recovery from mkfs error?
I've heard grml comes with forensic tools, and so was wondering if there's anything in the toolkit that might help me recover from an unpleasant mistake.
Trying to reformat a usb thumbdrive, I overlooked the fact that /dev/sda was my 160GB external hard drive (ext3), and that the thumbdrive was actually /dev/sdb. I issued this command:
mkfs -t vfat -I /dev/sda
The most important stuff was backed up, but there is some pain involved. Any suggestions (yes, I know... PAY ATTENTION!!) or pointers much appreciated.
Regards,
John
Well, had that also once.
First of all, if you have the place to make a full image of the disk (using dd/dd_rescue/whatever) do it before you do anything else. Then tools that might proof usefull:
* gpart: can automatically restore the old filesystem if you're lucky. * autopsy: lets you browse deleted files via a webbrowser * testdisk: scans and repairs lost partitions * photorec: usefull for easy recovery of pictures on the partition * magicrescue: does about the same as photorec, but for abitrary filetypes.
That are the tools I know of (and those I actually used)
Hope this helps you!
Jan-Pieter
* Jan-Pieter Jacobs janpieter.jacobs@gmail.com [080420 13:50]:
First of all, if you have the place to make a full image of the disk (using dd/dd_rescue/whatever) do it before you do anything else. Then tools that might proof usefull:
- gpart: can automatically restore the old filesystem if you're lucky.
- autopsy: lets you browse deleted files via a webbrowser
- testdisk: scans and repairs lost partitions
- photorec: usefull for easy recovery of pictures on the partition
- magicrescue: does about the same as photorec, but for abitrary filetypes.
That are the tools I know of (and those I actually used)
Thanks! I'll try this out soon as I have another disk lined up. In any case, at least I'll get to learn about some new tools.
John
Teilnehmer (2)
-
Jan-Pieter Jacobs -
John Magolske