From owner-freebsd-current@FreeBSD.ORG  Tue Apr 20 06:16:15 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3218D16A4CE
	for <current@freebsd.org>; Tue, 20 Apr 2004 06:16:15 -0700 (PDT)
Received: from mail.delit.net (delit.net [194.67.27.146])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E1EBF43D45
	for <current@freebsd.org>; Tue, 20 Apr 2004 06:16:14 -0700 (PDT)
	(envelope-from smir@delit.net)
Received: by mail.delit.net (Postfix, from userid 426)
	id F1D1D35011; Tue, 20 Apr 2004 17:16:13 +0400 (MSD)
Received: from delit.net (ppp0-27.pppoe.mtu-net.ru [81.195.0.27])
	by mail.delit.net (Postfix) with ESMTP
	id 9458535024; Tue, 20 Apr 2004 17:16:12 +0400 (MSD)
Message-ID: <4085229C.2000303@delit.net>
Date: Tue, 20 Apr 2004 17:16:12 +0400
From: Andrey Smirnov <smir@delit.net>
User-Agent: Mozilla Thunderbird 0.5 (X11/20040324)
X-Accept-Language: ru, en-us, en
MIME-Version: 1.0
To: Brad Knowles <brad.knowles@skynet.be>
References: <4084F85B.5070909@delit.net> <20040420102632.GA36668@e-Gitt.NET>
	<20040420121423.GA1154@frontfree.net> <20040420125025.GA30066@energistic.com>
	<p0600201bbcaad037601d@[10.0.1.5]>
In-Reply-To: <p0600201bbcaad037601d@[10.0.1.5]>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: current@freebsd.org
Subject: Re: A way to recover deleted files (just contents) from USF2
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Apr 2004 13:16:15 -0000

Brad Knowles wrote:
> At 7:50 AM -0500 2004/04/20, Steve Ames wrote:
> 
>>  That's kinda silly. Unless files are backed up at every edit then 
>> most of
>>  us only have periodic filesystem backups. Lets say I just download a 
>> 150M
>>  file and then accidentally delete it. Rather than wasting time and 
>> bandwidth
>>  downloading again it'd be simpler to just 'unrm' it. Odds are that 
>> diskspace
>>  and even inode haven't been recycled yet.
> 
> 
>     Well, if you can't get ffsrecov to work, there's always Wietse 
> Venema's "The Coroner's Toolkit", which includes "unrm" and "lazarus" 
> tools.  See <http://www.porcupine.org/forensics/tct.html>.
> 
>     Of course, these kinds of things are never guaranteed to work, and 
> if you have to install them on top of the filesystem you're trying to 
> recover then odds are you're wiping out the very inodes you want to try 
> to save.
> 
I've got ffsrecov to work in several hours of fixing it up to work with 
UFS2. But actually it can do nothing with deleted files - their inodes 
are all zeroes, excluding uid/gid, which is less important to me....
Seems like everything is lost... ;-((((