From: Kenn Humborg (kenn at domain bluetree.ie)
Date: Tue 11 May 1999 - 13:52:47 IST
John Ronan wrote:
>
> Yesterday I reformatted a partition that I shouldn't... Any ideas how I could
> trawl through it to try and get some data back?... (You can stop sniggering
> now...)
Formatted with what command exactly?
One possibility is to use
# strings /dev/hdxx
If it's files that you want to recover, it might be difficult...
Let's see... if you were to run mke2fs on an ext2 filesystem,
the superblock and group data structures should be created in
the same place as the old ones. The rest of the disk would be
left pretty much alone.
So, it we could run mke2fs again to find the locations of the
file system structures, nuke these structures and then try
running e2fsck to re-create them from stuff actually on the
disk, you might get something back.
Before you do anything, make an image copy of the partition
info a disk file so that you can try all sorts of crazy things
without fear of doing something irreversible.
# dd if=/dev/hdxx of=partition-backup.image bs=8192k
Kenn
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:04:11 GMT