From owner-freebsd-questions@FreeBSD.ORG Thu Feb 28 08:40:40 2013 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 3125490D for ; Thu, 28 Feb 2013 08:40:40 +0000 (UTC) (envelope-from dimitar.vassilev@gmail.com) Received: from mail-qe0-f51.google.com (mail-qe0-f51.google.com [209.85.128.51]) by mx1.freebsd.org (Postfix) with ESMTP id ECC4C146B for ; Thu, 28 Feb 2013 08:40:39 +0000 (UTC) Received: by mail-qe0-f51.google.com with SMTP id nd7so1224519qeb.10 for ; Thu, 28 Feb 2013 00:40:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=Dw5+lw2QX/SPi/lWd+DEvm+7rPKcuEjb9EY/nA3T1+A=; b=y/nbjuFdSanAchugyVukYwoc6xL6YCeoHcr6Mr7IwZhECOxMv91jACTlR5rgZpzz30 KiwKqMF/9GdNmhzLWrnSbCNVQYUT8HHKTz4u/xE79lbSMess1BzO1ST4w3F1wzlAPrrF RwdZpszgl9CT6ja8o9n6mAARfpwAyUG1LzOh0HQeYV1owLFj0t3mCN3SEntvwf4Y21s6 1njYKeG1C8nIJZdqgPAukIRNhX4Ay7M04/NXiitl+7N+4vyGhMvomdSKv4ErvJ/zcsj+ J30HP+qSN4ZghZz0TKqQrzSYQaV+T4oA61G+U3+mCXwknuFNqk3Ixa+ywG84iYSTt3wk ZAPA== MIME-Version: 1.0 X-Received: by 10.224.111.4 with SMTP id q4mr12635582qap.39.1362040459161; Thu, 28 Feb 2013 00:34:19 -0800 (PST) Received: by 10.49.118.129 with HTTP; Thu, 28 Feb 2013 00:34:19 -0800 (PST) In-Reply-To: References: <512ECA4A.3030202@gmail.com> Date: Thu, 28 Feb 2013 10:34:19 +0200 Message-ID: Subject: Re: Fat Fingered An 'rm -rf' of Important Files From: Dimitar Vassilev To: Ben Cottrell Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: "Questions @ FreeBSD" , "Joseph A. Nagy, Jr" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Feb 2013 08:40:40 -0000 2013/2/28 Ben Cottrell > On Feb 27, 2013, at 19:08, "Joseph A. Nagy, Jr" > wrote: > > If we can skip the finger wagging on that part I'd appreciate it. > > No finger-wagging from this quarter at least! > > Something I've sometimes done to retrieve text content is to run a > "strings" on the disk device (the thing in /dev). You obviously want > to redirect the "strings" output to someplace that's *not* on the same > filesystem, or it'll be overwriting what you're trying to recover! > > It's usually possible, through searching for key words and phrases, > to get back any text content that you know was there. > > Sorry! And... good luck!! > > ~Ben > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > http://forums.freebsd.org/showthread.php?t=940 www.daemonforums.org/showthread.php?t=1801 http://wiki.sleuthkit.org/index.php?title=FS_Analysis