Is there a way to undelete?

Alexandre Biancalana biancalana at gmail.com
Tue Jun 12 02:55:28 UTC 2007


On 6/11/07, Kyrre Nygård <kyrreny at broadpark.no> wrote:
>
> Hello!



Hi !

I'm just curious if there's a way to undo a rm -rf.
>
There has to be something eqivalent in FreeBSD to all those recovery tools?


Maybe...  after that, mount your filesystem read-only, do a full block copy
(something like dd if=/dev/of/deleted_files of=/some/path/deleted.dd),
pray... and....

Install /usr/ports/sysutils/sleuthkit and /usr/ports/sysutils/autopsy

Look at www.sleuthkit.org, this site has useful articles on how to use these
tools.


Regards,
Alexandre


More information about the freebsd-questions mailing list