Forum Home
Press F1
 
Thread ID: 43282 2004-03-09 10:39:00 file recovery UNIX robsonde (120) Press F1
Post ID Timestamp Content User
221285 2004-03-09 10:39:00 HELP!!

i need to undelete / recover a file from a unix system.

the system is on SCSI disk and is on a sparc system.

any help would be nice.
robsonde (120)
221286 2004-03-10 08:12:00 I have undeleted on a Linux system using mc (Midnight Commander) - it has an undelete utility in the menu. See:

www.datarecoverypros.com
JohnD (509)
221287 2004-03-11 09:15:00 that looks good.....

problem now is that i cant get it on to the system with out writing to the disk....

how can I clone the disk?

if i make a backup of the diks and then install "Midnight Commander" then recover form the clone disk.
robsonde (120)
221288 2004-03-11 10:05:00 Knoppix has mc on it? You could try that... Chilling_Silently (228)
221289 2004-03-11 21:41:00 nice thought but, no.......

unless knoppix come in a SUN Sparc version?

the box is NOT intel/PC it's SUN server type hardware.
robsonde (120)
221290 2004-03-11 22:34:00 Remaster your own ;-)
Gentoo compiles on SPARC :p

Might be a good time to get yourself a small 2nd hand HDD from Trademe then?

Even booting the System from the HDD could over-write the Data.


Chill.
Chilling_Silently (228)
221291 2004-03-12 00:48:00 I belive the dd command could be used to clone the disk.

Check if you have it on the system and check around on the net for how to use it properly.

After you have cloned the disk boot from the clone and mount the original and mc should allow you to recover what you wont.
Also you may need to compile mc on the clone drive.

If dd fails and you can get the disk on a PC platform then ghost can make you a clone.

The only problem with the clone will be two copies of the OS on the same PC so check your licience<grin>
ugh1 (4204)
221292 2004-03-12 01:17:00 dd will be there . . . it's a standard Unix utility . ;-) No-one's going to bother about "2 copies of the OS" . Only one will boot . :D
So you need dd if=/dev/baddisk'sname of=/dev/scratchdisksname (or -- my preference -- "of=verybigigfile . containing . my . baddisk . dat" to a file which can then be played with . )

mc is a brilliant programme, but it might not understand the Sun filesystem .

If it's a nice easy format file (like plain text . . . ) and you know what the start looks like, you could grep the whole diskcopy file for that string . There's probably (I hope ;-)) an option which lets you know the record where it's been found . Then you can use dd again with the skip and count options to pick out the needed part . Messy, but it's amazing what you can do when desperate enough .
Graham L (2)
221293 2004-03-12 03:18:00 > dd will be there . . . it's a standard Unix utility .
> ;-) No-one's going to bother about "2 copies of the
> OS" . Only one will boot . :D
> So you need dd if=/dev/baddisk'sname
> of=/dev/scratchdisksname (or -- my preference --
> "of=verybigigfile . containing . my . baddisk . dat" to a
> file which can then be played with . )

Thanks for that, I always thought dd was very much platform specific, at least as far as options was concerned .

>
> mc is a brilliant programme, but it might not
> understand the Sun filesystem .

If it is compiled on Suns OS yes it will .

>
> If it's a nice easy format file (like plain text . . . )
> and you know what the start looks like, you could
> grep the whole diskcopy file for that string .
> There's probably (I hope ;-)) an option which lets
> you know the record where it's been found . Then you
> can use dd again with the skip and
> count options to pick out the needed part .
> Messy, but it's amazing what you can do when
> n desperate enough .

Sadly the few times I have done it it was binary data!!!
ugh1 (4204)
221294 2004-03-12 09:33:00 I rang my unix geek and was told the same thing..........


have done a DD to get a big .dat file and am now using grep to see if there is any trace of the data i want to get back.
robsonde (120)
1