From owner-freebsd-questions@FreeBSD.ORG  Thu Aug 14 17:44:58 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 9B6371065676
	for <freebsd-questions@freebsd.org>;
	Thu, 14 Aug 2008 17:44:58 +0000 (UTC)
	(envelope-from rsmith@xs4all.nl)
Received: from smtp-vbr2.xs4all.nl (smtp-vbr2.xs4all.nl [194.109.24.22])
	by mx1.freebsd.org (Postfix) with ESMTP id 449CE8FC15
	for <freebsd-questions@freebsd.org>;
	Thu, 14 Aug 2008 17:44:58 +0000 (UTC)
	(envelope-from rsmith@xs4all.nl)
Received: from slackbox.xs4all.nl (slackbox.xs4all.nl [213.84.242.160])
	by smtp-vbr2.xs4all.nl (8.13.8/8.13.8) with ESMTP id m7EHiu5S047293;
	Thu, 14 Aug 2008 19:44:57 +0200 (CEST)
	(envelope-from rsmith@xs4all.nl)
Received: by slackbox.xs4all.nl (Postfix, from userid 1001)
	id 885A4BAA1; Thu, 14 Aug 2008 19:44:56 +0200 (CEST)
Date: Thu, 14 Aug 2008 19:44:56 +0200
From: Roland Smith <rsmith@xs4all.nl>
To: Ruel Luchavez <ruel.freebsd@gmail.com>
Message-ID: <20080814174456.GA49444@slackbox.xs4all.nl>
References: <ee9dc2b40808140155q5c71564cuda63b669c6450249@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="FCuugMFkClbJLl1L"
Content-Disposition: inline
In-Reply-To: <ee9dc2b40808140155q5c71564cuda63b669c6450249@mail.gmail.com>
X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725
X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt
X-GPG-Notice: If this message is not signed, don't assume I sent it!
User-Agent: Mutt/1.5.18 (2008-05-17)
X-Virus-Scanned: by XS4ALL Virus Scanner
Cc: freebsd-questions@freebsd.org
Subject: Re: Recover Deleted File FreeBSD 7.0
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Aug 2008 17:44:58 -0000


--FCuugMFkClbJLl1L
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Aug 14, 2008 at 04:55:37PM +0800, Ruel Luchavez wrote:
> Hi List,
>=20
> Do you have an idea how to recover a deleted directory or files in freebsd
> 7.0?

For starters, you should remount the filesystem that contains the
directory as read-only _immediately_ after the accident. Otherwise the
blocks containing parts of some of the the deleted files might be
overwritten, in which case complete retrieval is impossible.

> I'm very sad that one of the important directory in my server was deleted
> accidentally.

Of course the best way to recover data is to restore it from a
backup. If you don't have a backup, consider this a lesson why you
should.

> the command is use to delete the directory is:
>=20
> rm -r folder
>=20
>=20
> Any idea guys how to recover it?

Try the sysutils/sleuthkit port?

Roland
--=20
R.F.Smith                                   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)

--FCuugMFkClbJLl1L
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)

iEYEARECAAYFAkikbxgACgkQEnfvsMMhpyXVqwCgp8h8TQr+/JZ0WLVKBeVfVeZA
wHUAn0aRfO8fNRY99Rv/of4BxqbYSJ31
=J2Um
-----END PGP SIGNATURE-----

--FCuugMFkClbJLl1L--