RE: accidently deleted files from directory

["gert wohlgemuth" <wohlgemuth@ucdavis.edu>]

Thx,

I thought so that the data are gone and it's to much to glue it, cause all
binary data.

So time to step back to ext2, here at least I can restore the data in the
worst case.

...not that it ever happens again...

g.


-----Original Message-----
From: Chris Wedgwood [mailto:cw@f00f.org] 
Sent: Monday, August 28, 2006 9:17 PM
To: gert wohlgemuth
Cc: xfs@oss.sgi.com
Subject: Re: accidently deleted files from directory

On Mon, Aug 28, 2006 at 05:05:30PM -0700, gert wohlgemuth wrote:

> On the weekend it happens that I accidentally deleted 1 TB of data
> (rm -rdf /mnt/lcq). We have no backup of the data (internal reasons
> of the university...) and it would be nice to get the data somehow
> back.

ouch

> after I did a cat /dev/sda1 | less I could see that some data are still
> exist and are not overwritten. So I think "all" what I have todo is some
how
> get the journal back.

that won't suffice, the metadata showing where all the files are is
likely gone

> Is there anyway or is all hope lost?

if you know what the data looks like heuristically scan for it and try
to glue the fragments back together...