Is it possible to reassemble a Time Machine backup from recovered files?

I have kind of a sad story that I'm sure some of you can relate to. My Macbook was briefly stolen but by the time I got it back, the partitions had been erased. I had an external backup... but the backup disk failed catastrophically a couple days before it was stolen. The external backup doesn't even mount anymore and makes grinding noises if it's plugged in...
The MacBook had two hard drives in it and one was rather large, so there was space for a partition that I used only for Time Machine. It was erased during the theft, but since nothing had been written to the disk yet, I figured that the chances of recovering data were pretty high. So I went online and looked around for utilities (I used StellarPhoenix... Not sure I'd recommend it to a friend) and managed to spend the next four days recovering the time machine backup to an external computer. I recovered a lot of directories with raw directory IDs attached to them and interesting recovered files inside.
I want to put these files back together as a Time Machine backup (haha, I know right?), because the alternative is around 60 gigabytes of data to sift through by hand.
Here's the top level structure:
MacBook:Root alleygator$ ls -a
.fseventsd
.journal
.DS_Store
.journal_info_block
.HFS+ Private Directory Data?
Lost Folder(s)
.Trashes
"HFS+ Private Directory Data?" and "Lost Folder(s)" directories contain about three hundred thousand directories altogether.
.journal is 33 megs of unicode-looking data that I have to believe is the HFS+ "Journal" part of a journaling file system.
.journal_info_block appears to be an empty file.
.fseventsd contains only a few tiny files that appear to be the the heads of .plists.
Anyway.
The HFS+ folder looks like this:
dir_2243617          dir_2255418          dir_2283556          dir_2383839          dir_880892
dir_2243619          dir_2255421          dir_2283558          dir_2383860          dir_880907
dir_2243621          dir_2255424          dir_2283560          dir_2383882          dir_880909
dir_2243623          dir_2255427          dir_2283562          dir_2383927          dir_880916
dir_2243626          dir_2255430          dir_2283564          dir_2383980
dir_2243628          dir_2255436          dir_2283566          dir_2383986
dir_2243630          dir_2255439          dir_2283571          dir_2383989
dir_2243632          dir_2255442          dir_2283574          dir_2383992
While Lost Folder(s) looks like this:
Folder 1919459          Folder 236881          Folder 346820          Folder 640530          Folder 999005
Folder 1919462          Folder 2368812          Folder 346824          Folder 640534          Folder 999016
Folder 1919465          Folder 2368813          Folder 346826          Folder 640591          Folder 999021
Folder 1919468          Folder 2368817          Folder 34683          Folder 640595          Folder 999024
Folder 1919471          Folder 2368820          Folder 346879          Folder 640599          Folder 999027
Folder 1919474          Folder 2368823          Folder 3468793          Folder 640603          Folder 999030
Folder 1919477          Folder 2368826          Folder 347019          Folder 640607          Folder 999035
Folder 19196          Folder 2368829          Folder 347083          Folder 640611          Folder 999044
Each of these directories seems to contain a few files that I'd want to keep, and Stellar Phoenix tells me that it recovered a couple million files total. A bit of "light reading" into the HFS+ file system suggests that HFS+ uses these integer file descriptors instead of file names, and that the file names are stored elsewhere?
I've looked around on the web for anybody who's had a similar problem and have yet to find anything. It'd be really neat if all you had to do was create a new .sparsebundle and throw all the files into it, but I somehow doubt that'd work...
I'm really concerned that I can't put humpty dumpty back together again at all.
If I can't, what would be the next best thing? I've considered copying the files back to the drive and letting Spotlight chew on them. Eventually, I would probably be able to find the most important files on the drive. But I would prefer something more user friendly than that.
Oh, and feel free to suggest your favorite online backup solution.
Thanks for reading,
Bill

Are you trying to bring all the stuff over? Use Migration Assistant in Applications / Utilities.

Similar Messages

  • Is it possible to take 2 time machine backups from 2 seperate MacBooks and migrate each backup to an iMac under separates user names?

    I was sucessful migrating the first macbook to the imac under the first user name but I havent been able to get the second migration to happen under a second user name on the imac. Is this possible? can you only use migration assistant once or should it work?

    Yes, you can do that.
    If the second set of backups has a user account with the exact same short name (home folder name) as an existing one, you must rename one of them, per the last sample in the pink Transferring Accounts box of Using Migration Assistant on Lion.

