Gentoo Archives: gentoo-user

From: Dan Farrell <dan@×××××××××.cx>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] recover log file
Date: Tue, 16 Oct 2007 23:51:10
Message-Id: 20071016183515.54a498de@pascal.spore.ath.cx
In Reply to: Re: [gentoo-user] recover log file by dexter
1 On Wed, 17 Oct 2007 01:10:33 +0200
2 dexter <dexters84@×××××.com> wrote:
3
4 >
5 >
6 > Mick pisze:
7 > > On Tuesday 16 October 2007, Duane Griffin wrote:
8 > >
9 > >> On 15/10/2007, Neil Bothwick <neil@××××××××××.uk> wrote:
10 > >>
11 > >>> On Mon, 15 Oct 2007 23:26:02 +0200, dexter wrote:
12 > >>>
13 > >>>> While tar-ing it I've messed up the command and file got deleted
14 > >>>> - I need it back desperately
15 > >>>>
16 > >>> emerge testdisk and run photorec.
17 > >>>
18 > >> But be sure it doesn't compile on the same partition that contained
19 > >> the lost data!
20 > >>
21 > >
22 > > Suggest you try testdisk with a LiveCD and stop messing about with
23 > > the drive in question in case you overwrite the disk space in
24 > > question.
25 > Unfortunatelly it is impossible to use live cd, so is not messing
26 > with hard drive - there are services on it that must remain online
27 > I've asked around, and found pretty cool solution
28 >
29 > on another system I do: nc -l -p 21 > drive_image.dd
30 > on server with deleted file I do: dd if=/dev/hda1 | nc -q 2 <ip of
31 > another system> 21
32 >
33 > after that I can play around with drive_image.dd using for example
34 > autopsy
35 >
36
37 I'm afraid I don't think that's going to work too well for you. You
38 see, hardware diagnostics generally employ methods of reading older
39 data on the drive because it leaves some kind of electromagnetic
40 'residue' on the drive. In other words, the diagnostic access you need
41 requires access to the hard drive you want to diagnose.
42
43 --
44 gentoo-user@g.o mailing list

Replies

Subject Author
Re: [gentoo-user] recover log file Mick <michaelkintzios@×××××.com>