[opensuse] I did format the wrong partition, help needed ..
hi there, when reinstalling linux I did reformat the wron partition. it was formated with ext3 and now ext4. I am looking for tools to recover the lost data. mainly emails and such (for the "really" important data I do have a recent backup) thanks robert -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On sab, 2010-06-05 at 22:16 +0200, robert@redcor.ch wrote:
hi there, when reinstalling linux I did reformat the wron partition. it was formated with ext3 and now ext4. I am looking for tools to recover the lost data. mainly emails and such (for the "really" important data I do have a recent backup)
thanks robert
Hi Robert, I think you have not any chances to recover your data from a freshly formatted partition since when you do a formatting, all data present on disk are canceled. What you can is recover the lost information ONLY if you have saved it on a different media. I use to never format my /home dir, wherein I have my configs and personal data. -- Marco Calistri - http://mcalistri.blogspot.com openSUSE VERSION = 11.2 2.6.31.12-0.2-desktop Uptime: 20:29 up 0:06, 1 user, load average: 0,11, 0,54, 0,36
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday, 2010-06-05 at 20:35 -0300, Marco Calistri wrote:
On sab, 2010-06-05 at 22:16 +0200, robert@redcor.ch wrote:
hi there, when reinstalling linux I did reformat the wron partition. it was formated with ext3 and now ext4. I am looking for tools to recover the lost data. mainly emails and such (for the "really" important data I do have a recent backup)
I think you have not any chances to recover your data from a freshly formatted partition since when you do a formatting, all data present on disk are canceled.
Not really, the data is there (really erasing all data means overwriting everything, and that takes a lot of time; however, mkfs is fast). What is lost is the metadata, the index listing where is stored what. However, as to recover lost data... Dunno. Grepping on the entire device? - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAkwK8FUACgkQtTMYHG2NR9WDDwCgihE4ia6W9MioG7UwRZdhlaPJ E5YAoICcmUtRpHwCKIZw/kvp1iG+2ahD =rlio -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Saturday 05 June 2010 19:48:10 Carlos E. R. wrote:
However, as to recover lost data... Dunno. Grepping on the entire device?
I've used Spinrite from grc.com. Make sure you dont put data on that partition before you try the recovery. If you have, there's nothing you can do about the stuff you've overwritten. Richard -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Saturday 05 June 2010 19:48:10 Carlos E. R. wrote:
However, as to recover lost data... Dunno. Grepping on the entire device?
I've used Spinrite from grc.com. Make sure you dont put data on that partition before you try the recovery. If you have, there's nothing you can do about the stuff you've overwritten.
Richard
There are several ways to try to recover the data. It takes time, and effort. But alot of it can be restored. But that is provided you DONT write anything on to it. Stop using the disk at all. (Remove it from the system) PM me and we'll discuss it further. /Rikard Johnels
Richard Atcheson wrote:
On Saturday 05 June 2010 19:48:10 Carlos E. R. wrote:
However, as to recover lost data... Dunno. Grepping on the entire device?
I've used Spinrite from grc.com. Make sure you dont put data on that partition before you try the recovery. If you have, there's nothing you can do about the stuff you've overwritten.
Richard
Do not use Spinrite for this issue. Spinrite does not do this type of recovery. Felix is right, a format deletes the metadata telling the system where to look for each file, but the files are possibly still there. Stop using the disk. There are services that can help with recovering deleted files, and I've seen ads for software that claim do this, but have not used any so I can't recommend anything specific. Spinrite is good for recovering files or sectors that are going bad, but that is on a filesystem you have not deleted. It will not work on a file system where you have deleted a file or reformattted. Jim -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Marco Calistri wrote:
I use to never format my /home dir, wherein I have my configs and personal data.
On my main computer, /home is on a separate drive, mounted in a removable tray. This way, when I install a new OS version etc., there's no way it can touch that drive, as it has been pulled out of the computer. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
El 05/06/10 16:16, robert@redcor.ch escribió:
hi there, when reinstalling linux I did reformat the wron partition. it was formated with ext3 and now ext4. I am looking for tools to recover the lost data.