  • Time machine backup from external hdd to time capsule

    Is it possible to transfer an time machine backup from an external hdd to a time capsule? I have changed the original 2tb time capsule hdd to a 3tb hdd because of loud sounds from the 2tb hdd. Now i want to transfer the backup from the (now external) 2tb hdd to the new 3tb hdd which is now in the time capsule. Could anybody help me?

    Yes, it should be easy.. just copy the sparsebundle from the old 2TB plugged into your computer to the TC.
    This will take a few hours maybe a lot more if the drive is near full.. use ethernet.. do not even dream of using wireless.. Do not plug the 2TB into the TC USB.. that is super slow.. plugged into your computer with a FW hard disk holder would be the ideal.. but USB is ok.
    http://pondini.org/TM/18.html
    Is it worth it??
    Saving old backups.. or simply start again.. a clean fresh backup is much more efficient. Put the 2TB drive in a draw.. if you haven't needed any files on it in 6months from now.. wipe it.

  • Is possible to have a time machine backup on an external hd connected to either a primary or secondary router and not have "back to my mac" using 10.7.3?

    Is possible to have a time machine backup on an external hd connected to either a primary or secondary router and not have "back to my mac" using 10.7.3?

    The bottom line is that Apple does not support Time Machine backups at the USB port of the AirPort Extreme. If they don't support their own router, they certainly don't support other routers from other manufacturers.
    Connect the drive directly to the Mac using either USB or FireWire.....or....use a Time Capsule.  Either of these setups will be supported.
    If you want to try the unsupported method(s), you can certainly do so. But, I would suggest that you have a secondary backup plan in place if this is important data that you will be backing up.

  • Cannot transfer Time Machine backups from one external drive to another

    Since I bought my 13 inch MacBook Pro in September 2014 I've been keeping Time Machine backups on an external 1TB Lacie Rugged.  This is partitioned into three and one of the partitions contains my iPhoto library. 
    Last weekend I left my MBP disconnected from the power source but with the external hard drive still plugged in.  Long story short - the battery level fell below the minimum needed to operate so it turned itself off and 'disconnected' the external hard drive.  This resulted in a corrupted iPhoto library which is no longer accessible.
    In order to restore my iPhoto Library from another backup I needed to buy a second external hard drive.  Yesterday I bought a 2TB Lacie Rugged which I've now partitioned into 5. 
    I want to move my Time Machine backups from the 1TB Lacie Rugged to a partition on the 2TB Lacie Rugged (to take advantage of the new Lacie's Thunderbolt connection). 
    I read the Apple article -
    HT202380: Time Machine: How to transfer backups from the current backup drive to a new backup drive
    and followed the instructions precisely.  About 2 hours into the transfer I came back to my MacBook Pro and saw a message saying that it was not possible to complete the transfer because I did not have the correct permissions.  The only option was to click the OK button which stopped the transfer.
    Can anyone advise what I should do next?
    Cheers
    Tricia

    Hi Eric,
    Thank you for your response.  I came across another thread yesterday which suggested the Restore via Disk Utility method.  It worked for me, too.  This was after I had tried following the method suggested in the Apple article above three times but each time the message was the same ....
    The operation can't be completed because you don't have permission to access some of the items.
    I dare say that Apple would like to have us believe that it's a simple matter of 'drag and drop' but it certainly wasn't for me.  From what I've read the permission problem crops up fairly frequently. Before the second and third attempts  I had already amended Permissions on the Time Machine backups so that everyone could read and write, so that mustn't have been the problem.  I'm the only person who uses my computer so that's not a problem.
    The next problem I have is that I decided I would use the Restore route to transfer my SuperDuper clone rather than start from scratch.  Unfortunately, the partition size on my original backup disk where SuperDuper clone is is 350GB and the size of the SuperDuper clone partition on my new backup is 300GB.
    Of course, Apple says you can resize partitions using Disk Utility.  What they don't say is you can downsize partitions but (in my experience and that of many other frustrated users on various forums) you CANNOT upsize using Disk Utility.  I have 100GB spare on my external hard drive (from downsizing two partitions by 50GB each) BUT there is no way Disk Utility will let me increase the size of SuperDuper partition to 350GB :-(((
    Cheers
    Tricia

  • Can I recover time machine backups from the trash? They are not deleted.

    I deleted by mistake time machine backups from an external hard disk and I do not know how to recover htem. The bin has not been emptied. I learnt it would be possible via "Terminal" but I do not know how. Some help would be very much appreciated! Thanks in advance.

    That's not possible, the message is: backups cannot be moved (I'm workin in German). After having googled I read somewhere that it would be possible to recover the backups with the software Terminal. I copied the path of that article and adapted it - however nothing happened. So I certainly did something wrong - but what???? Do you have any idea about this? I'm a bit desperate.

