Re: Need help undeleting a Big gz compressed tar ball

2013-06-16 Thread Ralf Mardorf
PS: If the OP does remember the date, it might help to recover files only from this date or at least recover only files from a given time span, most, if not all tools provide this option too. -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trou

Re: Need help undeleting a Big gz compressed tar ball

2013-06-16 Thread Ralf Mardorf
On Sun, 2013-06-16 at 22:34 +1200, Chris Bannister wrote: > On Sat, Jun 15, 2013 at 01:14:47PM -0400, To Ro wrote: > > I started testing one of the recovered files, with a binary file editor can > > se a long sequence of zeros at the very beginning of it, took some > > precautions, and here is what

Re: Need help undeleting a Big gz compressed tar ball

2013-06-16 Thread Chris Bannister
On Sat, Jun 15, 2013 at 01:14:47PM -0400, To Ro wrote: > I started testing one of the recovered files, with a binary file editor can > se a long sequence of zeros at the very beginning of it, took some > precautions, and here is what I see > > ls -lh > total 5.8G > -r 1 xyz xyz 5.8G Jun 14

Re: Need help undeleting a Big gz compressed tar ball

2013-06-15 Thread green
To Ro wrote at 2013-06-15 12:14 -0500: > I started testing one of the recovered files, with a binary file editor can > se a long sequence of zeros at the very beginning of it, took some > precautions, and here is what I see > > ls -lh > total 5.8G > -r 1 xyz xyz 5.8G Jun 14 17:52 inode_170

Re: Need help undeleting a Big gz compressed tar ball

2013-06-15 Thread To Ro
On Fri, Jun 14, 2013 at 1:13 PM, green wrote: > To Ro wrote at 2013-06-14 06:02 -0500: > > At this point I have to wait about two weeks before I can afford > > getting a 2TB drive where I could dump the recovered parts and try to > > resuscitate it. Is there any site that would have information a

Re: Need help undeleting a Big gz compressed tar ball

2013-06-14 Thread green
To Ro wrote at 2013-06-14 06:02 -0500: > At this point I have to wait about two weeks before I can afford > getting a 2TB drive where I could dump the recovered parts and try to > resuscitate it. Is there any site that would have information about > forensics? The best way to prepare is by learning

Re: Need help undeleting a Big gz compressed tar ball

2013-06-14 Thread To Ro
On Thu, Jun 13, 2013 at 10:53 PM, green wrote: > Bob Proulx wrote at 2013-06-13 11:45 -0500: > > Good to hear that it was not ext3! > > For ext3, there is the ext4magic tool. (I have not used it.) > Thank you guys for all your input. The mention of scalpel, scrounge-ntfs reminded me that I shou

Re: Need help undeleting a Big gz compressed tar ball

2013-06-13 Thread green
Bob Proulx wrote at 2013-06-13 11:45 -0500: > Good to hear that it was not ext3! For ext3, there is the ext4magic tool. (I have not used it.) signature.asc Description: Digital signature

Re: Need help undeleting a Big gz compressed tar ball

2013-06-13 Thread Bob Proulx
To Ro wrote: > Here is another question: How does the creation of a tar.gz ball occur? Is > it That is one of those questions like Bilbo's riddle. It is created by the commands that created it and there isn't any other way to know. Except that you said it was 400G and that means almost certainly

Re: Need help undeleting a Big gz compressed tar ball

2013-06-13 Thread green
To Ro wrote at 2013-06-12 14:44 -0500: > Where: External SeaGate Drive of 1 TB > I had a Big.tar.gz file (about 400gb) with all the contents of my home > directory, in a maze of directories and subdirectories. > After extracting a directory with all its contents from Big.tar.gz to my > hard drive,

Re: Need help undeleting a Big gz compressed tar ball

2013-06-13 Thread Linux-Fan
On 06/13/2013 11:29 AM, To Ro wrote: > Thank you Bob. The Seagate drive has NTFS, I never reformatted it. There is > where the big tar file was. > Here is another question: How does the creation of a tar.gz ball occur? Is > it > > a) first compressing files and directories and then taring them > o

Re: Need help undeleting a Big gz compressed tar ball

2013-06-13 Thread To Ro
Thank you Bob. The Seagate drive has NTFS, I never reformatted it. There is where the big tar file was. Here is another question: How does the creation of a tar.gz ball occur? Is it a) first compressing files and directories and then taring them or b) taring and then compressing? If the procedure

Re: Need help undeleting a Big gz compressed tar ball

2013-06-12 Thread Bob Proulx
To Ro wrote: > After a few hours, my Big.tar.gz was gone. I tried testdisk, but has not > been very succesful. I was able to see and copy to another disk about 18 > files of different sizes, from 6 gb to 70 gb, with names such as inode_x > Running the command "file inode_x" yields not much,

Need help undeleting a Big gz compressed tar ball

2013-06-12 Thread To Ro
Where: External SeaGate Drive of 1 TB I had a Big.tar.gz file (about 400gb) with all the contents of my home directory, in a maze of directories and subdirectories. After extracting a directory with all its contents from Big.tar.gz to my hard drive, I decided to delete that particular directory. My

Re: Undeleting from a FAT partition

2003-08-17 Thread Richard Lyons
On Sunday 17 August 2003 6:05 pm, Neilen wrote: [...] > Thanks, this worked a charm. I happened to know the names of the files > I wanted to undelete, since they were just dscf.jpg, etc. But how > could one find out what the possible undeletable files are? It's a very long time ago since I u

Re: Undeleting from a FAT partition

2003-08-17 Thread Neilen
Hi Rob On Fri, 2003-08-15 at 10:21, Rob Sims wrote: > On Thursday 14 August 2003 02:08 am, Neilen wrote: > > Is there any linux based software that can undelete FAT files? I have > > not had much luck searching for "linux undelete FAT" on google. Or does > > anyone have a better idea? > > fsck.

Undeleting from a FAT partition

2003-08-14 Thread Neilen
Hi I foolishly killed a number of nice photos while renaming them. I tried to use recover, but it only managed to undelete the top 10% of every photo. However, they should still be undeletable on the camera, since I have not taken any more photos yet. The camera is, AFAIK, a FAT-16 USB storage

Re: [OT] undeleting on FAT32

2002-11-22 Thread Pigeon
On Fri, 22 Nov 2002 16:45:45 -0800, Osamu Aoki <[EMAIL PROTECTED]> wrote: >On Fri, Nov 22, 2002 at 03:18:51AM +, Pigeon wrote: > >Yah, I think at one point I wrote short special HEX dump utility of >clusters :0 (You know 12 bit = 8 X 1.5 table) Yeah, FAT32 is easier, no need to unpack it. >

Re: [OT] undeleting on FAT32

2002-11-22 Thread Osamu Aoki
On Fri, Nov 22, 2002 at 03:18:51AM +, Pigeon wrote: > On Thu, 21 Nov 2002 16:01:31 -0800, Craig Dickson <[EMAIL PROTECTED]> > wrote: > > >Osamu Aoki wrote: > > > >> I used to undelete DOS file by changing first byte of filename at the > >> directory entry list from 0x5F or something to ordina

Re: [OT] undeleting on FAT32

2002-11-22 Thread Frank Gevaerts
On Fri, Nov 22, 2002 at 11:01:06AM -0800, Charlie Reiman wrote: > > > -Original Message- > > From: Craig Dickson [mailto:[EMAIL PROTECTED]] > > Sent: Friday, November 22, 2002 10:36 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [OT] undeleting on

Re: [OT] undeleting on FAT32

2002-11-22 Thread Craig Dickson
Charlie Reiman wrote: > Just to add a random thought here: > > IIRC gzip has an internal checksum and can be validated quickly. You can, if > you have lots of time and this is life & death, essentially use brute force > attack on your candidate sector lists. For example if the file should be 10 >

RE: [OT] undeleting on FAT32

2002-11-22 Thread Charlie Reiman
> -Original Message- > From: Craig Dickson [mailto:[EMAIL PROTECTED]] > Sent: Friday, November 22, 2002 10:36 AM > To: [EMAIL PROTECTED] > Subject: Re: [OT] undeleting on FAT32 > > What I'm suggesting here is that you get a list of all the clust

Re: [OT] undeleting on FAT32

2002-11-22 Thread Craig Dickson
sean finney wrote: > On Fri, Nov 22, 2002 at 08:01:13AM -0800, Craig Dickson wrote: > > For that sort of thing, if the file is fragmented, you're probably more > > or less out of luck. What you'd probably want to do is build a map of > > the unallocated clusters on the partition, starting with the

