Coates.odt'
-rw-r--r-- 1 marcg users 19517 Feb 25 2016 'Essay- Thompson.odt'
drwx------ 1 marcg users 8 Dec 27 2015 .gnome
drwxr-xr-x 1 marcg users 50 Jan 18 2016 .hplip
-rw------- 1 marcg users 16030 Jun 30 2016 .ICEauthority
drwxr-xr-x 1 marcg users 16 Dec 27 2015 .linuxmint
drwxr-xr-x 1 marcg users 10 Dec 27 2015 .local
drwx------ 1 marcg users 34 Dec 27 2015 .mozilla
drwxr-xr-x 1 marcg users 0 Dec 27 2015 Music
drwxrwxr-x 1 marcg users 176 Dec 27 2015 packer-color
drwxr-xr-x 1 marcg users 32 Mar 8 2016 Pictures
drwx------ 1 marcg users 10 Dec 27 2015 .pki
drwxr-xr-x 1 marcg users 0 Dec 27 2015 Public
drwx------ 1 marcg users 54 Dec 27 2015 .ssh
drwxr-xr-x 1 marcg users 0 Dec 27 2015 Templates
drwxr-xr-x 1 marcg users 0 Dec 27 2015 Videos
-rw------- 1 marcg users 54 Jun 30 2016 .Xauthority
-rw------- 1 marcg users 25576 Jul 1 2016 .xsession-errors
-rw------- 1 marcg users 383067 Jun 30 2016 .xsession-errors.old
From 2015-2016 wow i'll have to try and dump what i can from it. I suspect that the above errors will prevent a full dump/exploration but i'll see what i can get.
Alright what's on that other drive.
mount: /mnt/usbtmp2: wrong fs type, bad option, bad superblock on /dev/sdk1, missing codepage or helper program, or other error.
Well that's not good. Oh but right i did not install/enable anything NTFS/FAT related. So after installing ntfs-3g and rebuilding my kernel with ntfs support i tried again
marcg@thebeach:~
➤ sudo mount /dev/sdj1 /mnt/usbtmp/
NTFS signature is missing.
Failed to mount '/dev/sdj1': Invalid argument
The device '/dev/sdj1' doesn't seem to have a valid NTFS.
Maybe the wrong device is used? Or the whole disk instead of a
partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?
Well not good. Gparted still reports it as unknown type. So i suspect one of two things. Either it's corrupted or it's encrypted using VeraCrypt(Or TrueCrypt) but i'm pretty sure i've seen Gparted detect those before... So for now it's content(whatever shape it's in) will remain a mystery. I may try some more to figure out what's on this bu for now...
That is all for today.
Until next time Stay Safe!!
Until next time. Stay safe!