[PLUG] undelete on a vfat filesystem?

[Tyler F. Creelan]

> Okay, here's a problem for you: how does one "undelete" files on a
> mounted vfat filesystem under GNU/Linux?  I deleted the files from

If its not ext2fs, you can always grep for the file, a la:

grep -a -B[size before] -A[size after] 'identifying string' /dev/sda1

I'm not sure if you can get the timestamps this way though. More info:
http://recover.sourceforge.net/unix/

Note: if you are using ext2, 'recover' is reliable, I think it even has a
gtk frontend now.


Tyler

On 3 May 2002, Russell Senior wrote:

>
> Okay, here's a problem for you: how does one "undelete" files on a
> mounted vfat filesystem under GNU/Linux?  I deleted the files from
> GNU/Linux also, from a SmartMedia card, via a USB media reader,
> mounted on /dev/sda1.  I have copies of the files, but I'd kind of
> like to have the timestamps too, which I neglected to grab before.
>
> Back in the dark ages, I used to have Norton (or god knows whose)
> tools to undelete files from FAT files systems.  Is there such a thing
> that runs under GNU/Linux?  Is there something somewhat reliable for
> doing it manually?
>
> Thanks!
>
> --
> Russell Senior         ``The two chiefs turned to each other.
> seniorr at aracnet.com      Bellison uncorked a flood of horrible
>                          profanity, which, translated meant, `This is
>                          extremely unusual.' ''
>
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>