[Eug-lug] ext3 file recovery

[Alan]

On Fri, January 11, 2008 9:13 am, Mr O wrote:
>
> Thanks for any input. And FWIW, don't trust a late night rsync.
> Always verify!
>


What type of documents?
ext3 makes it difficult to "undelete" stuff, since it overwrites the block
pointer for the files.

If they're text, you might have luck with something like "strings /dev/sda
> /someotherdisk/somefile"

I've had a lot of luck with PhotoRec
<http://www.cgsecurity.org/wiki/PhotoRec>
for getting back deleted photos and its cousin
<http://www.cgsecurity.org/wiki/TestDisk>
for getting back partitions. Not sure how well it'd work with a recreated
partition, but it might be worth a shot.

Also, I highly advise that you make a dd of the original disk to another
disk and use that for recovery efforts.

-ajb