Re: [opensuse] undelete files that were deletet with "rm"?
Thanks for the hint, but the lost data is on my notebook. I cannot easily connect my IDE disk to it (don´t have an adapter). I´ve got a 250GB external USB-Harddisk, but it´s formatted with NTFS and Linux cannot write to this filesystem. I guess it is a lot faster when I sit down one or two days and rewrite the data (the deleted files where the PHP Files of our Hompage at the Economics Chair of our university) than to try and handle with different disks and programs. ;) I hoped there would be an easy to use programm to recover the deleted files. Install, rescue, be happy - you know? Like i´m used to from Windows (sometimes).^^ opensuse@opensuse.org schrieb am 03.01.06 17:49:08:
On Tuesday 03 January 2006 05:51, Christian Lange wrote:
Hi
I just wanted to type "rm *~" to kill the backup files in my folder. Accidently, I slid of the key and mistyped the command. So it became "rm *" an all my data is los. Under MS-DOS there is a command called "undelete" which one can use to recover data. How is the command under Suse Linux 10.0?
If your data is/was important, then STOP using the partition/disk! Get another disk and attach that to your system (slave). Use a liveCD (knoppix, SLAX, DSL, whatever you prefer) to boot your machine. dd the partition with the deleted files to your second disk. Now you have a copy of the affected disk/partition and you can start the process of learning data recovery. You can experiment with reiserfs debugging tools as well as TSK/Autopsy and data carving with foremost. The most important point is to stop using the partition/disk right away. The Reiser filesystem is very robust and makes good use of space, unlike MS filesystems. Deleted files are very difficult to recover from Reiser filesystems -- though not impossible. Feel free to contact me off-list if you need specific pointers.
HTH
-- Christopher Shanahan
______________________________________________________________ Verschicken Sie romantische, coole und witzige Bilder per SMS! Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193
On Tuesday 03 January 2006 19:38, Christian Lange wrote:
Thanks for the hint, but the lost data is on my notebook. I cannot easily connect my IDE disk to it (don´t have an adapter). I´ve got a 250GB external USB-Harddisk, but it´s formatted with NTFS and Linux cannot write to this filesystem. I guess it is a lot faster when I sit down one or two days and rewrite the data (the deleted files where the PHP Files of our Hompage at the Economics Chair of our university)
Then they must be on the webserver. No loss, you can retrieve all of them from there.
than to try and handle with different disks and programs. ;) I hoped there would be an easy to use programm to recover the deleted files. Install, rescue, be happy - you know? Like i´m used to from Windows (sometimes).^^
Well, don't delete from the CLI, delete from KDE, it has only "Move to Trash" with this purpose exactly. If you use the CLI, it's supposed that you're expert and don't misstype characters :-) he-he BTW, this type of question should be put on suse-linux-e@suse.com This list is for developement talk, alpha, beta etc
participants (2)
-
Christian Lange
-
Silviu Marin-Caea