Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Jun 2007 23:30:29 -0300
From:      "Alexandre Biancalana" <biancalana@gmail.com>
To:        "=?ISO-8859-1?Q?Kyrre_Nyg=E5rd?=" <kyrreny@broadpark.no>
Cc:        questions@freebsd.org
Subject:   Re: Is there a way to undelete?
Message-ID:  <8e10486b0706111930y7758be8nc733a84679f0dddf@mail.gmail.com>
In-Reply-To: <466DAF67.6080804@broadpark.no>
References:  <466DAF67.6080804@broadpark.no>

next in thread | previous in thread | raw e-mail | index | archive | help
On 6/11/07, Kyrre Nyg=E5rd <kyrreny@broadpark.no> wrote:
>
> Hello!



Hi !

I'm just curious if there's a way to undo a rm -rf.
>
There has to be something eqivalent in FreeBSD to all those recovery tools?


Maybe...  after that, mount your filesystem read-only, do a full block copy
(something like dd if=3D/dev/of/deleted_files of=3D/some/path/deleted.dd),
pray... and....

Install /usr/ports/sysutils/sleuthkit and /usr/ports/sysutils/autopsy

Look at www.sleuthkit.org, this site has useful articles on how to use thes=
e
tools.


Regards,
Alexandre



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8e10486b0706111930y7758be8nc733a84679f0dddf>