Limit in findNTFS? (~47515 files)

  • Thread starter Thread starter Stephen H. Fischer
  • Start date Start date
S

Stephen H. Fischer

Hi,

I am trying to get some files from near the end of the last partition (of 4)
on
my Firewire Maxtor 200 Gig Drive.

I seem to be running into a limit.

The directory that I want is about 58830 in.

Findpart findNTFS 2 18596 0 1 Qdirs.txt dirs
Stops about 47515.

Directories: 1891
Files: 47515
Trees: 23
Adjusted: 39205
Exe/dll files: 1112
Exe/dll files signature: 1108
Not referenced files: 21
Cluster KB: 4
MFT record used: None
Listed files MB: 16906

--------------------------------------------------
The other way I am looking at the problem is what in the MBR is wrong.

First problem sign was request to run ChkDSK which I ran.

The first three partitions are readable by the system but the last one is
not.
--------------------------------------------------
Findpart, version 4.43 - for Windows 95/98/ME/NT/2000/XP.
Copyright Svend Olaf Mikkelsen, 1999-2004.

OS: Windows 5.1.2600 Service Pack 1

Disk: 2 Cylinders: 24792 Heads: 255 Sectors: 63 MB: 194474

--PCyl N ID -----Rel -----Num ---MB --Start CHS- ---End CHS-- BS CHS
0 - 07 63 99586872 48626 0 1 1 6198 254 63 B OK
0 - 07 99586935 99570870 48618 6199 0 1 12396 254 63 B OK
0 - 07199157805 99586935 48626 12397 0 1 18595 254 63 B OK
0 - 07298744740 99538740 48602 18596 0 1 24791 254 63 B OK

Partitions according to partition tables on second harddisk:

--PCyl N ID -----Rel -----Num ---MB --Start CHS- ---End CHS-- BS CHS
0 1*07 63 99586872 48626 0 1 1 6198*254 63 OK OK
0 2 07 99586935 99570870 48618 6199* 0 1 12396*254 63 OK OK
0 3 07199157805 99586935 48626 12397* 0 1 18595*254 63 OK OK
0 4 07298744740 99538740 48602 18596* 0 1 24791*254 63 OK OK

--------------------------------------------------

Partition Magic 8 complained about 1H, 1S.

I corrected the heads and sector numbers on the last two partitions with
DskProbe.

PM8 still no go, it gives a 1507 error. (Bad file record signature)

ChkDsk gives: Unable to determine volume version and state.
--------------------------------------------------

0x00000000: 33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C
[3+Ä-+.|vP.P.n+.|]
0x00000010: BF 1B 06 50 57 B9 E5 01 F3 A4 CB BE BE 07 B1 04
[+..PW¦s.=ñ-++.¦.]
0x00000020: 38 2C 7C 09 75 15 83 C6 10 E2 F5 CD 18 8B 14 8B
[8,|.u.â¦.G)-.ï.ï]
0x00000030: EE 83 C6 10 49 74 16 38 2C 74 F6 BE 10 07 4E AC
[eâ¦.It.8,t÷+..N¼]
0x00000040: 3C 00 74 FA BB 07 00 B4 0E CD 10 EB F2 89 46 25
[<.t·+..¦.-.d=ëF%]
0x00000050: 96 8A 46 04 B4 06 3C 0E 74 11 B4 0B 3C 0C 74 05
[ûèF.¦.<.t.¦.<.t.]
0x00000060: 3A C4 75 2B 40 C6 46 25 06 75 24 BB AA 55 50 B4
[:-u+@¦F%.u$+¬UP¦]
0x00000070: 41 CD 13 58 72 16 81 FB 55 AA 75 10 F6 C1 01 74
[A-.Xr.üvU¬u.÷-.t]
0x00000080: 0B 8A E0 88 56 24 C7 06 A1 06 EB 1E 88 66 04 BF
[.èaêV$¦.í.d.êf.+]
0x00000090: 0A 00 B8 01 02 8B DC 33 C9 83 FF 05 7F 03 8B 4E
[..+..ï_3+â..¦.ïN]
0x000000A0: 25 03 4E 02 CD 13 72 29 BE 46 07 81 3E FE 7D 55
[%.N.-.r)+F.ü>.}U]
0x000000B0: AA 74 5A 83 EF 05 7F DA 85 F6 75 83 BE 27 07 EB
[¬tZân.¦+à÷uâ+'.d]
0x000000C0: 8A 98 91 52 99 03 46 08 13 56 0A E8 12 00 5A EB
[èÿæRÖ.F..V.F..Zd]
0x000000D0: D5 4F 74 E4 33 C0 CD 13 EB B8 00 00 00 00 00 00
[+OtS3+-.d+......]
0x000000E0: 56 33 F6 56 56 52 50 06 53 51 BE 10 00 56 8B F4
[V3÷VVRP.SQ+..Vï(]
0x000000F0: 50 52 B8 00 42 8A 56 24 CD 13 5A 58 8D 64 10 72
[PR+.BèV$-.ZXìd.r]
0x00000100: 0A 40 75 01 42 80 C7 02 E2 F7 F8 5E C3 EB 74 49
[[email protected]Ǧ.G˜°^+dtI]
0x00000110: 6E 76 61 6C 69 64 20 70 61 72 74 69 74 69 6F 6E [nvalid
partition]
0x00000120: 20 74 61 62 6C 65 00 45 72 72 6F 72 20 6C 6F 61 [ table.Error
loa]
0x00000130: 64 69 6E 67 20 6F 70 65 72 61 74 69 6E 67 20 73 [ding operating
s]
0x00000140: 79 73 74 65 6D 00 4D 69 73 73 69 6E 67 20 6F 70 [ystem.Missing
op]
0x00000150: 65 72 61 74 69 6E 67 20 73 79 73 74 65 6D 00 00 [erating
system..]
0x00000160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[................]
0x00000170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[................]
0x00000180: 00 00 00 8B FC 1E 57 8B F5 CB 00 00 00 00 00 00
[...ïn.Wï)-......]
0x00000190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[................]
0x000001A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[................]
0x000001B0: 00 00 00 00 00 00 00 00 64 7D 03 00 00 00 00 01
[........d}......]
0x000001C0: 01 00 07 FE FF FF 3F 00 00 00 38 93 EF 05 00 00
[......?...8ôn...]
0x000001D0: C1 FF 07 FE FF FF 77 93 EF 05 B6 54 EF 05 00 00
[-.....wôn.¦Tn...]
0x000001E0: C1 FF 07 00 C1 FF 2D E8 DE 0B 77 93 EF 05 00 00
[-...-.-F¦.wôn...]
0x000001F0: C1 FF 07 00 C1 FF A4 7B CE 11 34 D7 EE 05 55 AA
[-...-.ñ{+.4+e.U¬]

