Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S263611AbTKXHep (ORCPT ); Mon, 24 Nov 2003 02:34:45 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S263612AbTKXHep (ORCPT ); Mon, 24 Nov 2003 02:34:45 -0500 Received: from terminus.zytor.com ([63.209.29.3]:11242 "EHLO terminus.zytor.com") by vger.kernel.org with ESMTP id S263611AbTKXHeo (ORCPT ); Mon, 24 Nov 2003 02:34:44 -0500 Message-ID: <3FC1B48B.8090403@zytor.com> Date: Sun, 23 Nov 2003 23:34:35 -0800 From: "H. Peter Anvin" User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4) Gecko/20030630 X-Accept-Language: en, sv, es, fr MIME-Version: 1.0 To: Larry McVoy CC: linux-kernel@vger.kernel.org Subject: Re: data from kernel.bkbits.net References: <20031124051910.GA2766@work.bitmover.com> In-Reply-To: <20031124051910.GA2766@work.bitmover.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1021 Lines: 23 Larry McVoy wrote: > I've been trying to get all the data off the drives on the machine which > was broken into. I have a feeling that whoever this was was hiding stuff > in the file system because both drives will not fsck clean nor will they > completely read. > > I've managed to get most of the data off but not all. Given that I've put > about 3 days into this I'm pretty much done. If someone else wants to look > at the drives I can make them available, let me know. But just reading the > main drive makes the kernel (Fedora 1) kill the tar process as below (it > also managed to wack the system enough that it overwrote the NVRAM with > garbage). It hasn't been a fun weekend. > Looks more like a 3Ware driver bug to me. Hard to say for sure, though. -hpa - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/