Date: Tue, 20 Apr 2004 17:16:12 +0400 From: Andrey Smirnov <smir@delit.net> To: Brad Knowles <brad.knowles@skynet.be> Cc: current@freebsd.org Subject: Re: A way to recover deleted files (just contents) from USF2 Message-ID: <4085229C.2000303@delit.net> In-Reply-To: <p0600201bbcaad037601d@[10.0.1.5]> References: <4084F85B.5070909@delit.net> <20040420102632.GA36668@e-Gitt.NET> <20040420121423.GA1154@frontfree.net> <20040420125025.GA30066@energistic.com> <p0600201bbcaad037601d@[10.0.1.5]>
next in thread | previous in thread | raw e-mail | index | archive | help
Brad Knowles wrote: > At 7:50 AM -0500 2004/04/20, Steve Ames wrote: > >> That's kinda silly. Unless files are backed up at every edit then >> most of >> us only have periodic filesystem backups. Lets say I just download a >> 150M >> file and then accidentally delete it. Rather than wasting time and >> bandwidth >> downloading again it'd be simpler to just 'unrm' it. Odds are that >> diskspace >> and even inode haven't been recycled yet. > > > Well, if you can't get ffsrecov to work, there's always Wietse > Venema's "The Coroner's Toolkit", which includes "unrm" and "lazarus" > tools. See <http://www.porcupine.org/forensics/tct.html>. > > Of course, these kinds of things are never guaranteed to work, and > if you have to install them on top of the filesystem you're trying to > recover then odds are you're wiping out the very inodes you want to try > to save. > I've got ffsrecov to work in several hours of fixing it up to work with UFS2. But actually it can do nothing with deleted files - their inodes are all zeroes, excluding uid/gid, which is less important to me.... Seems like everything is lost... ;-((((
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4085229C.2000303>