From nobody Sat Apr 16 12:44:43 2022 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 8C14D7CC1C9 for ; Sat, 16 Apr 2022 12:44:55 +0000 (UTC) (envelope-from biancalana@gmail.com) Received: from mail-pg1-x52f.google.com (mail-pg1-x52f.google.com [IPv6:2607:f8b0:4864:20::52f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4KgXw70NFmz4hVQ; Sat, 16 Apr 2022 12:44:55 +0000 (UTC) (envelope-from biancalana@gmail.com) Received: by mail-pg1-x52f.google.com with SMTP id t4so10815638pgc.1; Sat, 16 Apr 2022 05:44:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=Osj9S8gVdc8D+zEUSOcUYXh2zBJJDOaTXH3ZcTPjJdM=; b=gi/DPhCFx80sYe9piytor98MC/oT+eQr014BakVENs2OgYCjLjf80/JSpdd1p7JAu4 Lac277NGZL1FWT3KIV+WPjJvhItuNcFVye+pPZdoTEX7F+SwC5nXfwgiUanX3v/ECthS xo3lx3ruDhwJIesDJz4X0cBBngXep64OSMcGrbd31o/02hR50tn2kgFj0RA/KZjpDghl rPUQX7fuS6Qb/MoZVEhcc9Mf39KS8nDpeVDeUtXsonJk0wWgcwY6LvjgoqnsjEACxugq kM8Hwc4ofDIPIBpZ4/XMASlFOUTfa8YQ4Q7SHIKn0zY6XPE+HQmpxnaC2ODbz7L79bef slKA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Osj9S8gVdc8D+zEUSOcUYXh2zBJJDOaTXH3ZcTPjJdM=; b=AtBnbJepNl4pkagPUzgFSfsrOM43/+jWTciM8clyRygXE/V1apQquK/v/PttDVrVIA /KqRQo9bgF3I+R3vGzuGbnhqfj+8v/n2gZPIVMORxxP5YdqPkqZfCb0+mc7UkZJ/3ejE A6Ul09C8pdCHLJHnkRCOeclvZPW63AvhctlJcmHq2eecendCWrUcLTUsOZrJ+PZi/G+H xIjrdBiTLFJcd//PluH8b+Td3ayMeNNh0DKAYX0U1H6dWXxs5ZluEehKd+0N4QcbXeNr 1+ghvxRHPByIxgBnL3qfKiJxFNxWn8qZiM3w5wVPRXL5gXRYjZFf5NeLA+arVFK3wbJU qvFA== X-Gm-Message-State: AOAM532Q5wAHGF7iFjhun10Z4xna5Ox9O2Dp6uTGHIk3cElYu04AyQGi vLAvTLrOFCeyKIK0F8aKUR34NlZRPC7+S7h15yA= X-Google-Smtp-Source: ABdhPJzu6DCLHITxylkjOMDkp1bltUTvMhetiqkrlOZ9EzCmpWrv37SnI6QoUegHyqe1xWnxmvakRzI/EpJ8Mz8dIKQ= X-Received: by 2002:a63:f641:0:b0:3a2:cea2:bcf with SMTP id u1-20020a63f641000000b003a2cea20bcfmr2783971pgj.506.1650113094048; Sat, 16 Apr 2022 05:44:54 -0700 (PDT) List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org MIME-Version: 1.0 References: <70EA83C9-61AE-4256-9FF4-458197BA261D@freebsd.org> In-Reply-To: From: Alexandre Biancalana Date: Sat, 16 Apr 2022 09:44:43 -0300 Message-ID: Subject: Re: recover deleted file To: Sami Halabi Cc: FreeBSD Current , Matthias Apitz , grembo@freebsd.org Content-Type: multipart/alternative; boundary="000000000000cf5d9a05dcc4e425" X-Rspamd-Queue-Id: 4KgXw70NFmz4hVQ X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20210112 header.b="gi/DPhCF"; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of biancalana@gmail.com designates 2607:f8b0:4864:20::52f as permitted sender) smtp.mailfrom=biancalana@gmail.com X-Spamd-Result: default: False [-2.00 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20210112]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[4]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36:c]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[multipart/alternative,text/plain]; NEURAL_SPAM_SHORT(1.00)[1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; TO_DN_SOME(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; MID_RHS_MATCH_FROMTLD(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::52f:from]; MLMMJ_DEST(0.00)[freebsd-current]; FREEMAIL_TO(0.00)[gmail.com]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim] X-ThisMailContainsUnwantedMimeParts: N --000000000000cf5d9a05dcc4e425 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, 16 Apr 2022 at 09:33 Sami Halabi wrote: > how to do step 3 /? > > On Sat, Apr 16, 2022 at 2:59 PM Michael Gmelin wrote= : > >> Depends on the kind of file. >> >> You can always: >> 1. reboot the system into single user mode, mount the fs readonly >> (important to not overwrite data you want to recover) >> 2. dd the partition and into a file >> 3. find the content of the deleted file in the dump >> >> I was able to recover a complete codebase i deleted accidentally that wa= y >> a long time ago. >> >> Good luck >> Michael >> >> On 16. Apr 2022, at 13:52, Sami Halabi wrote: >> >> =EF=BB=BF >> well.. thats the trivial answer.. the problem is backups is a day >> before... if i can undelete it would save me loss of 1 day offset.. >> >> anyone? >> >> On Sat, Apr 16, 2022 at 2:49 PM Matthias Apitz wrote: >> >>> El d=C3=ADa s=C3=A1bado, abril 16, 2022 a las 02:23:25 +0300, Sami Hala= bi escribi=C3=B3: >>> >>> > Hi, >>> > is there anyway easy to restore deleted file by accident in UFS???? >>> >>> Yes, restore it from a backup media. >>> >>> matthias >>> >>> >>> -- >>> Matthias Apitz, =E2=9C=89 guru@unixarea.de, http://www.unixarea.de/ >>> +49-176-38902045 >>> Public GnuPG key: http://www.unixarea.de/key.pub >>> >>> Peace instead of NATO! =D0=9C=D0=B8=D1=80 =D0=B2=D0=BC=D0=B5=D1=81=D1= =82=D0=BE =D0=9D=D0=90=D0=A2=D0=9E! Frieden statt NATO! =C2=A1Paz en >>> vez de OTAN! >>> >>> >> >> -- >> Sami Halabi >> Information Systems Engineer >> NMS Projects Expert, FreeBSD SysAdmin Expert >> Asterisk Expert >> >> > > -- > Sami Halabi > Information Systems Engineer > NMS Projects Expert, FreeBSD SysAdmin Expert > Asterisk Expert > Look at autopsy/photorec https://www.cgsecurity.org/wiki/PhotoRec_Data_Carving --000000000000cf5d9a05dcc4e425 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Sat, 16 Apr 2022 at 09:33 Sami Halabi <sodynet1@gmail.com> wrote:
how to do step 3 /?

