From owner-freebsd-questions@FreeBSD.ORG Mon Sep 20 16:31:02 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D014016A4CE for ; Mon, 20 Sep 2004 16:31:02 +0000 (GMT) Received: from zephon.secspace.de (zephon.secspace.de [62.75.136.210]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5D98243D2D for ; Mon, 20 Sep 2004 16:31:02 +0000 (GMT) (envelope-from ml@ps102.de) Received: from astarte.office.volker.de (pD9E1C79A.dip.t-dialin.net [217.225.199.154]) by zephon.secspace.de (Postfix) with ESMTP id C50FC6EB20; Mon, 20 Sep 2004 18:30:59 +0200 (CEST) Date: Mon, 20 Sep 2004 18:31:01 +0200 From: Volker Kindermann To: Joachim Dagerot Message-ID: <20040920183101.1f4c4dee@astarte.office.volker.de> In-Reply-To: <200409200623.i8K6N9p19205@thunder.trej.net> References: <200409200623.i8K6N9p19205@thunder.trej.net> X-Mailer: Sylpheed-Claws 0.9.12a (GTK+ 1.2.10; i386-portbld-freebsd5.2.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: freebsd-questions@freebsd.org Subject: Re: Undelete on untouched partition X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Sep 2004 16:31:02 -0000 > I have a disk with one single slice and one partition: ad1s1d. I used > move to move ALL data on this disk to another location and after that > has the disk been unused. Is there a way to get the content back using > a copy of a FAT or similar? you may try some forensic tools like the coroners toolkit or sleuthkit. They should be able to recover some files. -volker