Re: Recover Deleted File FreeBSD 7.0
Restore from your backups (you DO have backups, don't you?) ;) Otherwise, there's no easy way to do this. If the data you deleted is very valuable, first thing to do is umount the filesystem, preventing the data of the deleted files from being overwritten by any new filesystem writes. There might be some companies specializing in recovering your data, but it'll cost you money. Ik the files are in ascii, you might get some of the data back by using strings, grep, dd and other tools on the disk device. G'luck, Ruben On Thu, Aug 14, 2008 at 04:55:37PM +0800, Ruel Luchavez typed: Hi List, Do you have an idea how to recover a deleted directory or files in freebsd 7.0? I'm very sad that one of the important directory in my server was deleted accidentally. the command is use to delete the directory is: rm -r folder Any idea guys how to recover it? Thanks in advance FreeBSD rocks:D ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Recover Deleted File FreeBSD 7.0
On Thu, Aug 14, 2008 at 8:03 AM, Ruben de Groot [EMAIL PROTECTED] wrote: Restore from your backups (you DO have backups, don't you?) ;) Otherwise, there's no easy way to do this. If the data you deleted is very valuable, first thing to do is umount the filesystem, preventing the data of the deleted files from being overwritten by any new filesystem writes. There might be some companies specializing in recovering your data, but it'll cost you money. Ik the files are in ascii, you might get some of the data back by using strings, grep, dd and other tools on the disk device. G'luck, Ruben On Thu, Aug 14, 2008 at 04:55:37PM +0800, Ruel Luchavez typed: Hi List, Do you have an idea how to recover a deleted directory or files in freebsd 7.0? I'm very sad that one of the important directory in my server was deleted accidentally. the command is use to delete the directory is: rm -r folder Any idea guys how to recover it? Thanks in advance FreeBSD rocks:D ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] maybe using sleuthkit -- mmm, interesante. ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Recover Deleted File FreeBSD 7.0
Hi! On Thu, 14 Aug 2008 16:55:37 +0800, Ruel Luchavez [EMAIL PROTECTED] wrote: Hi List, Do you have an idea how to recover a deleted directory or files in freebsd 7.0? I'm very sad that one of the important directory in my server was deleted accidentally. the command is use to delete the directory is: rm -r folder Any idea guys how to recover it? I have the same probel, except that I hit PF8 in the Midnight Commander which caused a recursion of unlink() to delete the files. Of course I don't have a backup. :-( As it has been mentioned by Diego F. Arias R., The Sleuth Kit could offer some help. When TSK was TCT, there was a command unrm which is dls today. Refer to % man dls for further information, and assert enough disk space because I think you have to work from an image. Furthermore, assert that no writes go to the disk you want to recover deleted files from. There's a good piece of documentation: % less /usr/local/share/doc/sleuthkit/ref_fs.txt Maybe it's a bit explainatory and helpful. First, make a dd copy of the partition, then run dls with the proper options on it. Sadly, I can't tell you more about this topic because I didn't have any luck until today solving my similar problem. Maybe you want to give back a little report when dls did work for you? -- Polytropon From Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ... ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Recover Deleted File FreeBSD 7.0
On Thu, Aug 14, 2008 at 04:55:37PM +0800, Ruel Luchavez wrote: Hi List, Do you have an idea how to recover a deleted directory or files in freebsd 7.0? For starters, you should remount the filesystem that contains the directory as read-only _immediately_ after the accident. Otherwise the blocks containing parts of some of the the deleted files might be overwritten, in which case complete retrieval is impossible. I'm very sad that one of the important directory in my server was deleted accidentally. Of course the best way to recover data is to restore it from a backup. If you don't have a backup, consider this a lesson why you should. the command is use to delete the directory is: rm -r folder Any idea guys how to recover it? Try the sysutils/sleuthkit port? Roland -- R.F.Smith http://www.xs4all.nl/~rsmith/ [plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated] pgp: 1A2B 477F 9970 BA3C 2914 B7CE 1277 EFB0 C321 A725 (KeyID: C321A725) pgpMrsrZ1mthA.pgp Description: PGP signature
