From owner-freebsd-fs@FreeBSD.ORG  Tue Nov 13 18:07:27 2007
Return-Path: <owner-freebsd-fs@FreeBSD.ORG>
Delivered-To: freebsd-fs@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0901316A418
	for <freebsd-fs@freebsd.org>; Tue, 13 Nov 2007 18:07:27 +0000 (UTC)
	(envelope-from fernando@schapachnik.com.ar)
Received: from mail.fac.org.ar (mail.fac.org.ar [200.59.49.21])
	by mx1.freebsd.org (Postfix) with ESMTP id 7D5F213C4B0
	for <freebsd-fs@freebsd.org>; Tue, 13 Nov 2007 18:07:25 +0000 (UTC)
	(envelope-from fernando@schapachnik.com.ar)
Received: from servidor1.cursosvirtuales.com.ar (www.cursosvirtuales.com.ar
	[200.59.46.198])
	by mail.fac.org.ar (8.12.11/8.12.11) with ESMTP id lADHhm6F019074
	for <freebsd-fs@freebsd.org>; Tue, 13 Nov 2007 14:43:49 -0300 (ART)
	(envelope-from fernando@schapachnik.com.ar)
Received: from servidor1.cursosvirtuales.com.ar (localhost [127.0.0.1])
	by servidor1.cursosvirtuales.com.ar (8.12.11/8.12.11) with ESMTP id
	lADHhlYO005158
	for <freebsd-fs@freebsd.org>; Tue, 13 Nov 2007 14:43:47 -0300 (ART)
	(envelope-from fernando@schapachnik.com.ar)
Received: (from fpscha@localhost)
	by servidor1.cursosvirtuales.com.ar (8.12.11/8.12.11/Submit) id
	lADHhlgu005157
	for freebsd-fs@freebsd.org; Tue, 13 Nov 2007 14:43:47 -0300 (ART)
	(envelope-from fernando@schapachnik.com.ar)
X-Authentication-Warning: servidor1.cursosvirtuales.com.ar: fpscha set sender
	to fernando@schapachnik.com.ar using -f
Date: Tue, 13 Nov 2007 14:43:47 -0300
From: Fernando Schapachnik <fernando@schapachnik.com.ar>
To: freebsd-fs@freebsd.org
Message-ID: <20071113174347.GA4288@servidor1.cursosvirtuales.com.ar>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.1i
X-OS: FreeBSD 4.10 - http://www.freebsd.org
Subject: Undeleting (possible?)
X-BeenThere: freebsd-fs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Filesystems <freebsd-fs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-fs>
List-Post: <mailto:freebsd-fs@freebsd.org>
List-Help: <mailto:freebsd-fs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-fs>,
	<mailto:freebsd-fs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 13 Nov 2007 18:07:27 -0000

Data recovery scenario (on 6.2): mistake while messing with Mail directory...

cd ~
mv Mail/xMail ..
rm -r xMail (should have rm'ed Mail)
No extra writes to the filesystem. Plenty of extra space.

Now I want to recover xMail (contains mbox files). sleuthkit only finds Mail/xMail with no content. It also doesn't find any of the contained mboxes.

Is there still hope? My (limited) understanding is the content should be more or less intact. Problem is: how do I find it?

Thanks for any pointer!

Fernando P. Schapachnik
fernando@schapachnik.com.ar