On Tuesday 03 January 2006 05:51, Christian Lange wrote: > Hi > > I just wanted to type "rm *~" to kill the backup files in my folder. > Accidently, I slid of the key and mistyped the command. So it became "rm *" > an all my data is los. Under MS-DOS there is a command called "undelete" > which one can use to recover data. How is the command under Suse Linux > 10.0?
If your data is/was important, then STOP using the partition/disk! Get another disk and attach that to your system (slave). Use a liveCD (knoppix, SLAX, DSL, whatever you prefer) to boot your machine. dd the partition with the deleted files to your second disk. Now you have a copy of the affected disk/partition and you can start the process of learning data recovery. You can experiment with reiserfs debugging tools as well as TSK/Autopsy and data carving with foremost. The most important point is to stop using the partition/disk right away. The Reiser filesystem is very robust and makes good use of space, unlike MS filesystems. Deleted files are very difficult to recover from Reiser filesystems -- though not impossible. Feel free to contact me off-list if you need specific pointers. HTH -- Christopher Shanahan
pgpMObXPnUjRu.pgp
Description: PGP signature
