> It was a brand new partition, and only two files should ever have been > written there (tars of /home and /etc), so I presume that they were > written continuously. > probably ...
> Any suggestions on how to recover these? > recover with dd. the better question is, how to find them. if you've overwritten only the fat, than the problem is not that big: the fat is used only to find the second and following clusters of a file; the first cluster is stored in the directory, from which the file is referred to. so you might find the starting sector of the file using some low-level disk browser (like the diskedit for dos). there are also some disk editors for linux, but they all suck more or less (pointers to _really_ good editors are welcome). diskedit also has a string search function, so you might search for the tar magic (or some filename at the beginning of the archive) if more than the fat is destroyed. hth -- Hi! I'm a .signature virus! Copy me into your ~/.signature, please! -- Real programmers don't comment their code. It was hard to write, it should be hard to understand. -- Become part of the world's biggest computer cluster - join http://www.distributed.net/
