Date: Mon, 29 May 2000 09:33:12 +0200 From: Graham Wheeler <gram@cequrux.com> To: David Malone <dwmalone@maths.tcd.ie> Cc: "Marcelo J. Iturbe" <marcelo@msm.cl>, stable@FreeBSD.ORG Subject: Re: I need to recover files and directories.. Message-ID: <39321D38.1F9887C7@cequrux.com> References: <200005251730.KAA02309@mass.cdrom.com> <20000525134456.D28056@moose.bri.hp.com> <200005251730.KAA02309@mass.cdrom.com> <20000525194643.B532@myhakas.matti.ee> <4.3.1.2.20000526121516.00b4db20@msm.cl> <20000526173514.A16988@walton.maths.tcd.ie>
next in thread | previous in thread | raw e-mail | index | archive | help
David Malone wrote: > > On Fri, May 26, 2000 at 12:20:32PM -0400, Marcelo J. Iturbe wrote: > > > One of my users deleted a directory. > > It is not in the backups. > > Is there a way to recover? Is there a script that looks at the file systems > > and recovers lost file pointers, I imagine that the info might still be on > > the hard drive, just the sector was marked as usable.. > > If you're feeling really brave, and what was deleted was text then you > could try running strings on the raw disk device and grepping for the > data you're looking for. It works somethimes if you're lucky. > > strings /dev/rda0s1a | grep -10000 "keyword" Its a good idea to boot remount the affected file systems read-only ASAP as well. -- Dr Graham Wheeler E-mail: gram@cequrux.com Director, Research and Development WWW: http://www.cequrux.com CEQURUX Technologies Phone: +27(21)423-6065 Firewalls/VPN Specialists Fax: +27(21)424-3656 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?39321D38.1F9887C7>