Recovering a Split BiggieFile from a MondoRescue Backup



Once upon a time I wrote of manually extracting a file from a mondorescue backup. Sometimes it’s just easier to do that, than have mondorescue go through 30 some cds or dvds just to find one file. (Not to mention the fact that the iso’s aren’t burned to disc but are just stored on a usb HD.) So, I’ve just had the opportunity to try to restore one of the “biggiefiles”. Mondoarchive attempts to split huge files up into smaller slices for archiving. The size is something that I think is configurable, but I haven’t made any changes from the default.


The first trick is figuring out which set of slice-0000105-0000.dat files to hunt for. Find the list of biggiefiles (usually in the archives folder called biggiefiles.txt) grep the file looking for your filename, but we will need the line number of the file. In my case I did `grep -n myfilename biggiefiles.txt` and found that the file I was looking for was at line 106.

So, I started looking and found that the slice-0000106-0000.dat file reported a different filename when I used head to read the beginning of it. So, I looked at slice-0000105-0000.dat…. aha! Our line 1 in biggiefile.txt get’s to be slice-0000000-0000.dat So we’ll always be one number off from the line number.

Okay – so in my case there were about 17 slices… ranging from slice-0000106-0000.dat to slice-0000106-0017.dat I should mention that many of these slices are bz2 compressed – so the first step is to uncompress them all bunzip2 *bz2 in the folder I was using as a temp folder for this worked.

Next, I just tried cat’ting them all together `cat slice*.dat >all_files.dat` But the resulting file was read as corrupt (I was restoring an access database. So, after a bit of looking at the mondo-archive code…. I tried something a bit different. I renamed the first slice (ending in 0000.dat) to something outside of our slice- count sequence -so I just called it outside.dat and then cat’ted the rest of them together using the same command as above. Why ? The 0000.dat file apparently is written as a header with just the filename and perhaps other information that mondoarchive uses (size?) I really don’t know what else, but I had noticed that the header on the 0001.dat was similar to the header on my real .mdb files that were floating around.

Anyway – I’m making a note of it here in case I need it again. Probably the best thing I can suggest to start with is to create a folder to work on these files outside of your backup structure. And by all means COPY instead of move the files over into it.

Related Posts

Blog Traffic Exchange Related Posts
  • "rm -f *" undelete I really ought to find a way to alias "rm -f *" to "rm -i" IF the time is between 1 AM and 7 AM.... Last night I was working late (2:30AM or so when this happened). I had just made a few "refinements" to some of my audio streaming......
  • Esbot and Zotob updates.... Wednesday afternoon and Esbot is up to revision .B, Zotob is up to G according to Sarc (Symantec antivirus research). They have appropriate removal tools and details on affected systems there. Meanwhile the Sans institute (incidents.org) has a rundown of the latest in todays handlers diary. They also explain why......
  • Sleuthkit - windows and linux file recovery http://www.sleuthkit.org/ Sluethkit... is a collection of tools for forensic analysis of a system. Usually it's something that would be done when you've had a suspected rootkit on the system and you boot to another operating system with sluethkit installed (maybe livecd/etc.) and want to try to analyze and hunt for......
Blog Traffic Exchange Related Websites
  • Solidifying WP Security Designed with PHP, and powered by mySQL directories, WordPress is used by an amazing 8.5% of all websites. Web delivered spyware and web page hacking are becoming progressively more common. With such a lot of web content using WordPress as a CMS, any security weaknesses in the CMS structure or......
  • FTP And Other File Transfer Tools In Web Hosting Anything related to the Internet or computers is bound to introduce technical issues pretty soon. One of the earliest that novice web site owners encounter is FTP, which is an acronym for File Transfer Protocol. Seeing it spelled out, it's easy to see why those in the know quickly move......
  • How to Transfer Large Files Electronically How to Send Large Files Sending large files still remains a problem for many professionals today. Of course there are many options by which to get oversized files across the Internet, but the smart move is to put focus on the most effective way to get the job done efficiently.......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site