I deleted a directory from an OpenBSD slice from my 2nd HD, and I need to recover a single file. I tried : http://myutil.com/2008/1/15/undelete-unrm-for-openbsd-4-2-with-dls but failed : # dls /dev/wd1x > /xxx/xx/undelete.bin Sector offset supplied is larger than disk image (maximum: 0) Help & thanks.
You use a backup. UNIX != Windows != OSX
Just open your disk in a hex editor and look for your data, it should be here.
Which hex editor do you advise? Should I have to umount the partition before? the partition is 40 GB size on a secondary disk, OpenBSD old slice, should I need at least such space (/tmp ?) to open it on the hex editor from my OpenBSD 4.3? Thanks!
If I'm not mistaken, openbsd zeroes the data when you delete a file. I remember trying to recover a file and then receiving a 0Kb file =) If you still want to try, you could try using the sleuth kit (available in ports) to recover something.
For the archives: unless it is specifically requested as rm -P Regards, David
For some unknown reason this prompted me to look at the rm manpage for the hell of it (yeah, bored and tired at the moment). There's an odd comment in the STANDARDS section which says "The interactive mode used to be a dsw command, a carryover from the an- cient past with an amusing etymology." That piqued my interest further (yeah, still bored and still tired at the moment) so I googled away and found this tidbit about the mysterious dsw command: http://dvlabs.tippingpoint.com/blog/2008/03/18/a-bit-of-history Gord
There is a very nice hex editor specialized in forensics called WinHex, but it runs on Windows. I don't know if there is an equivalent tool in the *nix world.
|Rusty Russell||Re: 2.6.22-rc3-mm1|
|Gautham R Shenoy||[PATCH 1/8] Enhance process freezer interface for usage beyond software suspend|
|Jeffrey V. Merkey||Re: Versioning file system|
|James Bottomley||Re: [PATCH -mm 1/2] scsi: remove dma_is_consistent usage in 53c700|
|David Miller||Re: NO_HZ: timer interrupt stuck|
|Oliver Kullmann||Re: how to move with history?|
|Junio C Hamano||Re: [PATCH 2/3] git-add--interactive: remove hunk coalescing|
|Miles Bader||Re: way to automatically add untracked files?|
|Harvey Harrison||Re: [SoC RFC] libsvn-fs-git: A git backend for the subversion filesystem|
|Alex Riesen||Re: git exclude patterns for directory|
|Linux Kernel Mailing List||V4L/DVB: tm6000: add special usb request to quit i2c tuner transfer|
|Linux Kernel Mailing List||OMAP: DSS2: SDI driver|
|Linux Kernel Mailing List||PCI: introduce pci_pcie_cap()|
|Linux Kernel Mailing List||netfilter: nf_conntrack_sip: add T.38 FAX support|
|Linux Kernel Mailing List||drivers/acpi: use kasprintf|
|Timo Teräs||ip xfrm policy semantics|
|David Miller||Re: [2.6.30-rc3] powerpc: compilation error of mace module|
|Patrick McHardy||Re: [rfc 02/13] [RFC 02/13] netfilter: nf_conntrack_sip: Add callid parser|
|Krzysztof Oledzki||Re: Error: an inet prefix is expected rather than "0/0".|
|Ted Bullock||Re: Proliant DL380 G3 cannot get on network|
|Úlfar M. E. Johnson||installing openbsd in xen|
|Eric Furman||Re: Defending OpenBSD Performance|
|Damien Miller||Re: Patching a SSH 'Weakness'|
|frantisek holop||Re: mount ffs as msdos, system hangs|