From owner-freebsd-questions@FreeBSD.ORG Tue May 1 13:43:51 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id DE3BB106566B for ; Tue, 1 May 2012 13:43:51 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) by mx1.freebsd.org (Postfix) with ESMTP id 9CCBA8FC12 for ; Tue, 1 May 2012 13:43:51 +0000 (UTC) Received: from r56.edvax.de (port-92-195-62-131.dynamic.qsc.de [92.195.62.131]) by mx01.qsc.de (Postfix) with ESMTP id 2D4D33CA16; Tue, 1 May 2012 15:43:43 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id q41Dhh5V001957; Tue, 1 May 2012 15:43:43 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Tue, 1 May 2012 15:43:43 +0200 From: Polytropon To: Edward M Message-Id: <20120501154343.4c2010ca.freebsd@edvax.de> In-Reply-To: <4F9F92CF.303@gmail.com> References: <201205010558.q415wAFu091478@mail.r-bonomi.com> <4F9F92CF.303@gmail.com> Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: UFS Crash and directories now missing X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Polytropon List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 May 2012 13:43:51 -0000 On Tue, 01 May 2012 00:37:51 -0700, Edward M wrote: > On 04/30/2012 10:58 PM, Robert Bonomi wrote: > > Reading_both_ of McKusick's "Design of .." books, and the 'Unix System > > Admininstration Handbook', by Nemeth, et al. is a good_start_. > > > > Having a bunch of the books from O'Reilley& Assoc. (), > > especially for 'standard' tools that you need to get the most out of, is > > also highly recommended. > > > > After realising I lack ton of knowledge, especially how the > internals work. I'm using this advice:-) . Except buying (good) books, you can also search for articles on the web. For example, "A Fast File System for UNIX" by M. K. McKusick is very interesting (at least it was for me when I lost all my important data). Some fs-related articles here: http://www.mckusick.com/articles.html They help you to understand how things work or what maybe makes them stop working. :-) Also the documentation of tools like TSK (ports/sleuthkit), ex TCT, is very helpful in understanding all the low-level details that _really_ matter when you _need_ to get your hands dirty in order to perform a forensic analysis or to recover important data. Sadly, that documentation has moved from local storage in /usr/local/share/doc/sleuthkit/ (where I've seen it the last time) to some on-line place or Wiki, something _I_ consider "a bad idea" especially in worst case considerations (i. e. no internet connection); the only content in README.txt, The docs that used to live in this directory now exist on the wiki: http://wiki.sleuthkit.org/ doesn't make it any better, sorry. -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...