Mac Backup Notes - Revision history

AshleySueMas: /* troubleshooting */

2014-02-21T20:00:05Z

troubleshooting

Liliana at 18:14, 17 July 2013

2013-07-17T18:14:00Z

Tanvi.garg at 23:36, 30 November 2012

2012-11-30T23:36:02Z

Bkoenig at 23:35, 27 November 2012

2012-11-27T23:35:31Z

Paulm at 22:05, 16 November 2012

2012-11-16T22:05:52Z

Paulm at 22:02, 16 November 2012

2012-11-16T22:02:32Z

Paulm at 22:01, 16 November 2012

2012-11-16T22:01:30Z

Paulm at 21:34, 28 September 2012

2012-09-28T21:34:39Z

Paulm at 18:53, 14 September 2012

2012-09-14T18:53:06Z

Paulm at 00:01, 5 September 2012

2012-09-05T00:01:11Z

← Older revision		Revision as of 20:00, 21 February 2014
Line 67:		Line 67:

	[[Category: Tech support]]		[[Category: Tech support]]
−	[[Category:Macintosh]]	+	[[Category:Macintosh Archive]]

← Older revision		Revision as of 18:14, 17 July 2013
Line 67:		Line 67:

	[[Category: Tech support]]		[[Category: Tech support]]
		+	[[Category:Macintosh]]

← Older revision		Revision as of 23:36, 30 November 2012
Line 67:		Line 67:

	[[Category: Tech support]]		[[Category: Tech support]]
−	~~[[Category: Tech Support Procedures]]~~

← Older revision		Revision as of 23:35, 27 November 2012
Line 67:		Line 67:

	[[Category: Tech support]]		[[Category: Tech support]]
		+	[[Category: Tech Support Procedures]]

@@ Line 3: / Line 3: @@
 https://viaforensics.com/computer-forensics/howto-mount-hfs-image-partition-linux.html
-First make a disk image using dd3cd (more reliabe than dd)
+First make a disk image using <code>dd3cd</code> (more reliabe than dd)
   sudo dc3dd if=/dev/sdc1 of=[ticket_nuber].dd
-or ddrescue (slower, more reliable still*)
+or <code>ddrescue</code> (slower, more reliable still, can cope with disk errors*)
-sudo ddrescue /dev/sdc1 [ticket_nuber].dd [ticket_nuber].log
+ sudo ddrescue /dev/sdc1 [ticket_nuber].dd [ticket_nuber].log
 Substitute the correct path and ticket number as appropriate.
-Next we need to find the start of the partition using mmls from sleuthkit (it has an standard apt package)
+Next we need to find the start of the partition using <code>mmls</code> from sleuthkit (it has an standard apt package)
   mmls [ticketnumber].dd

@@ Line 6: / Line 6: @@
   sudo dc3dd if=/dev/sdc1 of=[ticket_nuber].dd
-or ddrescue (slower, more reliable still)
+or ddrescue (slower, more reliable still*)
 sudo ddrescue /dev/sdc1 [ticket_nuber].dd [ticket_nuber].log
@@ Line 64: / Line 64: @@
 (see <code>mmls -t list</code> for full list of supported types)
+* it can sometimes take days if a disk is really bad but it will get the data off.
 [[Category: Tech support]]

← Older revision		Revision as of 00:01, 5 September 2012
Line 33:		Line 33:


		+	In this example the partition is called Apple_HFS.
		+
		+
		+	The value we are interested in is the third column that tells us the Start of the partition in sectors. 0000001544 i.e. 1544 sectors. The disk has 512 byte sectors (this is standard) so multipy the number of sectors by 512 to get the start of the partition in bytes, known as the offset. In this case offset=790528

		+	Now we can mount the disk image/partition via loopback:
		+
		+	sudo mount -t hfsplus -o ro,loop,offset=790528 28852.dd mnt/
		+
		+	(I created a mnt directory in my home directory for convenience)
		+
		+	and then backup as normal.
		+
		+	===troubleshooting===
	on newer macs with a GPT file system first this may fail with error		on newer macs with a GPT file system first this may fail with error

Line 47:		Line 60:


−
−	~~In this example the partition is called Apple_HFS.~~
−
−
−	The value we are interested in is the third column that tells us the Start of the partition in sectors. 0000001544 i.e. 1544 sectors. The disk has 512 byte sectors (this is standard) so multipy the number of sectors by 512 to get the start of the partition in bytes, known as the offset. In this case offset=790528
−
−	~~Now we can mount the disk image/partition via loopback:~~
−
−	~~sudo mount -t hfsplus -o ro,loop,offset=790528 28852.dd mnt/~~
−
−	~~(I created a mnt directory in my home directory for convenience)~~
−
−	~~and then backup as normal.~~

	[[Category: Tech support]]		[[Category: Tech support]]