On 8/25/06, Siddhesh Poyarekar siddhesh.poyarekar@gmail.com wrote:
On 8/25/06, Rony Bill ronbillypop@yahoo.co.uk wrote:
The partition is intact it is only the files that were deleted using 'rm -rf'. Has anyone on this list
I think it's goodbye data if you've done an rm -rf.
One can still use the grep technique.
From the FAQ :
"Your only hope is to "grep" for parts of your files that have been deleted and hope for the best."
Well, I once deleted few files using rm -f and was able to recover it using the grep technique. Basically you grep for a particular string (that you know is unique to the file you deleted) on the entire partition, somthing like
grep -A400 -B400 'unique_string' /dev/your_partition > recover
this will save all the data along with 400 lines before the string and 400 lines after the string into the 'recover' file. I know this is a very painful method but if the data is that important, one has to do it :)
HTH
gautam.
-------- We would change the world.... but GOD wont give the source!!