> recover with dd. the better question is, how to find them. if you've > overwritten only the fat, than the problem is not that big: the fat is > used only to find the second and following clusters of a file; the first > cluster is stored in the directory, from which the file is referred to. > so you might find the starting sector of the file using some low-level > disk browser (like the diskedit for dos). there are also some disk editors > for linux, but they all suck more or less (pointers to _really_ good editors > are welcome). diskedit also has a string search function, so you might > search for the tar magic (or some filename at the beginning of the archive) > if more than the fat is destroyed.
I guess that's the big question: what *is* the tar magic that I'm looking for? There's a mini-howto on recovering data from ext2 partitions that I"ve used on a previous problem; I suppose I can look there. But once I start madly searching, what am I searching for? I expect I can come reasonaby close by looking for the first textual appearance of home/hawk (or I suppose there would first be home, then home/hawk . .), but I'm not sure what to do with this information (and, as usual, there's only one file I *really* care about :) hawk --
