Recovering files on a raid...

Recovering files on a raid...

[Loïc Paillotin]

One of my machines as just been hacked. As you can guess, there is a
substantial amount of log files deleted.

I want to recover those log files, to trace the intruder. 
So I tried the utility 'recover' on my raid. It segfaults merrily :-).

So can someone point me to a way of recovering deleted files over a
raid1 partition? 
Thanks a lot for your help. 

Loic PAilltotin. 

Please reply to loic.paillotin@qualimucho.com since my mail is buggy and
I can't receive responses to the list :)

Thanks a lot , 
LP

Re: Recovering files on a raid...

[seth vidal]

On Mon, 2003-09-29 at 09:20, Loïc Paillotin wrote:
> One of my machines as just been hacked. As you can guess, there is a
> substantial amount of log files deleted.
> 
> I want to recover those log files, to trace the intruder. 
> So I tried the utility 'recover' on my raid. It segfaults merrily :-).
> 
> So can someone point me to a way of recovering deleted files over a
> raid1 partition? 
> Thanks a lot for your help. 
> 
> Loic PAilltotin. 
> 
> Please reply to loic.paillotin@qualimucho.com since my mail is buggy and
> I can't receive responses to the list :)

Go find the coroner's toolkit - that will help you resurrect some
deleted files, or parts of them.

-sv


-
To unsubscribe from this list: send the line "unsubscribe linux-raid" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html