[olug] *sigh* Need a Linux / ext3 unerase tool...

[Jordan Fox]

I don't have time to look for the programs now, but I know that
programs exist to actually "look" at the hard drive or an image
(probably the better option, if you have enough space on another
drive) using a hex editor...  this would allow you to manually (well,
you could search for keywords to speed things up) scan through the
drive to find the scripts.  Since they're all text files, this should
work.

I don't know if your dd command above would work or not (my off the
top of the head scripting abilities aren't that great), but it looks
like it should... sounds like you know more about that part than me.
I would certainly be interested in hearing if piping the output of dd
works to scan a drive for text.

Jordan

On Fri, Apr 2, 2010 at 12:37 PM, Dan Linder <dan at linder.org> wrote:
> On Fri, Apr 2, 2010 at 11:19, T. J. Brumfield <enderandrew at gmail.com> wrote:
>
>> ext3 is really hard to recover files from sadly. The best thing to do
>> is not to write *anything* to that drive for the time being.
>>
>> The last time I looked, this was the best solution:
>>
>> http://www.cgsecurity.org/wiki/PhotoRec
>>
>
>
> Thanks for the pointers (Ben, TJ, and Jordan)...
>
> Sadly my files are only a few home-made scripts so I don't have a good
> template for them to use, and since they are so small I doubt there's much
> these can do.
>
> I did see that it's a "feature" of ext3 that it over-writes the first few
> sectors of a file after deletion.  (
> http://batleth.sapienti-sat.org/projects/FAQs/ext3-faq.html)
>
> Sadly, I was moving files from my backup system (after freshly reformatting
> my desktop) when I accidentally deleted a full directory instead of just a
> file.  Didn't notice it until rsync had finished and _both_copies were now
> gone. :-(
>
> Live and learn I guess. :-)
>
> Dan
>
> Maybe I'll use "dd if=/dev/sda6 | strings | less" and search for some key
> comments in the code that I do remember... :-/
>
> --
> ***************** ************* *********** ******* ***** *** **
> "Quis custodiet ipsos custodes?"
>   (Who can watch the watchmen?)
>   -- from the Satires of Juvenal
> "I do not fear computers, I fear the lack of them."
>   -- Isaac Asimov (Author)
> ** *** ***** ******* *********** ************* *****************
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/mailman/listinfo/olug
>



-- 
"Do not be anxious about anything, but in everything, by prayer and
petition, with thanksgiving, present your requests to God.  And the
peace of God, which transcends all understanding, will guard your
hearts and minds in Christ Jesus."  Phil 4:6-7

"The shortest distance between a problem and a solution is the
distance between your knees and the floor."  Anonymous