The Coroner Toolkit

[Kalef]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

L'avete mai provato?

- -------- Messaggio Originale  --------
Oggetto: [BLOG] Almost undelete (2006-03-18)
Data: Sat, 18 Mar 2006 05:03:04 +0000 (UTC)
Da: Marco d'Itri <md@Linux.IT>
Organizzazione: bofh.it network services
Gruppi discussione: it.fan.marco-ditri

(#110) Almost undelete

To make a long story short I obliterated the working directory of my
current project with a bad invocation of rsync, but I have been able to
recover most data with a few hours of work using the unrm and lazarus
programs from The Coroner's Toolkit[0] maintained by Wietse Venema and
Dan Farmer.

If you use ext3 and do not have an undelete command then this is the
next best thing.

(This current project is the major reason for why I have not been very
active with my Debian packages in the last month.)

[0] http://www.porcupine.org/forensics/tct.html

Posted at 02:15:06. [http://blog.bofh.it/id_110]
-
-----------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)

iD8DBQFEHJEC0grCHlokhjERArCDAJ9OZ+PqsOUrsW+jp5Utf6TnxukwpwCZAXbz
jgDqBrQinq/eAFmSnwPTLeQ=
=Lb4P
-----END PGP SIGNATURE-----