[Gloucs] recovering rieserfs

[David Greenaway]

The data is of interest, but not vital importance, worth me spending an
evening trying to recover it, but not worth putting anyone else to any
trouble on a professional basis or otherwise, (beyond asking for useful
suggestions on how best to proceed), but thanks for the offer.

Anyway last night I set to with dd and grep and now have a dozen or so 10meg
files on my working partition than I'm confident contain my e-mails somewhere
within them, at some point I'll tackle the task of reconstructing the files
but for now I'm happy to run fdsk.

David Greenaway


At 19:52 19/09/2002 +0100, Mark wrote:
>And having now re-read the email, emails shouldn't be a problem to get
>off the disk..if they are still on the magnetic media we can most likely
>get them off it.
>
>M
>
>-----Original Message-----
>From: gloucs-admin@mailman.lug.org.uk
>[mailto:gloucs-admin@mailman.lug.org.uk] On Behalf Of Mark
>Sent: 19 September 2002 19:41
>To: gloucs@mailman.lug.org.uk
>Subject: RE: [Gloucs] recovering rieserfs
>
>
>Im a forensics consultant if that helps, what type of files are you
>wanting off the disk?
>
>-----Original Message-----
>From: gloucs-admin@mailman.lug.org.uk
>[mailto:gloucs-admin@mailman.lug.org.uk] On Behalf Of David Greenaway
>Sent: 19 September 2002 19:49
>To: gloucs@mailman.lug.org.uk
>Subject: [Gloucs] recovering rieserfs
>
>
>
>
>Hi
>
>Any experts on recovering data from dead file systems out there?
>
>I have reiserfs on the / partition of my laptop. Last night the system
>hung (it does that sometimes) but on reboot I got a kernel panic with
>the message that the journal size was 0 rather than the expected 8192,
>to me this doesn't sound good. I got a rescue system up and can mount
>all the other partitions (where thankfully most of my data is) but
>couldn't persuade reiserfsck to mend /. I'm going to reinstall, but
>before scrapping the partition I'd like to get hold of a my last 2
>months of e-mails (I know I've been a bad boy, I should have been doing
>more backups) and one or two other small text files.
>
>I'm resigned to using dd and grep to ging the sectors containing the
>data, but before I do that I thought I'd see if there were any other
>suggestions.
>
>If it's at all relervent I'm (not) running suse 8.0 san a 2.4.? kernel.
>
>Thanks for your time.
>
>BTW enjoy heading about the meetings, unfortunately I'm busy Tuesday
>evenings so I can't make it.
>
>David Greenaway
>
>
>
>_______________________________________________
>Gloucs mailing list
>Gloucs@mailman.lug.org.uk
>http://mailman.lug.org.uk/mailman/listinfo/gloucs
>
>
>_______________________________________________
>Gloucs mailing list
>Gloucs@mailman.lug.org.uk
>http://mailman.lug.org.uk/mailman/listinfo/gloucs
>
>
>_______________________________________________
>Gloucs mailing list
>Gloucs@mailman.lug.org.uk
>http://mailman.lug.org.uk/mailman/listinfo/gloucs