Re: how to undelete files

[Kevin Old <kold kold homelinux com>]

Here are a few links for recovering files on linux: 

http://www.sleuthkit.org
http://www.porcupine.org/forensics/tct.html#features
http://www.linux-forensics.com/downloads.html
http://lde.sourceforge.net/UNERASE.txt

Knoppix STD contains a lot of the tools mentioned above
http://www.knoppix-std.org/

I have personally used "recover" to undelete files and it works quite
well.
http://recover.sourceforge.net/linux/recover/

HTH,
Kevin


On Thu, 2004-05-20 at 14:54, Colin Paul Adams wrote:
> I don't know how I could do it, but somehow I did:
> 
> rm *
> 
> instead of rm *~
> 
> Aggh!
> 
> So I'm trying debugfs to see if I can undelete the files. I can get a
> listing of the deleted files with ls -l command, but the undel command
> does not seem to recover them for me.
> 
> Are there any instructions on this anywhere?
> -- 
> Colin Paul Adams
> Preston Lancashire
-- 
Kevin Old <kold kold homelinux com>