  • I just restored my 13" MBP i5 at the apple store to the newest version of Lion after issues with a previous Time Machine backup from Snow Leopard- this time I created a new account and just ported files and folders, and now MS Office doesn't work. Help?

    I just restored my 13" MBP i5 at the apple store to the newest version of Lion after issues with a previous Time Machine backup from Snow Leopard- this time I created a new account and just ported files and folders, and now MS Office doesn't work.
    ^^ that's the main problem. Here's the full history.
    I bought a new 13" i5 MBP, early 2011 edition. I had an old white Macbook 2.14 ghz core2duo on Snow Leopard. I attempted to port over my time machine backup, but encountered problems in that my User was inaccessible from the new computer after the import finished, and I had to go in and change the root password, etc, and for some reason or another, I couldn't install any programs at all from that administrator's account. By "couldn't" I mean I could install them, but upon installation they would never boot. So, I took it to the apple store and did a clean install from the most up to date Lion OSX. Then, I created a brand new admin account, instead of trying to import the old one, and things seemed great. Then, I just imported my old files from the TM backup, but not any system settings, permissions, or user data. Just my Docs, pics, vids, apps, and itunes stuff.
    Here's where things get weird again. I imported this stuff under the name "old", but all of these folders have a red negative sign on them, marking them as restricted. So, from my main admin account, I cannot even peruse these folders. Since I didn't import user data, I can't sign in to the "old" account to change permissions. I already tried to change the permissions from system preferences, but that didn't change anything. And now, for whatever reason, of all the apps that were imported then, MS Office is the only set of apps that does not work. When I click on it, it just says there was a problem and asks if I'd like to send a report to apple. I tried reinstalling it to no avail. I'm an English student, so i really need access to Word. Can anyone help? The Apple store is a major detour for me and would like to fix this issue myself.

    Most likely you have Office 2004 which are PPC-only applications and will not work in Lion. Upgrade to Office 2011. Other alternatives are:
    Apple's iWork suite (Pages, Numbers, and Keynote.)
    Open Office (Office 2007-like suite compatible with OS X.)
    NeoOffice (similar to Open Office.)
    LibreOffice (a new direction for the Open Office suite.)

  • How can I copy a time machine backup from one Time Capsule to another ?

    How can I copy a time machine backup from one Time Capsule to another ? I bought a 1 Tb Time Capsule to replace my 512Mb Time Capsule. Now, I like to copy my time machine backup from the old Time Capsule to the new one so I can keep using my backup.

    from this support article: 
    (click on image to enlarge)

  • How can I use the Time Machine Backups from my Old Computer?

    I have two months of Time Machine backups made using my old Macintosh computer which died and I no longer have. I have now purchased a new computer and am trying to use the Time Machine back ups from the original computer, but it will not recognise them. How can I get my new MacBook Pro to use the Time Machine Backups from my old Computer? I phoned the Apple help line and they said I cannot use them and would have to delete them. This sounds crazy if you can only use the Time Machine back up file with one computer and have to delete it when you buy a new Mac. Surely there must be some way to transfer ownership (not files) from an old to the new Mac?
    Thanks
    Richard

    Thanks Kevin for the suggestion posted on MacOSXHints how to "Repair Time Machine after logic board changes".
    http://www.macosxhints.com/article.php?story=20080128003716101
    It seems as though I am not alone with my frustration with the way Time Machine uses the MAC address of a computer to tell one system from another. This means that if you have your Mac repaired with a new logic board, or replace your system with a new one, you can't resume backups where you left off. Reading through the readers who used the fix using Terminal, it appears that the fix does not always work. I contacted Apple again, but they were no help. Surely Apple should come out with a solution as more and more people use Time Machine/Time Capsule.
    It is CRAZY that after a change computers or a switch in the computer logic board that you cannot resume your Time Machine back ups.

  • How can I "Put Back" a time machine backup from the trash to my external hard drive?

    Basically what happened was I accidentally put an older time machine backup from my external hard drive into the trash on my macbook. Since then, time machine has made new backups onto my external hard drive. How can I either "Put Back" or replace the deleted backup back into my hard drive?
    Whenever I try to move it it says "A newer item named “Backups.backupdb” already exists in this location. Do you want to replace it with the older one you’re moving?" I click replace and after a few minutes of loading, it says "Cannot replace. An item named "" already exists."

