Hi I just wanted to type "rm *~" to kill the backup files in my folder. Accidently, I slid of the key and mistyped the command. So it became "rm *" an all my data is los. Under MS-DOS there is a command called "undelete" which one can use to recover data. How is the command under Suse Linux 10.0? Greetings, Chris ______________________________________________________________ Verschicken Sie romantische, coole und witzige Bilder per SMS! Jetzt bei WEB.DE FreeMail: http://f.web.de/?mc=021193
I just wanted to type "rm *~" to kill the backup files in my folder. > Accidently, I slid of the key and mistyped the command. So it became "rm *" an all my data is los. Under MS-DOS there is a command called "undelete" which one can use to recover data. How is the command under Suse Linux 10.0?
What file system are you using? Reiser? If you're using Reiser, you might be totally out of luck.... especially if you've done ANYTHING else on that partition that has done drive writing. Here are two possible solutions... no guarantees that they will work... http://www.goldfisch.at/knowledge/326 http://www.antrix.net/journal/techtalk/reiserfs_data_recovery_howto.comments C.
On Tue, 2006-01-03 at 11:51 +0100, Christian Lange wrote:
Hi
I just wanted to type "rm *~" to kill the backup files in my folder. Accidently, I slid of the key and mistyped the command. So it became "rm *" an all my data is los. Under MS-DOS there is a command called "undelete" which one can use to recover data. How is the command under Suse Linux 10.0?
Which is why I always recommend to people to use rm -i -if- they are using -any- wildcards at all. It might be a pain in the butt to answer 'y' for each file but in this case you would have saved more than just time. -- Ken Schneider UNIX since 1989, linux since 1994, SuSE since 1998
Hello community ! Ken Schneider wrote:
I just wanted to type "rm *~" to kill the backup files in my folder. Accidently, I slid of the key and mistyped the command. So it became "rm *" an all my data is los. Under MS-DOS there is a command called "undelete" which one can use to recover data. How is the command under Suse Linux 10.0?
Which is why I always recommend to people to use rm -i -if- they are using -any- wildcards at all. It might be a pain in the butt to answer 'y' for each file but in this case you would have saved more than just time.
That's why I use the "alias" feature of bash to set the "-i"-option for most of the "dangerous" commands dealing with file on CLI level ... alias cp='cp -pi' alias mv='mv -i' alias rm='rm -i' Unfortunately this is not the help the original poster needs now ... -- Never give up ! Best regards, Reinhard.
Reinhard Gimbel wrote:
That's why I use the "alias" feature of bash to set the "-i"-option for most of the "dangerous" commands dealing with file on CLI level ...
and so most of the time you type rm -f *... jdd -- Bonne année à tous :-) http://www.dodin.net Quelques images: http://dodin.org/galerie_photo_web/expo/index.html
Hello community ! jdd wrote:
That's why I use the "alias" feature of bash to set the "-i"-option for most of the "dangerous" commands dealing with file on CLI level ...
and so most of the time you type rm -f *...
No ! I use the "-f"-option in conjunction with the "-r"-option only to remove folders. The question is how often one needs to delete files, right ? ;-) -- Never give up ! Best regards, Reinhard.
JDD, On Tuesday 03 January 2006 04:43, jdd wrote:
Reinhard Gimbel wrote:
That's why I use the "alias" feature of bash to set the "-i"-option for most of the "dangerous" commands dealing with file on CLI level ...
and so most of the time you type rm -f *...
Check it out. The "-i" option trumps "-f", regardless of their order.
jdd
Randall Schulz
On Tue, Jan 03, 2006 at 06:49:15AM -0800, Randall R Schulz wrote:
On Tuesday 03 January 2006 04:43, jdd wrote:
Reinhard Gimbel wrote:
That's why I use the "alias" feature of bash to set the "-i"-option for most of the "dangerous" commands dealing with file on CLI level
and so most of the time you type rm -f *...
Check it out. The "-i" option trumps "-f", regardless of their order.
$ touch foo $ rm -if foo $ touch foo $ rm -fi foo rm: remove regular empty file `foo'? y $ Rasmus
Rasmus, On Tuesday 03 January 2006 07:20, Rasmus Plewe wrote:
On Tue, Jan 03, 2006 at 06:49:15AM -0800, Randall R Schulz wrote:
On Tuesday 03 January 2006 04:43, jdd wrote:
Reinhard Gimbel wrote:
That's why I use the "alias" feature of bash to set the "-i"-option for most of the "dangerous" commands dealing with file on CLI level
and so most of the time you type rm -f *...
Check it out. The "-i" option trumps "-f", regardless of their order.
$ touch foo $ rm -if foo $ touch foo $ rm -fi foo rm: remove regular empty file `foo'? y $
How very lame. What I said is true of "cp" but not of "rm!" (The cp behavior always bugs me 'cause adding the "-f" doesn't help and I have to enter the full path name to the binary if I want to overwrite a file with the cp command.)
