From owner-freebsd-questions@FreeBSD.ORG Sun Aug 18 19:47:08 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id C9E6AC10 for ; Sun, 18 Aug 2013 19:47:08 +0000 (UTC) (envelope-from freebsd@edvax.de) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 8CE542919 for ; Sun, 18 Aug 2013 19:47:08 +0000 (UTC) Received: from r56.edvax.de (port-92-195-92-43.dynamic.qsc.de [92.195.92.43]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id C97853C96C; Sun, 18 Aug 2013 21:47:06 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id r7IJl1lO002584; Sun, 18 Aug 2013 21:47:01 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Sun, 18 Aug 2013 21:47:01 +0200 From: Polytropon To: frank2@fjl.co.uk Subject: Re: undelete files in msdosfs Message-Id: <20130818214701.8c6fa6f5.freebsd@edvax.de> In-Reply-To: <52112075.9060008@fjl.co.uk> References: <20130818170039.GA1954@La-Habana> <52112075.9060008@fjl.co.uk> Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Polytropon List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Aug 2013 19:47:08 -0000 On Sun, 18 Aug 2013 20:28:53 +0100, Frank Leonhardt wrote: > I wrote something to do this a long time back, but I doubt I can find > the source quickly. The easiest way would be to download a forensic > live-CD like DEFT, which includes Undelete 360. Possibly over-kill but > it's handy to have one around. Most of these forensic tools use a GUI. Or UBCD, if I remember correctly. It also offers some of those tools, usually the text-mode variants (not CLI, but dialog-driven) which allow you to perform the tasks quickly and safely. > There is a program called fatback in the ports collection but I haven't > tried it. The tools on these forensic live-CDs are likely to be more > powerful by a long way. Most of the programs can be used from within FreeBSD. As I said, there are many of those available for free. Some of them require the user to _know_ what he does. The more complex the recovery task is, the more knowledge is involved. GUIs are good to hide this fact, and in worst case, you lose your data. Of course there is no problem delegating the recovery task to a service center for $$$. And sometimes, if you look close enough, you can see that those are using the free tools. :-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...