Jon Nelson on 15 Apr 2005 12:45:50 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] undo mkfs?


Art Alexion said:
>
> The sleuthkit looks promising.  Will the latter document help with data
> which was lost via mkfs.ext3 rather than rm -rf?
>

Uhhh...It might.  I haven't used it for that application but it doesn't
hurt to try.

Here is some more reading for you:

  http://www.fish.com/tct/help-recovering-file
  http://www.porcupine.org/forensics/lazarus.ps

And since you don't have alot of disk space you might want to check out:

  http://www.linux-forensics.com/downloads.html

To make sure I got this right...It _was_ ext3 and then you did an
mkfs.ext3?  Sorry.  I deleted you original post.

Jon




___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug