2013年6月4日 星期二

foremost recovery deleted cpp source code

1. download
   http://apt.sw.be/redhat/el6/en/x86_64/rpmforge/RPMS/foremost-1.5.7-1.el6.rf.x86_64.rpm

2. install
    rpm -ivh foremost-1.5.7-1.el6.rf.x86_64.rpm

3. make sure the location of your deleted files
    /home/user/<path-to-deleted-file>

[root@master01 ~]# df
Àɮרt²Î               1K-°Ï¬q      ¤w¥Î     ¥i¥Î ¤w¥Î% ±¾¸üÂI
/dev/sda2             20642428   2524600  17069252  13% /
tmpfs                  1027468         0   1027468   0% /dev/shm
/dev/sda1               198337     27712    160385  15% /boot
/dev/sda3            181515576    191876 172103248   1% /opt/kccs1
nfssvr:/home/nfs      20642432   2055808  17538048  11% /mnt/nfssvr
 
   /home/user/<path-to-deleted-file> belongs to /dev/sda2

4. recoverying the deleted files
   cd /home/user
   mkdir output
   foremost -vqQ -o output -t cpp -i /dev/sda2

5. lookup results
    ls -l /home/user/output


reference: http://www.unixmen.com/recover-deleted-files-with-foremost/
               http://maitnoobsatwork.blogspot.tw/2012/04/recover-lost-data-using-foremost.html

沒有留言:

張貼留言

文章分類