[Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread Rich Braun
I think we've all done this at some point: an rsync --delete or the equivalent, from an empty directory to a target directory that had stuff we didn't want to lose. In my case I have cron job that mirrors two systems. While swapping data around yesterday, I forgot about this cron job and rsync

Re: [Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread Scott Ehrlich
Try FTK Imager Lite. Also look into TSK (The Sleuth Kit) / Autopsy (web frontend for TSK). Was this a RAID or a single disk? Scott On Mon, Feb 4, 2013 at 11:33 AM, Rich Braun ri...@pioneer.ci.net wrote: I think we've all done this at some point: an rsync --delete or the equivalent, from an

Re: [Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread Jack Coats
Have you ever been able to get an undelete tool to work? I have used SpinRite from Gibson Research but it may not do well on ext* file systems, I haven't tried it with them. ext2 is the basis for ext3 and ext4 (they both SEEM to must add speed by cache/logs and disk/cpu overhead) while keeping

Re: [Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread Rich Pieri
On Mon, 4 Feb 2013 08:33:36 -0800 Rich Braun ri...@pioneer.ci.net wrote: rsync, don't ever delete them until I manually confirm. (Anyone else have a script for that? It'll be a bit hairy to write from scratch...) It's easy with btrfs. This is how I do btrfs backups (modulo some logic to

Re: [Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread Rich Braun
Scott Ehrlich srehrl...@gmail.com suggested: Try FTK Imager Lite. Also look into TSK (The Sleuth Kit) / Autopsy (web frontend for TSK). Thanks! I'll try those; the former seems to be a Windows-based tool but the TSK looks like it might work. One issue that I'm running into is that virtually

Re: [Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread Scott Ehrlich
On Mon, Feb 4, 2013 at 1:00 PM, Rich Braun ri...@pioneer.ci.net wrote: Scott Ehrlich srehrl...@gmail.com suggested: Try FTK Imager Lite. Also look into TSK (The Sleuth Kit) / Autopsy (web frontend for TSK). Thanks! I'll try those; the former seems to be a Windows-based tool but the TSK

Re: [Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread David Miller
SpinRite doesn't care about the filesystem. It's working at the block level. I've used it to recover tivo drives to working order many years ago. I'm pretty sure they were ext3. -- David On Mon, Feb 4, 2013 at 11:50 AM, Jack Coats j...@coats.org wrote: Have you ever been able to get an

Re: [Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread Scott Ehrlich
On Mon, Feb 4, 2013 at 1:00 PM, Rich Braun ri...@pioneer.ci.net wrote: Scott Ehrlich srehrl...@gmail.com suggested: Try FTK Imager Lite. Also look into TSK (The Sleuth Kit) / Autopsy (web frontend for TSK). Thanks! I'll try those; the former seems to be a Windows-based tool but the TSK

Re: [Discuss] Disk recovery utilities - dealing with deleted files

2013-02-04 Thread Edward Ned Harvey (blu)
From: discuss-bounces+blu=nedharvey@blu.org [mailto:discuss- bounces+blu=nedharvey@blu.org] On Behalf Of Rich Braun Lesson learned: obviously, I'm going to change that cron job to some sort of sequestration method: move the files someplace before this rsync, don't ever delete them