    As long as you don't delete the trash, the files should be recoverable.
    I suspect using the Put Back command could take a long time, so be patient.
    If your Time Machine backups are mixed with your daughter's backups you might want to buy a larger drive and move the Time Machine files to the new drive.
    Regarding missing photos in iPhoto...There might be options to rebuild/recover that data from iPhoto rather than trying to revert to a Time Machine backup.
    Check out this third party app, iPhoto Library Manager. It has a demo.
    http://www.fatcatsoftware.com/iplm/
    Options for a larger drive.
    I like the Seagate USB 3.0 Backup plus drives. Works on USB 2.0 ports. They come formatted for PC but easy to format in Disk Utility.
    I don't recommend Western Digital because of the boot problem with some of their drives.
    LaCie makes good drives.
    All Mac formatted drives will cost more and it’s easy to reformat with Disk Utility. Do not use the software that comes with the drives. It’s recommended that you use Apple’s Disk Utility.
    Prices vary but this gives you an idea of what you’ll find. As you notice the second and third TB is usually only $15 more per TB. Normally, you’ll find these prices but right now the 1T is more than the 2T
    Seagate Backup Plus 1 TB USB 3.0 $85
    Seagate Backup Plus 2 TB USB 3.0 $99
    Seagate Backup Plus 3 TB USB 3.0 $115
    I have seen the 3T on sale for $99.
    Locally, Best Buy seems to have the best prices.

  • I've mistakenly deleted Time Machine backups from my external HDD. How do I fix this?!

    I manually deleted several Time Machine backups from my external HDD. Whenever I attempt to empty trash, it states (error code -22) has occurred. How do I fix my predicament?
    I understand (now) that I should never do this and ONLY delete from the Time Machine app itself but I did not assume this would be so complex by taking a blind stab at it. How do I either a) place the Time Machine backups where the originated (Put Back is not an option when right-clicked) or b) successfully delete these so I can clear my bin.
    I am running Mac OS 10.10 on a 13" MacBook Air (mid-2013) w/ 4GB of RAM and 128GB SSD. My external drive is a 5400 RPM WD USB 2.0 External Hard Drive.

    Try Trash won't empty deleted time machine backups

  • I am trying to delete a Time Machine backup from a Time Capsule.

    I am trying to delete a Time Machine backup from a Time Capsule.  The file is about 400GB and my MacBook has been trying to delete it for 5h now. It still says "deleting" but has not given me a "time remaining" yet. Any idea of what I could do????

    You should not attempt to delete backups using the Finder. The result can be a corrupted backup.
    I recommend you let it complete, no matter how long it takes. That could be days, if your TC is connected via wireless.
    It is not necessary to delete backups, since Time Machine will delete old backups some time after they have been deleted from your source volume. For more information read Apple Support Communities contributor Pondini's explanation here: Should I delete old backups? If so, How?

  • I had to reformat my OSX 10.5.8 and i can't restore my emails from my time machine backup from an external hard drive - only the latest (post backup) time machine back ups are available to restore. Please can any help

    I had to reformat my OSX 10.5.8 and I can't restore my emails from my time machine backup from an external hard drive - only the latest (post backup) time machine back ups are available to restore. Please can any help? I can find the mail folder in my libraries, but the Restore Button is grayed out

    OSX treats the reformatted drive as a different one; it's the same as replacing it, and the old one is no longer connected.
    See #E3 in  Time Machine - Troubleshooting to see and restore from the "old" drive.
    And, you may not want to restore via the Finder; see the blue box in #15 of  Time Machine - Frequently Asked Questions.

  • I threw out 24 time machine backups from an external hard drive into my desktop trash and now I can't empty my trash.

    I threw out 24 time machine backups from an external hard drive into my IMac desktop trash and now I can't empty my trash.

    Since you didn't mention what type of error message you were seeing, I'm going to guess on what is happening.
    I'm guessing that since you threw away Time Machine backups, that Time Machine is probably active on your Mac. There is a chance then that the files you tossed are marked as in use. You can't delete files that are in use.
    Try turning Time Machine off, then restart your Mac. Then try deleting them again.
    Once done, turn Time Machine back on.
    Tom

  • Is there a way to get my photos off an old time machine backup from an external hard drive?

    Is there a way to get my photos off an old time machine backup from an external hard drive?

    You will have to connect the Time Machine HDD and click on the Icon.  You will see one folder called Backups.backupdb.  Click on that and you will have to continue until you find the home folder.  The iPhoto library (where the pictures are, not the application) will probably be in your pictures folder.  You will have to drag that to your desk top.  Then you will have access to individual images.
    Ciao.

Maybe you are looking for