hfsprescue - stuck at step 2

[toto]

Hello,

I am trying to recover a 2.7 TB harddrive of a workmate.
Step 1 was successfull (after 14 hours) but now at step 2 I have problems:
The process stucks at "Hashing file entries": the filesize of fileinfo.sha stopps at 16384 Bytes, the processor has 100% workload and I tried it now for more than 24 hours.
If I start step 1 and kill the process after e.g. a few minutes step 2 has no problems. I tested the other steps, too. So I could recover somer files. Now with the whole partition it does not seem to work.

Do you have any ideas?
Thank You
Thomas

Here is the log of step 1:

Code Select Expand


hfsprescue 3.4 2018/02/16 by Elmar Hanlhofer https://www.plop.at

Command: ./hfsprescue_x64 -s1 /dev/sda2

Start: 2019/09/12 14:24:57

Signature:                      0x2b48, H+
LastMountedVersion:             HFSJ, last mount by Mac OS X.
FileCount:                      607944
DirCount:                       100453
BlockSize:                      4096
TotalBlocks:                    732480620
AllocationFile StartBlock:      1
ExtentsOverflowFile StartBlock: 79700
CatalogFile StartBlock:         1035604
Total size:                     2794 GB


actual file sizes:

Code Select Expand


total 2629176
drwxr-xr-x 1 root root          9 Sep 14 07:33 .
drwxrwxr-x 1 1000 1000          7 Sep 14 07:32 ..
-rw-r--r-- 1 root root      16384 Sep 14 07:33 fileinfo.sha
-rw-r--r-- 1 root root 1205360006 Sep 13 04:52 filesfound.db
-rw-r--r-- 1 root root   10102325 Sep 13 04:52 foldertable.db
-rw-r--r-- 1 root root          9 Sep 13 04:52 parameter-s1
-rw-r--r-- 1 root root 1476780188 Sep 13 04:52 s1.log
-rw-r--r-- 1 root root          0 Sep 14 07:33 s2.log
-rw-r--r-- 1 root root          1 Sep 14 07:33 utf8len


[toto]

Maybe I have a solution:
I stopped step 1 after about 450000 files when the filecount did not seem to change any more.
Step 2 was successfull and now I am running step 3, which will take longer.

I will report the results soon.

[toto]

Hey!

With the above mentioned way I could recover nearly everything of the partition. Nevertheless I had some errors. Maybe it is useful for other people:

1. I aborted step 1 (Strg-C) at that point I thought the most files were found. So this step took me 5-10 minutes instead of 14 hours (see posts above).
2. I used Linux for the recovery and at first I used a hfsplus filesystem (because my workmate uses only MacOS). This was a mistake! The hfsplus filesystem got corrupted during the copy process. I decided to use ntfs as a destination filesystem, then everything went well. Maybe the hfsplus driver of Linux or the filesystem itself is buggy.
3. If you use ntfs, MacOS will not show file-/foldernames with a : in the name. So, you should replace these characters before mounting in MacOS (maybe there is an option to show all files in MacOS).

So, thank you for this nice program!
I hope that my workmate will send you some cash!

Bye
Thomas

[Elmar]

Hello,

With the above mentioned way I could recover nearly everything of the partition.

Excellent

Best regards
Elmar