Re: [OT] undeleting on FAT32

2002-11-22 Thread sean finney
On Fri, Nov 22, 2002 at 08:01:13AM -0800, Craig Dickson wrote: > For that sort of thing, if the file is fragmented, you're probably more > or less out of luck. What you'd probably want to do is build a map of > the unallocated clusters on the partition, starting with the first > cluster of the file

Re: [OT] undeleting on FAT32

2002-11-22 Thread Craig Dickson
sean finney wrote: > first, just because i think *someone* should say it, > > On Fri, Nov 22, 2002 at 12:58:15AM +0100, Tim Dijkstra wrote: > > On Thu, 21 Nov 2002 23:31:51 + > > "Joshua Thomas" <[EMAIL PROTECTED]> wrote: > > > > > kill your girlfriend, then kill yourself. > > that was comp

Re: [OT] undeleting on FAT32

2002-11-22 Thread sean finney
first, just because i think *someone* should say it, On Fri, Nov 22, 2002 at 12:58:15AM +0100, Tim Dijkstra wrote: > On Thu, 21 Nov 2002 23:31:51 + > "Joshua Thomas" <[EMAIL PROTECTED]> wrote: > > > kill your girlfriend, then kill yourself. that was completely unnecessary and unhelpful, plea

Re: [OT] undeleting on FAT32

2002-11-21 Thread Pigeon
On Thu, 21 Nov 2002 16:01:31 -0800, Craig Dickson <[EMAIL PROTECTED]> wrote: >Osamu Aoki wrote: > >> I used to undelete DOS file by changing first byte of filename at the >> directory entry list from 0x5F or something to ordinary character. >> >> Then you get back DOD file. (Floppy and not in s

Re: [OT] undeleting on FAT32

2002-11-21 Thread Kent West
Tim Dijkstra wrote: Hi, This is slightly OT, but the file _was_ deleted with rm ;) OK, so here's the problem: My girlfriend accidently deleted a file on a windows drive (which is not backuped). We managed to find 'cluster' and size of this file, now can I copy it somehow with this info. Perhaps

Re: [OT] undeleting on FAT32

2002-11-21 Thread Craig Dickson
Osamu Aoki wrote: > I used to undelete DOS file by changing first byte of filename at the > directory entry list from 0x5F or something to ordinary character. > > Then you get back DOD file. (Floppy and not in subdirectory, but it > should wok similarly...) That isn't close to being sufficient

Re: [OT] undeleting on FAT32

2002-11-21 Thread Tim Dijkstra
On Thu, 21 Nov 2002 23:31:51 + "Joshua Thomas" <[EMAIL PROTECTED]> wrote: > kill your girlfriend, then kill yourself. > > Girlfriend speaking here: It was a bug in konqueror: after a gz action konqueror refreshed and both items, .gz and normal were displayed. I (mea culpa, mea maxima culpa

Re: [OT] undeleting on FAT32

2002-11-21 Thread Osamu Aoki
On Fri, Nov 22, 2002 at 12:18:28AM +0100, Tim Dijkstra wrote: > Hi, > > This is slightly OT, but the file _was_ deleted with rm ;) > > OK, so here's the problem: My girlfriend accidently deleted a file on a > windows drive (which is not backuped). We managed to find 'cluster' and > size of this f

Re: [OT] undeleting on FAT32

2002-11-21 Thread Joshua Thomas
kill your girlfriend, then kill yourself. _ Tired of spam? Get advanced junk mail protection with MSN 8. http://join.msn.com/?page=features/junkmail -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe"

[OT] undeleting on FAT32

2002-11-21 Thread Tim Dijkstra
Hi, This is slightly OT, but the file _was_ deleted with rm ;) OK, so here's the problem: My girlfriend accidently deleted a file on a windows drive (which is not backuped). We managed to find 'cluster' and size of this file, now can I copy it somehow with this info. Perhaps with dd? Just shootin

Re: undeleting

2002-02-22 Thread Alvin Oga
hi ya kurdt to protect against "rm -rf"... - dont login as root...( if you were ) - have backups - run hourly incremental backup if you're really paranoid ( backed up into other server's disks ) - definitely run daily incremental backups into a different

Re: undeleting

2002-02-22 Thread Richard Weil
There's a mini-HOWTO; here's a link: http://www.linuxdoc.org/HOWTO/mini/Ext2fs-Undeletion.html Unmount the partition the data is on as quickly as possible and then follow the howto. If you do a google search there was also a recent article someplace about undelete. Unfortunately it seems to work

