Recovering H.264 videos from DVR

[Jimmy Weg]

I have a WFS0 4 drive from a Zmodo DVR.  The index has been wiped, so I'm trying to carve H.264 files from the disk.  I've tried a few different headers and have not recovered anything.  I don't have any sample videos that were recorded with this device, so I also have nothing that may serve as a template.  Any suggestions?  Thanks. 

[Vito Rocco]

Do you have the DVR? If so, throw a new drive in, hook up a camera and record something. Then get the header from it. 

http://kb.zmodo.com/index.php?action=artikel&cat=1&id=111&artlang=en

On May 19, 2015, at 3:04 PM, Jimmy Weg <jimm...@gmail.com> wrote:

I have a WFS0 4 drive from a Zmodo DVR.  The index has been wiped, so I'm trying to carve H.264 files from the disk.  I've tried a few different headers and have not recovered anything.  I don't have any sample videos that were recorded with this device, so I also have nothing that may serve as a template.  Any suggestions?  Thanks. 

--
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.
To post to this group, send email to datarecovery...@googlegroups.com.
Visit this group at http://groups.google.com/group/datarecoverycertification.
For more options, visit https://groups.google.com/d/optout.

[IT LAND]

i am not familiar with this specific recorder but most of them has on the fly encryption happening similar to the My Passport - so scanning the drive outside will end up with no real data due to the encryption. you need to check with this manufacturer if they have a reader application.

[Jimmy W]

Thanks, but I don't have the camera.  All I have is the unit. 

--
You received this message because you are subscribed to a topic in the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/datarecoverycertification/3LEi2r-t1zs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to datarecoverycertif...@googlegroups.com.

[Jimmy Weg]

Thanks.  They offer a player, but I'll need to carve files to see whether I can view any.  Zmodo was not at all helpful when I called. 

[Networks]

Jimmy  Would any headers from another DVR same H.264 format help ? I see them as 00 00 00 01 61

Jim

[Tim Homer - Desert Data Recovery]

IMHO I think H.264 files are codecs and not standard files, you cannot carve out codecs. I have heard that CnW data recovery has had some success with recovering them. If that fails I have a contact in Russia who can do it, but the client might need to have deep pockets.

--

[Jimmy Weg]

Thanks, Tim.  I think that you're correct, but I do see a number of suggested "headers"  for these "files."  I don't do a lot of DVR work, and I do know that a lot of manufacturers employ custom codecs.  Perhaps that's the reason why I'm not having any success.  Maybe I'm wrong, but if I had sample videos from a Zmodo unit and could find a header, I could carve files (which may contain H.264 codecs) and play them with the Zmodo player or convert them to AVI. You're also correct about the cost of professional recovery! 

On Tuesday, May 19, 2015 at 10:31:14 PM UTC-6, Tim wrote:

IMHO I think H.264 files are codecs and not standard files, you cannot carve out codecs. I have heard that CnW data recovery has had some success with recovering them. If that fails I have a contact in Russia who can do it, but the client might need to have deep pockets.

 

From: datarecovery...@googlegroups.com [mailto:datarecoverycertificati...@googlegroups.com] On Behalf Of Jimmy Weg
Sent: Tuesday, May 19, 2015 3:30 PM
To: datarecovery...@googlegroups.com
Subject: Re: Recovering H.264 videos from DVR

 

Thanks.  They offer a player, but I'll need to carve files to see whether I can view any.  Zmodo was not at all helpful when I called. 

On Tuesday, May 19, 2015 at 4:15:07 PM UTC-6, IT LAND wrote:

i am not familiar with this specific recorder but most of them has on the fly encryption happening similar to the My Passport - so scanning the drive outside will end up with no real data due to the encryption. you need to check with this manufacturer if they have a reader application.

On Wednesday, May 20, 2015 at 8:04:55 AM UTC+10, Jimmy Weg wrote:

I have a WFS0 4 drive from a Zmodo DVR.  The index has been wiped, so I'm trying to carve H.264 files from the disk.  I've tried a few different headers and have not recovered anything.  I don't have any sample videos that were recorded with this device, so I also have nothing that may serve as a template.  Any suggestions?  Thanks. 

--
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.

To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertification+unsub...@googlegroups.com.

[DRA]

Had a similar job a while back. I used Winhex to carve out video files from the image. It created a lot of junk folders and files but also a few files that played.  

 

From: datarecovery...@googlegroups.com [mailto:datarecovery...@googlegroups.com] On Behalf Of Jimmy Weg
Sent: Thursday, 21 May 2015 7:10 AM
To: datarecovery...@googlegroups.com
Cc: t...@desertdatarecovery.com
Subject: Re: Recovering H.264 videos from DVR

 

Thanks, Tim.  I think that you're correct, but I do see a number of suggested "headers"  for these "files."  I don't do a lot of DVR work, and I do know that a lot of manufacturers employ custom codecs.  Perhaps that's the reason why I'm not having any success.  Maybe I'm wrong, but if I had sample videos from a Zmodo unit and could find a header, I could carve files (which may contain H.264 codecs) and play them with the Zmodo player or convert them to AVI. You're also correct about the cost of professional recovery! 

On Tuesday, May 19, 2015 at 10:31:14 PM UTC-6, Tim wrote:

IMHO I think H.264 files are codecs and not standard files, you cannot carve out codecs. I have heard that CnW data recovery has had some success with recovering them. If that fails I have a contact in Russia who can do it, but the client might need to have deep pockets.

 

From: datarecovery...@googlegroups.com [mailto:datarecovery...@googlegroups.com] On Behalf Of Jimmy Weg
Sent: Tuesday, May 19, 2015 3:30 PM
To: datarecovery...@googlegroups.com
Subject: Re: Recovering H.264 videos from DVR

 

Thanks.  They offer a player, but I'll need to carve files to see whether I can view any.  Zmodo was not at all helpful when I called. 

On Tuesday, May 19, 2015 at 4:15:07 PM UTC-6, IT LAND wrote:

i am not familiar with this specific recorder but most of them has on the fly encryption happening similar to the My Passport - so scanning the drive outside will end up with no real data due to the encryption. you need to check with this manufacturer if they have a reader application.

On Wednesday, May 20, 2015 at 8:04:55 AM UTC+10, Jimmy Weg wrote:

I have a WFS0 4 drive from a Zmodo DVR.  The index has been wiped, so I'm trying to carve H.264 files from the disk.  I've tried a few different headers and have not recovered anything.  I don't have any sample videos that were recorded with this device, so I also have nothing that may serve as a template.  Any suggestions?  Thanks. 

--
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.

To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.

To post to this group, send email to datarecovery...@googlegroups.com.
Visit this group at http://groups.google.com/group/datarecoverycertification.
For more options, visit https://groups.google.com/d/optout.

--

You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.

To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.