Rasmus
Randall Schulz
On Tue, 3 Jan 2006, Reinhard Gimbel wrote:
That's why I use the "alias" feature of bash to set the "-i"-option for most of the "dangerous" commands dealing with file on CLI level ...
alias cp='cp -pi' alias mv='mv -i' alias rm='rm -i'
And when you know what you are doing you put a backslash before the command so the alias is not used. Kind regards, Aschwin Marsman -- aschwin@marsman.org http://www.marsman.org
On Tuesday 03 January 2006 05:51, Christian Lange wrote:
Hi
I just wanted to type "rm *~" to kill the backup files in my folder. Accidently, I slid of the key and mistyped the command. So it became "rm *" an all my data is los. Under MS-DOS there is a command called "undelete" which one can use to recover data. How is the command under Suse Linux 10.0?
If your data is/was important, then STOP using the partition/disk! Get another disk and attach that to your system (slave). Use a liveCD (knoppix, SLAX, DSL, whatever you prefer) to boot your machine. dd the partition with the deleted files to your second disk. Now you have a copy of the affected disk/partition and you can start the process of learning data recovery. You can experiment with reiserfs debugging tools as well as TSK/Autopsy and data carving with foremost. The most important point is to stop using the partition/disk right away. The Reiser filesystem is very robust and makes good use of space, unlike MS filesystems. Deleted files are very difficult to recover from Reiser filesystems -- though not impossible. Feel free to contact me off-list if you need specific pointers. HTH -- Christopher Shanahan
Christian Lange wrote:
Hi
I just wanted to type "rm *~" to kill the backup files in my folder. Accidently, I slid of the key and mistyped the command. So it became "rm *" an all my data is los. Under MS-DOS there is a command called "undelete" which one can use to recover data. How is the command under Suse Linux 10.0?
Greetings, Chris
The only really efective tool..is called "backups".
Hi :) Cristian Rodriguez wrote:
Christian Lange wrote:
Hi
I just wanted to type "rm *~" to kill the backup files in my folder. Accidently, I slid of the key and mistyped the command. So it became "rm *" an all my data is los. Under MS-DOS there is a command called "undelete" which one can use to recover data. How is the command under Suse Linux 10.0?
Greetings, Chris
The only really efective tool..is called "backups".
If you haven't touched anything (no new files, no more deletions, ...) you can get your info back with fornesic tools such as tct. Another way (more elaborate) is: 1.- unplug your HDD (HDD_rm) 2.- plugit into another computer 3.- create an image of the deleted drive (HHD_rm) onto the new drive (HDD_good) 4.- now you can deal with the image as if it were a text file: you can use split, vi, grep, sort, strings, wc, ... on it and search for text. HTH Rafa -- Rafa Grimán Systems Engineer Silicon Graphics Spain Santa Engracia , 120 - Planta Baja 28003 Madrid, Spain Tel: +34 91 3984200 Fax: +34 91 3984201 Móvil: +34 628 117 940 http://www.sgi.com
On 01/18/2006 09:57 AM Rafa Grimán wrote:
If you haven't touched anything (no new files, no more deletions, ...) you can get your info back with fornesic tools such as tct.
As he said it is his / partition, so probably there is something changed
Another way (more elaborate) is: 1.- unplug your HDD (HDD_rm)
He said it was his laptop, where he couldnt unplug the HDD.
2.- plugit into another computer 3.- create an image of the deleted drive (HHD_rm) onto the new drive (HDD_good) 4.- now you can deal with the image as if it were a text file: you can use split, vi, grep, sort, strings, wc, ... on it and search for text.
Apart from that, this way should work. OJ -- Eine Bank ist eine Einrichtung, von der Sie sich Geld leihen können - vorausgesetzt, Sie können nachweisen, dass Sie es nicht brauchen. (Mark Twain)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Wednesday 2006-01-18 at 09:57 +0100, Rafa Grimán wrote:
If you haven't touched anything (no new files, no more deletions, ...) you can get your info back with fornesic tools such as tct.
If the partition is ext2/ext3, then 'mc' can undelete files. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFDzqF4tTMYHG2NR9URArU+AJ4gIO5ot+EbZA9e/DKBmSI1iC8IyQCfc2Ev Mp7r74j+ugHoxgxaAZO5b4s= =oK9h -----END PGP SIGNATURE-----
participants (13)
-
Aschwin Marsman -
Carlos E. R. -
Christian Lange -
Christopher Shanahan -
Clayton -
Cristian Rodriguez -
jdd -
Johannes Kastl -
Ken Schneider -
Rafa Grimán -
Randall R Schulz -
Rasmus Plewe -
Reinhard Gimbel