Re: [sleuthkit-users] Recovery under ext3 after overwriting with same data tree
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2004-10-18 02:41:14
|
I'm still not quite sure what you did. Was /dev/sdc1 mounted on both /home/marc and /media/jaz? If so, you basically copied files from the 'work' folder to the root directory and now all directories have the corresponding files with a size of 0? Did you try to run fsck and check lost+found? It would seem that Linux would put the data somewhere instead of just losing it. If the files were deleted, then you will need to rely on a tool like foremost to recover the files .... I would make an image of the disk and then run fsck on it though... brian On Oct 16, 2004, at 2:16 PM, Marc Mausch wrote: > Hello, > > when intending to backup my data on /dev/sdc1 (mounted on /home/marc) > , I errorneously entered > mount /dev/sdc1 /media/jaz > instead of > mount /dev/sdd1 /media/jaz > > Then I drag&dropped with the Konqueror from /home/marc/work to > /media/jaz. I don`t know why it worked, but it did. Mayby because the > Konquerer has been open at /home/marc/work prior to the false > mounting. > > The result is that I now have the complete directory structure of my > data on /dev/sdc1, but without any bit of data (all files are 0 B). > > Is there any chance to recover the data? Filesystem is ext3 (SuSE 8.1) > |