Deleted file recovery on UFS filesystem?

From: Thomas M. Payerle <payerle_at_phys-mail1.physics.umd.edu>
Date: Tue, 11 May 1999 11:27:38 -0400 (EDT)

Not expecting a positive response, but thought I'd try anyway.

I am trying to recover a file that was deleted on an UFS filesystem. No, it
wasn't backed up, and yes I know it should have been, but to make a long
story short the filesystem it was originally on wasn't backed up due to a
series of mistakes/etc, but a couple copies of the file were placed on and
deleted from 2 temporary storage disks (intentionally not backed up). And of
course the disk on which original file was is now dead.

The UFS filesystems on which copies were placed are not very active, and it
is not unlikely that on one or both of them the creation and deletion of those
copies were the last 2 writes done to the disk. (Filesystems are currently
dismounted). Anyway, it seems to me that there is at least theoretically a
modest chance that the files are still quite intact on the disks, unlike the
norm when trying to recover deleted files on UFS.

Anyway, does anyone know of any (decent?) utilities to assist in trying to
recover these files? Or at least a good tutorial on structure of UFS file
systems (eg how to find and read the inode structure) and/or good raw device
reading utilities? Not expecting much, but thought I'd at least send out
feelers.


Tom Payerle
Dept of Physics payerle_at_physics.umd.edu
University of Maryland (301) 405-6973
College Park, MD 20742-4111 Fax: (301) 314-9525
Received on Tue May 11 1999 - 15:31:00 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:39 NZDT