goddamn who would use ext3 huh? in ext2 you delete a file and the inode info is kept intact.
ext3 loses the block list from the inode, meaning you have to search the flaming disk for a telltale file pattern. by the way in my case chris the tag is Exif, as there is a exif tag at the start of the file. thanks On Mon, 12 Jan 2004 12:19:58 +1300 Christopher Sawtell <[EMAIL PROTECTED]> wrote: > On Mon, 12 Jan 2004 11:13, you wrote: > > thanks clark, > > > > "no deleted inodes found" > > All is not lost yet. > The start of every jpeg file is similar to this: > [EMAIL PROTECTED] chris $ od -c stlogo.jpg | head -n 2 > > 0000000 377 330 377 340 \0 020 J F I F \0 001 001 001 \0 H > 0000020 \0 H \0 \0 377 333 \0 C \0 > > Test it out on a file from the same source as the ones you wish to recover, ie > you digicam. You can then search for that pattern using the method expounded > on:- > > http://recover.sourceforge.net/unix/ > > Recover the data using the dd utility. > > Pray that the files are not fragmented. > > > On Mon, 12 Jan 2004 10:19:34 +1300 > > > > Nick Rout <[EMAIL PROTECTED]> wrote: > > > Is there a way to undelete ext2/3 files. I have a directory of jpg files > > > (taken off my digicam) that I just deleted by accident. they are on a > > > sep partition mpunted as /mnt/hdb1 so i can ensure nothing else is > > > overwritten in the meantime. > Thus, presumably the files are all the same size? > > > > Thanks guys, and don't preach about backups please, I know, I know! I > > > was tidying my filesystem to make backups easier. > > -- > Sincerely etc. > Christopher Sawtell > > NB. This PC runs Linux. If you find a virus apparently from me, > it has forged the e-mail headers on someone else's machine. > Please do not notify me when this occurs. Thanks. > -- Nick Rout Barrister & Solicitor Christchurch, NZ Ph +64 3 3798966 Fax + 64 3 3798853 http://www.rout.co.nz [EMAIL PROTECTED]
