Hello,
I have a strange situation with some files (photos from digital camera):
Although the timestamp of the file is not altered, the content of the
file is not displayable anymore in any viewer. Looking at the content of
the files (hexdump) told me that all of these files only consist of NULL
bytes. There are 42 files corrupted, including one mpg file of 216 MB
I tried to investigate further what could have happened to those files.
Unfortunately, I have no idea when some event could have happened which
might cause the file content to be nulled, but I am sure they have been
intact only a couple of days before.
I tried to investigate with the command debugreiserfs -D /dev/hdb3 . In
the resulting file I found the filename and inodes of the corrupted
files with entries like shown below. These entries do not differ from
those I can find for uncorrupted files.
-------------------------------------------------------------------------------
| 3|800 46096 0x0 SD (0), len 44, location 2980 entry count 65535, fsck
need 0, format new|
(NEW SD), mode drwxr-xr-x, size 10472, nlink 2, mtime 24/2007 21:09:07
blocks 21, uid 500
-------------------------------------------------------------------------------
| 4|800 46096 0x1 DIR (3), len 2824, location 156 entry count 89, fsck
need 0, format old|
###: Name length Object key Hash
Gen number
0: ". "( 1) [800 46096] 0
1, loc 2816, state 4 not set
1: ".. "( 2) [4 800] 0
2, loc 2808, state 4 not set
2: "tmp "( 3) [46096 46591] 2711168
0, loc 2800, state 4 "r5"
3: "dsc03203.jpg "( 12) [46096 46110] 577018880
0, loc 2784, state 4 "r5"
4: "dsc03204.jpg "( 12) [46096 46109] 579595648
0, loc 2768, state 4 "r5"
5: "dsc03205.jpg "( 12) [46096 46108] 582172544
0, loc 2752, state 4 "r5"
6: "dsc03206.jpg "( 12) [46096 46107] 584749312
0, loc 2736, state 4 "r5"
7: "dsc03207.jpg "( 12) [46096 46106] 587326208
0, loc 2720, state 4 "r5"
8: "dsc03208.jpg "( 12) [46096 46105] 589902976
0, loc 2704, state 4 "r5"
9: "dsc03209.jpg "( 12) [46096 46104] 592479744
0, loc 2688, state 4 "r5"
10: "dsc03210.jpg "( 12) [46096 46103] 597633408
0, loc 2672, state 4 "r5"
11: "dsc03211.jpg "( 12) [46096 46102] 600210176
0, loc 2656, state 4 "r5"
12: "dsc03212.jpg "( 12) [46096 46101] 602787072
0, loc 2640, state 4 "r5"
(....)
Is there anybody out there who has some idea
- why suddenly files can be corrupted this way
- where I possibly can find more information about what happened (maybe
logfiles to analyse, look for what???)
- if these files might be recovered, and how
Some possibly useful information:
- Installed system is an OpenSuse 10.2
- Filesystem containing the corrupted files is Reiserfs
- Timestamp, filename, filesize etc. of the ls command show the original
data
- No, there is no backup, otherwise I would not ask this question here
- I regularly use the "suspend-to-disk" feature
Any help would be greatly appreciated
Thanks in advance,
Jean-Jacques Mouris