I deleted a directory from an OpenBSD slice from my 2nd HD, and I need to recover a single file. I tried : http://myutil.com/2008/1/15/undelete-unrm-for-openbsd-4-2-with-dls but failed : # dls /dev/wd1x > /xxx/xx/undelete.bin Sector offset supplied is larger than disk image (maximum: 0) Help & thanks.
You use a backup. UNIX != Windows != OSX
Just open your disk in a hex editor and look for your data, it should be here.
Which hex editor do you advise? Should I have to umount the partition before? the partition is 40 GB size on a secondary disk, OpenBSD old slice, should I need at least such space (/tmp ?) to open it on the hex editor from my OpenBSD 4.3? Thanks!
If I'm not mistaken, openbsd zeroes the data when you delete a file. I remember trying to recover a file and then receiving a 0Kb file =) If you still want to try, you could try using the sleuth kit (available in ports) to recover something.
For the archives: unless it is specifically requested as rm -P Regards, David
For some unknown reason this prompted me to look at the rm manpage for the hell of it (yeah, bored and tired at the moment). There's an odd comment in the STANDARDS section which says "The interactive mode used to be a dsw command, a carryover from the an- cient past with an amusing etymology." That piqued my interest further (yeah, still bored and still tired at the moment) so I googled away and found this tidbit about the mysterious dsw command: http://dvlabs.tippingpoint.com/blog/2008/03/18/a-bit-of-history Gord
There is a very nice hex editor specialized in forensics called WinHex, but it runs on Windows. I don't know if there is an equivalent tool in the *nix world.
|Ingo Molnar||Re: [PATCH 0/3] v2 Make hierarchical RCU less IPI-happy and add more tracing|
|Jeremy Fitzhardinge||Re: Linux 126.96.36.199 and Linux 188.8.131.52 XEN Guest Support Broken x86_64 in BUILD|
|Nick Piggin||Re: [patch] CFS (Completely Fair Scheduler), v2|
|Gary Hade||Re: [PATCH 0/5][RFC] Physical PCI slot objects|
|Dave Johnson||Re: expected behavior of PF_PACKET on NETIF_F_HW_VLAN_RX device?|
|Arnd Bergmann||Re: 64-bit net_device_stats|
|Stephens, Allan||RE: [PATCH]: tipc: Fix oops on send prior to entering networked mode|
|frank.blaschka||[patch 3/5] [PATCH] qeth: support z/VM VSWITCH Port Isolation|
|Wu Fengguang||Re: [PATCH] dm9601: handle corrupt mac address|
|David Miller||Re: [PATCH net-2.6.24] Fix refcounting problem with netif_rx_reschedule()|
|Junio C Hamano||Re: [PATCH] [RFC] add Message-ID field to log on git-am operation|
|Junio C Hamano||Re: Handling large files with GIT|
|Karl||Re: [ANNOUNCE] pg - A patch porcelain for GIT|
|Josh Triplett||Re: [RFC][PATCH 00/10] Sparse: Git's "make check" target|
|Pierre Habouzit||Re: [PATCH] git-daemon: more powerful base-path/user-path settings, using formats.|
|Linux Kernel Mailing List||MIPS: RBTX4939: Fix IOC pin-enable register updating|
|Linux Kernel Mailing List||regulator: update email address for Liam Girdwood|
|Linux Kernel Mailing List||[SCSI] ipr: add message to error table|
|Linux Kernel Mailing List||powerpc/32: Wire up the trampoline code for kdump|
|Linux Kernel Mailing List||USB: omap_udc: sync with OMAP tree|
|Josh Grosse||Re: error : pkg add phpMyAdmin|
|Brian Candler||Re: OBSD's perspective on SELinux|
|Jacob Meuser||Re: /dev/audio: Device busy|
|David Vasek||Re: Inexpensive, low power, "wall wart" computer|
|William Boshuck||Re: Richard Stallman...|