Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Apr 2004 15:05:52 +0200
From:      Brad Knowles <brad.knowles@skynet.be>
To:        Steve Ames <steve@energistic.com>
Cc:        current@freebsd.org
Subject:   Re: A way to recover deleted files (just contents) from USF2
Message-ID:  <p0600201bbcaad037601d@[10.0.1.5]>
In-Reply-To: <20040420125025.GA30066@energistic.com>
References:  <4084F85B.5070909@delit.net> <20040420102632.GA36668@e-Gitt.NET> <20040420121423.GA1154@frontfree.net> <20040420125025.GA30066@energistic.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 7:50 AM -0500 2004/04/20, Steve Ames wrote:

>  That's kinda silly. Unless files are backed up at every edit then most of
>  us only have periodic filesystem backups. Lets say I just download a 150M
>  file and then accidentally delete it. Rather than wasting time and bandwidth
>  downloading again it'd be simpler to just 'unrm' it. Odds are that diskspace
>  and even inode haven't been recycled yet.

	Well, if you can't get ffsrecov to work, there's always Wietse 
Venema's "The Coroner's Toolkit", which includes "unrm" and "lazarus" 
tools.  See <http://www.porcupine.org/forensics/tct.html>.

	Of course, these kinds of things are never guaranteed to work, 
and if you have to install them on top of the filesystem you're 
trying to recover then odds are you're wiping out the very inodes you 
want to try to save.

-- 
Brad Knowles, <brad.knowles@skynet.be>

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
     -Benjamin Franklin, Historical Review of Pennsylvania.

   SAGE member since 1995.  See <http://www.sage.org/>; for more info.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?p0600201bbcaad037601d>