From owner-freebsd-questions@FreeBSD.ORG Tue Nov 11 08:41:23 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A351C16A4CE for ; Tue, 11 Nov 2003 08:41:23 -0800 (PST) Received: from be-well.no-ip.com (lowellg.ne.client2.attbi.com [66.30.200.37]) by mx1.FreeBSD.org (Postfix) with ESMTP id DFD4F43FB1 for ; Tue, 11 Nov 2003 08:41:22 -0800 (PST) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: by be-well.no-ip.com (Postfix, from userid 1147) id 79D6D5D; Tue, 11 Nov 2003 11:41:21 -0500 (EST) Sender: lowell@be-well.ilk.org To: carmoda References: <3FAEE02E.5040002@carmoda.com> From: Lowell Gilbert Date: 11 Nov 2003 11:41:15 -0500 In-Reply-To: <3FAEE02E.5040002@carmoda.com> Message-ID: <44oevic0yc.fsf@be-well.ilk.org> Lines: 15 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: freebsd-questions@freebsd.org Subject: Re: recovering data X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Nov 2003 16:41:23 -0000 carmoda writes: > I would like to know if there is a proceedure i might be able to > follow to recover a file that was deleted on a FreeBSD fileserver with > SAMBA from a Windows 2000 workstation.. > > i know the file's name and i have powered down the server. The usual approach is to get it from your backups. The inode would help more than the filename, but you still might be able to retrieve it if you are thoroughly knowledgeable in filesystem internals. Since you're asking the question, I assume you're not. You might look around for a tool that (if I recall correctly) is called the Coroner's Toolkit.