| 1 |
Mick pisze: |
| 2 |
> On Tuesday 16 October 2007, Duane Griffin wrote: |
| 3 |
> |
| 4 |
>> On 15/10/2007, Neil Bothwick <neil@××××××××××.uk> wrote: |
| 5 |
>> |
| 6 |
>>> On Mon, 15 Oct 2007 23:26:02 +0200, dexter wrote: |
| 7 |
>>> |
| 8 |
>>>> While tar-ing it I've messed up the command and file got deleted - I |
| 9 |
>>>> need it back desperately |
| 10 |
>>>> |
| 11 |
>>> emerge testdisk and run photorec. |
| 12 |
>>> |
| 13 |
>> But be sure it doesn't compile on the same partition that contained |
| 14 |
>> the lost data! |
| 15 |
>> |
| 16 |
> |
| 17 |
> Suggest you try testdisk with a LiveCD and stop messing about with the drive |
| 18 |
> in question in case you overwrite the disk space in question. |
| 19 |
> |
| 20 |
Unfortunatelly it is impossible to use live cd, so is not messing with |
| 21 |
hard drive - there are services on it that must remain online |
| 22 |
I've asked around, and found pretty cool solution |
| 23 |
|
| 24 |
on another system I do: nc -l -p 21 > drive_image.dd |
| 25 |
on server with deleted file I do: dd if=/dev/hda1 | nc -q 2 <ip of |
| 26 |
another system> 21 |
| 27 |
|
| 28 |
after that I can play around with drive_image.dd using for example autopsy |
| 29 |
|
| 30 |
-- |
| 31 |
gentoo-user@g.o mailing list |
Archives