From owner-freebsd-questions@FreeBSD.ORG  Fri Mar 24 23:41:26 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B451316A401
	for <freebsd-questions@freebsd.org>;
	Fri, 24 Mar 2006 23:41:26 +0000 (UTC) (envelope-from kdk@daleco.biz)
Received: from ezekiel.daleco.biz (southernuniform.com [66.76.92.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 39B9C43D53
	for <freebsd-questions@freebsd.org>;
	Fri, 24 Mar 2006 23:41:26 +0000 (GMT) (envelope-from kdk@daleco.biz)
Received: from [192.168.2.2] ([69.27.149.254])
	by ezekiel.daleco.biz (8.13.4/8.13.1) with ESMTP id k2ONeJeY092304;
	Fri, 24 Mar 2006 17:40:40 -0600 (CST) (envelope-from kdk@daleco.biz)
Message-ID: <44248359.6040400@daleco.biz>
Date: Fri, 24 Mar 2006 17:40:09 -0600
From: Kevin Kinsey <kdk@daleco.biz>
User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.12) Gecko/20060127
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Kris Kennaway <kris@obsecurity.org>
References: <44243AC8.5080904@daleco.biz>
	<20060324191903.GA27005@xor.obsecurity.org>
In-Reply-To: <20060324191903.GA27005@xor.obsecurity.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
Subject: Re: mount_ntfs(8) and filesize ... 2GB limit?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 24 Mar 2006 23:41:26 -0000

Kris Kennaway wrote:

>>And, even better, have you got a surefire way
>>to get "my_very_important.bkf" off the disk?  ;)
>>    
>>
>
>/usr/ports/sysutils/ntfsprogs/ ?
>
>Kris
>  
>

Kris, thanks *very much*.  Where can I send $beverage?


For the archives:

1.  Install port mentioned above.
2.  ntfscat -fv /dev/ad3s2 important.bkf > /usr/recovered.bkf
3.  restore as per Windows SOP.

So, "ntfscat" is able to handle large file operations (>2GB) in FreeBSD,
operations that seem to fail with mount_ntfs and standard 'Nix tools
(cat, cp, cpio, tar, dd, etc).

Important: I've not yet verified that the disk is still readable
by Windows, but since the data's off, I'm not sure I care, and
Windows wasn't seeing it properly anyway.  A reformat should
do the trick. YMMV.

Kevin Kinsey

-- 
What is the robbing of a bank compared to the founding of a bank?
		-- Bertold Brecht