Mounting Assistance
I have a 2TB WesternDigital NAS I need to examine. I imaged the NAS to a 2TB hard drive as a single .e01 file. The MBR reports 4 partitions (see below). I have examined one before but it was a 1TB model so disk size was not an issue. The largest drive I have is 2TB. For the 1TB model I imaged the entire drive to a single dd file using dc3dd. I then used kpartx to create loop devices for each partition. There were 4 partitions total, a boot partition, a linux OS, swap space, and the 4th was a data area (ntfs). Kpartx ignored the fact that each partition had be flagged as a RAID. On a side note I believe the RAID flag is set to prevent users messing with the device. Who has a single-disk RAID? With the loop devices in place I was able to mount them and examine the logical files with out any further heartache. Come to find out each partition stood on its own and had a viable file system. Not really a RAID then is it?. The problem I am having with the 2TB NAS is the .e01 format. When I used xmount to mount the .e01 it creates a dd image at the given mount point. I am unable to use kpart or mount to create the loop devices to mount the dd image created by xmount. ewfmount is choking and not mounting the .e01 at all. I have not been able to mount the 2TB drive from the NAS (the original) but it looks very similar to the 1TB model I've examined before. Four partitions with one that is clearly the data area (xfs). Is there a way to image just the data partition and then mount it? I am looking for a linux solution for this. Any thoughts would be helpful. Thanks.
Below is the output from mmls and fdisk. The output from parted -s was a little easier to read.
mmls
========================================================================
DOS Partition Table
Offset Sector 0
Units are in 512-byte sectors
Slot Start End Length Description
00 Meta 0000000000 0000000000 0000000001 Primary Table (#0)
01 —– 0000000000 0000064259 0000064260 Unallocated
02 0000 0000064260 0003984119 0003919860 Linux RAID (0xFD)
03 0001 0003984120 0004498199 0000514080 Linux RAID (0xFD)
04 0002 0004498200 0006474194 0001975995 Linux RAID (0xFD)
05 0003 0006474195 3907024064 3900549870 Linux RAID (0xFD)
06 —– 3907024065 3907029167 0000005103 Unallocated
fdisk
=============================================================================
Disk /dev/sdi 2000.4 GB, 2000398934016 bytes
255 heads, 63 sectors/track, 243201 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Sector size (logical/physical) 512 bytes / 512 bytes
I/O size (minimum/optimal) 512 bytes / 512 bytes
Disk identifier 0x0001cf00
Device Boot Start End Blocks Id System
/dev/sdi1 5 248 1959930 fd Linux raid autodetect
/dev/sdi2 249 280 257040 fd Linux raid autodetect
/dev/sdi3 281 403 987997+ fd Linux raid autodetect
/dev/sdi4 404 243201 1950274935 fd Linux raid autodetect
parted
===============================================================
Model ATA WDC WD20EADS-00R (scsi)
Disk /dev/sdi 2000GB
Sector size (logical/physical) 512B/512B
Partition Table msdos
Number Start End Size Type File system Flags
1 32.9MB 2040MB 2007MB primary ext3 raid
2 2040MB 2303MB 263MB primary linux-swap(v1) raid
3 2303MB 3315MB 1012MB primary ext3 raid
4 3315MB 2000GB 1997GB primary xfs raid