On Sat, Apr 16, = 2022 at 2:59 PM Michael Gmelin <grembo@freebsd.org> wrote:
=
Depends on the kind of file.

You can always:
1. reboot the sys= tem into single user mode, mount the fs readonly (important to not overwrit= e data you want to recover)
2. dd the partition and i= nto a file
3. find the content of the deleted file in= the dump

I was able to re= cover a complete codebase i deleted accidentally that way a long time ago.<= /div>

Good luck
Michael

On 16. Ap= r 2022, at 13:52, Sami Halabi <sodynet1@gmail.com> wrote:

=
=EF=BB=BF
well..= thats the trivial answer.. the problem is backups is a day before... if i = can undelete it would save me loss of 1 day offset..

any= one?

On Sat, Apr 16, 2022 at 2:49 PM Matthias Apitz <guru@unixarea.de> wrote:
=
El d=C3=ADa s=C3=A1= bado, abril 16, 2022 a las 02:23:25 +0300, Sami Halabi escribi=C3=B3:

> Hi,
> is there anyway easy to restore deleted file by accident in UFS????
Yes, restore it from a backup media.

=C2=A0 =C2=A0 =C2=A0 =C2=A0 matthias


--
Matthias Apitz, =E2=9C=89 guru@unixarea.de, http://www.unixarea.de/ +49-176-38902045
Public GnuPG key: http://www.unixarea.de/key.pub

Peace instead of NATO!=C2=A0 =D0=9C=D0=B8=D1=80 =D0=B2=D0=BC=D0=B5=D1=81=D1= =82=D0=BE =D0=9D=D0=90=D0=A2=D0=9E!=C2=A0 Frieden statt NATO! =C2=A1Paz en = vez de OTAN!



--
Sami Halabi
Information Systems= Engineer
NMS Projects Expert,=C2=A0FreeBSD SysAdmin Expert
Asterisk Expert


--
Sami Halab= i
Information Systems Engineer
NMS Projects Expert,=C2=A0FreeBSD SysAdmin Expert
Aster= isk Expert

=
Look at autopsy/photorec

--000000000000cf5d9a05dcc4e425--