--------------------------------------------------

I have looked at so many manuals my eyes got tired.

And the new "DskProbe2" for Win 2003 server is apparently busted.

I can't get help in ALL of the MSDN lib (July 2004)
I can't get help in ALL of the Resource Kits, NT4, 2K, 2003.
I can't get help in the latest copy of the online Knowledge base.

Norton Anti-virus doesn't seen to even look at the MBR on my firewire drive
and the partition I want it to find files on it will not look at all.
Unerase and Unformat and disk doctor and .... same

There apparently are better tools available for internal drives than
external Firewire drives. They use various ways to get to the disks.

External firewire drives require the system to be up so no MSDOS utilities.

The files I want are still on the Terraserver so I have not lost too much,
download time and my time to select what part of the USA I want.

I see so many words that NTFS is so good. Convincing words. But I can not
get to the first file using standard means.

DskProbe and Svend Olaf Mikkelsen's utilities should not be necessary for
recovery if NTFS is so good.

Thanks in advance for any help. I seem to be blocked on both of the paths I
am trying to follow.
 
I seem to be running into a limit.

The directory that I want is about 58830 in.

Findpart findNTFS 2 18596 0 1 Qdirs.txt dirs
Stops about 47515.

Directories: 1891
Files: 47515
Trees: 23
Adjusted: 39205
Exe/dll files: 1112
Exe/dll files signature: 1108
Not referenced files: 21
Cluster KB: 4
MFT record used: None
Listed files MB: 16906
Click to expand...
Findpart, version 4.43 - for Windows 95/98/ME/NT/2000/XP.
Copyright Svend Olaf Mikkelsen, 1999-2004.

OS: Windows 5.1.2600 Service Pack 1

Disk: 2 Cylinders: 24792 Heads: 255 Sectors: 63 MB: 194474
Click to expand...
Partitions according to partition tables on second harddisk:

--PCyl N ID -----Rel -----Num ---MB --Start CHS- ---End CHS-- BS CHS
0 1*07 63 99586872 48626 0 1 1 6198*254 63 OK OK
0 2 07 99586935 99570870 48618 6199* 0 1 12396*254 63 OK OK
0 3 07199157805 99586935 48626 12397* 0 1 18595*254 63 OK OK
0 4 07298744740 99538740 48602 18596* 0 1 24791*254 63 OK OK
Click to expand...

There is a FindNTFS file number limit, but it may be about 250,000
files, and a message about that will be displayed. The limit may be
raised if it is reported to be a problem.

When the Master File Table file record, and the mirror of it, are not
located, FindNTFS however will not find all files if the Master File
Table is fragmented. It may be possible to compensate for that by
examining the options.

One thing I notice, is the "Adjusted" finding. Are you certain a
Partition Magic crash is not involved in this?

Since there is a good exe/dll signature match, the FindNTFS
interpretation of the files that were located may be good.

You can try other NTFS recovery programs, and if you want you can do:

findpart findfile 2 18596 24791 fp-a.txt

and mail me the file fp-a.txt zipped. I however cannot promise to
examine the output file soon. The output file will not contain the
file names you see on the screen.
 
Back
Top