Re: Recover deleted file

2009-07-18 Thread Polytropon
On Sat, 18 Jul 2009 19:07:46 +0200, Morgan Wesström 
 wrote:
> sysutils/testdisk
> 
> I haven't used it in FreeBSD but I have used it successfully in Linux to
> undelete files and folders on NTFS partitions.

In worst case, there's always TSK (The Sleuth Kit), operating on
a level lower than the file system.



-- 
Polytropon
>From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Recover deleted file

2009-07-18 Thread Morgan Wesström
Leonardo M. Ramé wrote:
> Hi, I deleted a directory using "rm -rf directory" in a mounted NTFS volume 
> (with ntfs-3g) and I'm wondering if is there a way to recover this directory?
> 
> Thanks in advance,
> Leonardo.
> 
>

sysutils/testdisk

I haven't used it in FreeBSD but I have used it successfully in Linux to
undelete files and folders on NTFS partitions. Wiki to describe the
procedure is here:
http://www.cgsecurity.org/wiki/TestDisk:_undelete_file_for_NTFS

Regards
Morgan
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Recover deleted file

2009-07-18 Thread Glen Barber
On Sat, Jul 18, 2009 at 12:17 PM, Leonardo M. Ramé wrote:
>
> Hi, I deleted a directory using "rm -rf directory" in a mounted NTFS volume 
> (with ntfs-3g) and I'm wondering if is there a way to recover this directory?
>

Unless you can restore a backup of your data, no.

-- 
Glen Barber
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Recover deleted file

2009-07-18 Thread Leonardo M . Ramé

Hi, I deleted a directory using "rm -rf directory" in a mounted NTFS volume 
(with ntfs-3g) and I'm wondering if is there a way to recover this directory?

Thanks in advance,
Leonardo.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: Recover Deleted File FreeBSD 7.0

2008-08-14 Thread Roland Smith
On Thu, Aug 14, 2008 at 04:55:37PM +0800, Ruel Luchavez wrote:
> Hi List,
> 
> Do you have an idea how to recover a deleted directory or files in freebsd
> 7.0?

For starters, you should remount the filesystem that contains the
directory as read-only _immediately_ after the accident. Otherwise the
blocks containing parts of some of the the deleted files might be
overwritten, in which case complete retrieval is impossible.

> I'm very sad that one of the important directory in my server was deleted
> accidentally.

Of course the best way to recover data is to restore it from a
backup. If you don't have a backup, consider this a lesson why you
should.

> the command is use to delete the directory is:
> 
> rm -r folder
> 
> 
> Any idea guys how to recover it?

Try the sysutils/sleuthkit port?

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpMrsrZ1mthA.pgp
Description: PGP signature


Re: Recover Deleted File FreeBSD 7.0

2008-08-14 Thread Polytropon
Hi!

On Thu, 14 Aug 2008 16:55:37 +0800, "Ruel Luchavez" <[EMAIL PROTECTED]> wrote:
> Hi List,
> 
> Do you have an idea how to recover a deleted directory or files in freebsd
> 7.0?
> I'm very sad that one of the important directory in my server was deleted
> accidentally.
> the command is use to delete the directory is:
> 
> rm -r folder
> 
> 
> Any idea guys how to recover it?

I have the same probel, except that I hit PF8 in the Midnight
Commander which caused a recursion of unlink() to delete the files.

Of course I don't have a backup. :-(

As it has been mentioned by Diego F. Arias R., The Sleuth Kit
could offer some help. When TSK was TCT, there was a command
unrm which is dls today. Refer to

% man dls

for further information, and assert enough disk space because I
think you have to work from an image. Furthermore, assert that
no writes go to the disk you want to recover deleted files from.

There's a good piece of documentation:

% less /usr/local/share/doc/sleuthkit/ref_fs.txt

Maybe it's a bit explainatory and helpful.

First, make a dd copy of the partition, then run dls with the
proper options on it.

Sadly, I can't tell you more about this topic because I didn't
have any luck until today solving my similar problem.

Maybe you want to give back a little report when dls did work
for you?



-- 
Polytropon
>From Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Recover Deleted File FreeBSD 7.0

2008-08-14 Thread Diego F. Arias R.
On Thu, Aug 14, 2008 at 8:03 AM, Ruben de Groot <[EMAIL PROTECTED]> wrote:
>
> Restore from your backups (you DO have backups, don't you?) ;)
>
> Otherwise, there's no easy way to do this. If the data you deleted is very
> valuable, first thing to do is umount the filesystem, preventing the data
> of the deleted files from being overwritten by any new filesystem writes.
>
> There might be some companies specializing in recovering your data, but it'll
> cost you money.
> Ik the files are in ascii, you might get some of the data back by using
> strings, grep, dd and other tools on the disk device.
>
> G'luck,
> Ruben
>
> On Thu, Aug 14, 2008 at 04:55:37PM +0800, Ruel Luchavez typed:
>> Hi List,
>>
>> Do you have an idea how to recover a deleted directory or files in freebsd
>> 7.0?
>> I'm very sad that one of the important directory in my server was deleted
>> accidentally.
>> the command is use to delete the directory is:
>>
>> rm -r folder
>>
>>
>> Any idea guys how to recover it?
>>
>> Thanks in advance
>>
>>
>> FreeBSD rocks:D
>> ___
>> freebsd-questions@freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>

maybe using sleuthkit

-- 
mmm, interesante.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Recover Deleted File FreeBSD 7.0

2008-08-14 Thread Ruben de Groot

Restore from your backups (you DO have backups, don't you?) ;)

Otherwise, there's no easy way to do this. If the data you deleted is very 
valuable, first thing to do is umount the filesystem, preventing the data 
of the deleted files from being overwritten by any new filesystem writes.

There might be some companies specializing in recovering your data, but it'll
cost you money.
Ik the files are in ascii, you might get some of the data back by using 
strings, grep, dd and other tools on the disk device.

G'luck,
Ruben

On Thu, Aug 14, 2008 at 04:55:37PM +0800, Ruel Luchavez typed:
> Hi List,
> 
> Do you have an idea how to recover a deleted directory or files in freebsd
> 7.0?
> I'm very sad that one of the important directory in my server was deleted
> accidentally.
> the command is use to delete the directory is:
> 
> rm -r folder
> 
> 
> Any idea guys how to recover it?
> 
> Thanks in advance
> 
> 
> FreeBSD rocks:D
> ___
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Recover Deleted File FreeBSD 7.0

2008-08-14 Thread Ruel Luchavez
Hi List,

Do you have an idea how to recover a deleted directory or files in freebsd
7.0?
I'm very sad that one of the important directory in my server was deleted
accidentally.
the command is use to delete the directory is:

rm -r folder


Any idea guys how to recover it?

Thanks in advance


FreeBSD rocks:D
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Help: recover deleted file

2003-10-26 Thread Guy Van Sanden
Hello

I accidently ran rm on some files I still need (as a user)..  OK, that's
what you get for running a terminal early on a sunday morning :-(

The files were fairly recent, and are not on any of my backups yet
(something I will need to fix).

I tried to install ffsrecov, but it is broken on my system.
I'm running FreeBSD 5.1-RELEASE.
I deleted the files on a Linux box (Gentoo) over an NFS connection, they
were stored on the FreeBSD system.

Thanks for any help

Guy


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"