Re: how to undelete?

2008-07-20 Thread Leonardo Rodrigues
I stand corrected then =) However, while trying to salvage some files, I do remember that some info about the file was zeroed. It really wasn't the whole file data, but something related to blocks and/or inodes, like data that leads to the actual data, if that makes sense... Anyway, I couldn't

Re: how to undelete?

2008-07-19 Thread Die Gestalt
On Mon, Jul 7, 2008 at 9:30 PM, macintoshzoom [EMAIL PROTECTED] wrote: Which hex editor do you advise? Should I have to umount the partition before? the partition is 40 GB size on a secondary disk, OpenBSD old slice, should I need at least such space (/tmp ?) to open it on the hex editor from

Re: how to undelete?

2008-07-19 Thread Nick Guenther
On Sat, Jul 19, 2008 at 5:23 AM, Die Gestalt [EMAIL PROTECTED] wrote: On Mon, Jul 7, 2008 at 9:30 PM, macintoshzoom [EMAIL PROTECTED] wrote: Which hex editor do you advise? Should I have to umount the partition before? the partition is 40 GB size on a secondary disk, OpenBSD old slice, should

Re: how to undelete?

2008-07-19 Thread Sviatoslav Chagaev
On Sat, 19 Jul 2008 10:18:19 -0400 Nick Guenther [EMAIL PROTECTED] wrote: On Sat, Jul 19, 2008 at 5:23 AM, Die Gestalt [EMAIL PROTECTED] wrote: On Mon, Jul 7, 2008 at 9:30 PM, macintoshzoom [EMAIL PROTECTED] wrote: Which hex editor do you advise? Should I have to umount the partition

Re: how to undelete?

2008-07-19 Thread dermiste
You might want to try Photorec : http://www.cgsecurity.org/wiki/PhotoRec good luck On Mon, Jul 7, 2008 at 1:48 PM, macintoshzoom [EMAIL PROTECTED] wrote: I deleted a directory from an OpenBSD slice from my 2nd HD, and I need to recover a single file. I tried :

Re: how to undelete?

2008-07-10 Thread Leonardo Rodrigues
If I'm not mistaken, openbsd zeroes the data when you delete a file. I remember trying to recover a file and then receiving a 0Kb file =) If you still want to try, you could try using the sleuth kit (available in ports) to recover something.

Re: how to undelete?

2008-07-10 Thread Henning Brauer
* Leonardo Rodrigues [EMAIL PROTECTED] [2008-07-10 08:50]: If I'm not mistaken, openbsd zeroes the data when you delete a file. no, that would be pointless. -- Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED] BS Web Services, http://bsws.de Full-Service ISP - Secure Hosting, Mail and DNS

Re: how to undelete?

2008-07-10 Thread David Vasek
On Thu, 10 Jul 2008, Henning Brauer wrote: * Leonardo Rodrigues [EMAIL PROTECTED] [2008-07-10 08:50]: If I'm not mistaken, openbsd zeroes the data when you delete a file. no, that would be pointless. For the archives: unless it is specifically requested as rm -P Regards, David

Re: how to undelete?

2008-07-10 Thread Gordon Grieder
On Thu, Jul 10, 2008 at 02:03:12PM +0200, David Vasek wrote: For the archives: unless it is specifically requested as rm -P For some unknown reason this prompted me to look at the rm manpage for the hell of it (yeah, bored and tired at the moment). There's an odd comment in the STANDARDS

how to undelete?

2008-07-07 Thread macintoshzoom
I deleted a directory from an OpenBSD slice from my 2nd HD, and I need to recover a single file. I tried : http://myutil.com/2008/1/15/undelete-unrm-for-openbsd-4-2-with-dls but failed : # dls /dev/wd1x /xxx/xx/undelete.bin Sector offset supplied is larger than disk image (maximum: 0) Help

Re: how to undelete?

2008-07-07 Thread Marco Peereboom
You use a backup. UNIX != Windows != OSX On Mon, Jul 07, 2008 at 05:48:31AM -0600, macintoshzoom wrote: I deleted a directory from an OpenBSD slice from my 2nd HD, and I need to recover a single file. I tried : http://myutil.com/2008/1/15/undelete-unrm-for-openbsd-4-2-with-dls but failed

Re: how to undelete?

2008-07-07 Thread Die Gestalt
Just open your disk in a hex editor and look for your data, it should be here.

Re: how to undelete?

2008-07-07 Thread macintoshzoom
Which hex editor do you advise? Should I have to umount the partition before? the partition is 40 GB size on a secondary disk, OpenBSD old slice, should I need at least such space (/tmp ?) to open it on the hex editor from my OpenBSD 4.3? Thanks! Die Gestalt wrote: Just open your disk in a hex