Date: Thu, 17 Mar 2005 13:24:09 -0500 From: Yanek Korff <yanek@mail.com> To: freebsd-questions@freebsd.org Subject: Data Recovery Message-ID: <4239CB49.40707@mail.com>
next in thread | raw e-mail | index | archive | help
Are there any ways to recover files from rm -rf dirname after a few days, assuming there have been few if any writes to the filesystem since? I've been playing with tools like foremost and jpegrescue a bit... and running tests on other filesystems, but it doesn't appear that I'm getting full images back from the disk. Looking at an octal dump of a disk image (dd if=/dev/blah of=/some/file), I can find the file header... and about 20k of the file, generally... and then there's garbage. Presumably the file's been broken into blocks and there's inode table data to consider... The tests I"m running are trying to find jpeg files that HAVEN'T been deleted from the filesystem. My real scenario of course differs. Pointers/rtfm welcome. -Yanek.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4239CB49.40707>