Re: undeleting

2002-02-22 Thread Dimitri Maziuk
* Elizabeth Barham ([EMAIL PROTECTED]) spake thusly: > Kurdt <[EMAIL PROTECTED]> writes: > > > does anyone know how to undelete some files? > > i did an rm -rf of my .C files of my programming project (it was coded > > in the Makefile, under the make clean option.. :) > > > > tnx Pauwel > > Th

Re: undeleting

2002-02-22 Thread Elizabeth Barham
Kurdt <[EMAIL PROTECTED]> writes: > does anyone know how to undelete some files? > i did an rm -rf of my .C files of my programming project (it was coded > in the Makefile, under the make clean option.. :) > > tnx Pauwel There is a book about programming (The Pragmattic Programmer?) that give

Re: undeleting

2002-02-22 Thread David Raeker-Jordan
Kurdt wrote: > does anyone know how to undelete some files? > i did an rm -rf of my .C files of my programming project (it was coded > in the Makefile, under the make clean option.. :) > You might try recover. Not sure if it is available for stable. -- David Raeker-Jordan mailto:[EMAIL PROTEC

Re: undeleting

2002-02-22 Thread Paolo Falcone
Kurdt wrote: >does anyone know how to undelete some files? >i did an rm -rf of my .C files of my programming project (it was coded >in the Makefile, under the make clean option.. :) There's a howto to do the undelete "voodoo" if you're using the ext2 filesystem. Basically it's risky, as you'll

Re: undeleting

2002-02-22 Thread Sebastiaan
Hi, On Fri, 22 Feb 2002, Kurdt wrote: > does anyone know how to undelete some files? > i did an rm -rf of my .C files of my programming project (it was coded > in the Makefile, under the make clean option.. :) > read the Ext2fs-Undeletion HOWTO's in /usr/share/doc/HOWTO/mini/ It is not an easy

undeleting

2002-02-22 Thread Kurdt
does anyone know how to undelete some files? i did an rm -rf of my .C files of my programming project (it was coded in the Makefile, under the make clean option.. :) tnx Pauwel

Re: Undeleting files

2001-07-31 Thread Alvin Oga
hi ya rett... "backups" !!! but since thats too late... list of various undelete stuff... http://www.linux-backup.net/undel.gwif.html its probably gonna be faster to just not worry about that lost file... c ya alvin On Tue, 31 Jul 2001, Sebastiaan wrote: > On Tue, 31 Jul 2001 [EMAI

Re: Undeleting files

2001-07-31 Thread Robert Storey
-- Forwarded Message -- Subject: Re: Undeleting files Date: Wed, 1 Aug 2001 07:40:23 +0800 From: Robert Storey <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] On Tuesday 31 July 2001 22:07, [EMAIL PROTECTED] wrote: > Is there any way to get > back deleted fi

Re: Undeleting files

2001-07-31 Thread Karsten M. Self
on Tue, Jul 31, 2001 at 04:06:02PM +0200, [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote: > Is there any way to get > back deleted files in Linux? From your comprehensive system backups. -- Karsten M. Self http://kmself.home.netcom.com/ What part of "Gestalt" don't you understand? T

Re: Undeleting files

2001-07-31 Thread Peter Jay Salzman
see the undeletion-howto. i restored a whole hard drive this way (lost partitions and filenames, but i got every single file back!!). totally invaluable. do it by hand before resorting to an automated process. it'll be a learning experience. pete begin: [EMAIL PROTECTED] <[EMAIL PROTECTED]>

Re: Undeleting files

2001-07-31 Thread Sebastiaan
On Tue, 31 Jul 2001 [EMAIL PROTECTED] wrote: > Is there any way to get > back deleted files in Linux? > Hmm, you seem very desperate. There is a mini howto written about this (Ext2fs-Undeletion). Prepare for a day of work. Greetz, Sebastiaan

Re: Undeleting files

2001-07-31 Thread aparra
[EMAIL PROTECTED] wrote: > > Is there any way to get > back deleted files in Linux? Try mc if you are using ext2fs! > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Undeleting files

2001-07-31 Thread rett
Is there any way to get back deleted files in Linux?

Undeleting files

2001-07-31 Thread rett
Is there any way to get back deleted files in Linux?

Undeleting files

2001-07-31 Thread rett
Is there any way to get back deleted files in Linux?

Undeleting files

2001-07-31 Thread rett
Is there any way to get back deleted files in Linux?

Undeleting files

2001-07-31 Thread rett
Is there any way to get back deleted files in Linux?