mount hard drive image that has ntfs format?

lancebermudez

ok wanted to image my mom computer. Her computer is windows 7 and has ntfs. So... how do I mount it? Below is what I did.

used ddrecuse from apt-get install gddrecuse

[email protected]:~$ sudo ddrescue -v /dev/sda ~/mom/mom03142011.img ~/mom/logfile

About to copy 320072 MBytes from /dev/sda to /home/custom/mom/mom03142011.img

Starting positions: infile = 0 B, outfile = 0 B

Copy block size: 128 hard blocks

Hard block size: 512 bytes

Max_retries: 0

Direct: no Sparse: no Split: yes Truncate: no

Press Ctrl-C to interrupt

Initial status (read from logfile)

rescued: 0 B, errsize: 0 B, errors: 0

Current status

rescued: 320072 MB, errsize: 0 B, current rate: 17235 kB/s

ipos: 320072 MB, errors: 0, average rate: 21384 kB/s

opos: 320072 MB, time from last successful read: 0 s

Finished

[email protected]:/media/My Passport/mom$ sudo mount -t ntfs-3g -o loop mom03*.img /mnt

NTFS signature is missing.

Failed to mount '/dev/loop1': Invalid argument

The device '/dev/loop1' doesn't seem to have a valid NTFS.

Maybe the wrong device is used? Or the whole disk instead of a

partition (e.g. /dev/sda, not /dev/sda1)? Or the other way around?

[email protected]:/media/My Passport/mom$ file -s mom03142011.img

mom03142011.img: x86 boot sector; partition 1: ID=0x7, active, starthead 32, startsector 2048, 407552 sectors; partition 2: ID=0x7, starthead 126, startsector 409600, 598294528 sectors; partition 3: ID=0x7, starthead 254, startsector 598704128, 26435584 sectors, code offset 0xc0

[email protected]:~$ sudo fdisk -l

Disk /dev/sda: 320.1 GB, 320072933376 bytes

255 heads, 63 sectors/track, 38913 cylinders

Units = cylinders of 16065 * 512 = 8225280 bytes

Sector size (logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal): 512 bytes / 512 bytes

Disk identifier: 0x8d769ec6

Device Boot Start End Blocks Id System

/dev/sda1 * 1 26 203776 7 HPFS/NTFS

Partition 1 does not end on cylinder boundary.

/dev/sda2 26 37268 299147264 7 HPFS/NTFS

/dev/sda3 37268 38914 13217792 7 HPFS/NTFS

jabirali

Basically, the problem is that you made an image of an entire harddrive, and then try to mount the harddrive image as a partition image.

The easiest way to solve that, would be to instead make images of each partition separately:

sudo dd if=/dev/sda1 of=~/mom/part1.img
sudo dd if=/dev/sda2 of=~/mom/part2.img
sudo dd if=/dev/sda3 of=~/mom/part3.img

You can then create mount points for the partitions by using

sudo mkdir /mnt/part1 /mnt/part2 /mnt/part3

And then mount the partitions by typing

sudo mount -t ntfs-3g -o loop ~/mom/part1.img /mnt/part1
sudo mount -t ntfs-3g -o loop ~/mom/part2.img /mnt/part2
sudo mount -t ntfs-3g -o loop ~/mom/part3.img /mnt/part3

If you have the disk space to contain two copies of your moms harddrive, you might also just extract the partitions from your existing disk image. You have a regular disk geometry of 63 sectors/track and 512 bytes/sector, and the sector boundaries and sizes were given by fdisk as

Device	Start		Blocks
/dev/sda1	1		203776
/dev/sda2	26		299147264
/dev/sda3	37268	13217792

You should thus be able to extract the partitions by executing

dd if=~/mom/mom03142011.img of=~/mom/part1.img ibs=512 skip=$(( 1*63 )) count=203776
dd if=~/mom/mom03142011.img of=~/mom/part2.img ibs=512 skip=$(( 26*63 )) count=299147264
dd if=~/mom/mom03142011.img of=~/mom/part3.img ibs=512 skip=$(( 37268*63 )) count=13217792

If this is successful, you should be able to mount part1.img, part2.img and part3.img exactly as described above for partition images extracted directly from /dev/sda1, /dev/sda2 and /dev/sda3.

[edit]
Note that the last code snippet is supposed to be three lines of code, not six. Just join two and two lines without whitespace in between, and it should work fine :-)

lancebermudez

thank you all for your help. below is how I got it to work with your help. This will mount the partions from the image without need to extract them.
sudo apt-get install parted
sudo parted *.image
(parted) unit
Unit? [compact]? B
(parted) print
Model: (file)
Disk /media/My Passport/mom/mom03142011.img: 320072933376B
Sector size (logical/physical): 512B/512B
Partition Table: msdos

Number Start End Size Type File system Flags
1 1048576B 209715199B 208666624B primary ntfs boot
2 209715200B 306536513535B 306326798336B primary ntfs
3 306536513536B 320071532543B 13535019008B primary ntfs
(parted) quit
mount -o loop,ro,offset=1048576 /media/M*assport/mom/mom03142011.img /mnt/1
mount -o loop,ro,offset=209715200 /media/M*assport/mom/mom03142011.img /mnt/2
mount -o loop,ro,offset=306536513536 /media/M*assport/mom/mom03142011.img /mnt/3