The short answer is no, it is very unlikely that you will recover your information, with luck you will get pieces of your information and have to start searching a needle in a haystack.
mainly emails and such
Use IMAP and you will never have such problem again. File deletion is foreva. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Cristian Rodríguez said the following on 06/06/2010 11:16 AM:
Use IMAP and you will never have such problem again.
+ 0.98 There are variations on that. My variation is to have a mailhub machine that uses fetchmail to pull in the mail from all my various accounts. I suppose you cold say that means there is a minimum tome they are 'exposed' on the various ISP's machine. It also means there is one-and-only-one repository (and archive) for my mail instead of the couple of dozen actual accounts. So on my laptop-that-is-a-workstation, be it at my desk or on the road, I don't have to remember or store all the passwords. If my laptop is stolen or appropriated by customs inspector I don't loose my email. (And that is the best justification against the modern trend for laptops with huge capacity disks I can think of). Away from my desk a ssh tunnel though my office firewall gives me access to everything on the mailhub. But the tunnel isn't automagic, so a thief won't get at the mail just by starting up the laptop. IMAP is good; IMAP is simple. Fetchmail is good. Not putting critical stuff where it can be easily zapped or lost is even better. And the mailhub gets backed up automatically ... None of this is "Rocket Science". If you think you can't afford a machine to use as a mailhub, then visit your Goodwill or Salvation Army Thrift Store and get a $25 special. Get a firewall there while you're about it. Of course if you have a corporate budget, you can call HP, IBM or Dell. It may be that my Salvation Army firewall at home has lasted longer than any of the HP/Dell equipment I've bought, but that's another matter. You don't often find rack-mounted blade servers at the SallyAnne :-) -- Almost all quality improvement comes via simplification of design,manufacturing, layout, processes, and procedures. -- Tom Peters -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Sun, Jun 6, 2010 at 11:16 AM, Cristian Rodríguez
El 05/06/10 16:16, robert@redcor.ch escribió:
hi there, when reinstalling linux I did reformat the wron partition. it was formated with ext3 and now ext4. I am looking for tools to recover the lost data.
The short answer is no, it is very unlikely that you will recover your information, with luck you will get pieces of your information and have to start searching a needle in a haystack.
mainly emails and such
Use IMAP and you will never have such problem again.
File deletion is foreva.
Such a pessimist! Here's some "data carving" tools. (http://www.forensicswiki.org/wiki/Tools:Data_Recovery#Carving) In general, they work by searching for known file headers then "assuming" contiguous data sectors / blocks from that point on. ext4 attempts to keep 128MB contiguous extents of data together so carving it should be very productive. I'm not sure about ext3. But for small emails stored one email per file, it seems most files will be 4K or less, so they should rarely if ever be fragmented. Greg -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Sun, Jun 6, 2010 at 8:13 PM, Cristian Rodríguez
El 06/06/10 15:26, Greg Freemyer escribió:
Such a pessimist!
"A pessimist is an optimist with experience." ;-)
I've done a few recoveries post reformat and re-install. You'd be amazed at how much info you can recover after the fact. Greg -- Greg Freemyer Head of EDD Tape Extraction and Processing team Litigation Triage Solutions Specialist http://www.linkedin.com/in/gregfreemyer CNN/TruTV Aired Forensic Imaging Demo - http://insession.blogs.cnn.com/2010/03/23/how-computer-evidence-gets-retriev... The Norcross Group The Intersection of Evidence & Technology http://www.norcrossgroup.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sunday, 2010-06-06 at 11:16 -0400, Cristian Rodríguez wrote:
mainly emails and such
Use IMAP and you will never have such problem again.
Provided you do not format the server... - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAkwMCkEACgkQtTMYHG2NR9Vt/wCfShTwa3ysPZ//H6vnE/p9O5n1 fWYAn0Piw3BfIaZSqw23MkcTbxZkYuPB =IxHV -----END PGP SIGNATURE-----
participants (10)
-
Anton Aylward -
Carlos E. R. -
Cristian Rodríguez -
Greg Freemyer -
James Knott -
Jim Flanagan -
Marco Calistri -
Richard Atcheson -
Rikard Johnels -
robert＠redcor.ch