Re: [HS] Urgence ... effacement de fichier

[Camille Dominique <camille.dominique@csv.ica.uni-stuttgart.de>]

On Sun, Jan 06, 2002 at 03:52:51PM +0000, Frédéric Loiret wrote:
> Je voulais donc savoir comment il était possible de récupérer ce fichier
> et avec quels outils éventuels.

premiere chose: ne plus rien ecrire sur la partition concernee !

quel systeme de fichiers ? 
si c'est ext2, et en esperant qu'il n'y a pas eu trop de creation de
nouveaux fichiers sur la partition en question, tu pourrais essayer
'recover' (paquet debian du meme nom)

'apt-cache show recover' donne:

Package: recover
Priority: optional
Section: admin
Installed-Size: 41
Maintainer: Adrian Bunk <bunk@fs.tum.de>
Architecture: i386
Version: 1.3-1
Depends: libc6 (>= 2.2.1-2)
Filename: pool/main/r/recover/recover_1.3-1_i386.deb
Size: 13082
MD5sum: 0d30b3348845870c2fb0775a1a33e5fd
Description: Undelete files on ext2 partitions
 Recover automates some steps as described in the ext2-undeletion
 howto. This means it seeks all the deleted inodes on your hard drive
 with debugfs. When all the inodes are indexed, recover asks you some
 questions about the deleted file. These questions are:
   * Hard disk device name
   * Year of deletion
   * Month of deletion
   * Weekday of deletion
   * First/Last possible day of month
   * Min/Max possible file size
   * Min/Max possible deletion hour
   * Min/Max possible deletion minute
   * User ID of the deleted file
   * A text string the file included (can be ignored)
 .
 If recover found any fitting inodes, it asks to give a directory name
 and dumps the inodes into the directory. Finally it asks you if you
 want to filter the inodes again (in case you typed some wrong
 answers).


il y a aussi un interface graphique, 'gtkrecover', mais recover,
(man recover) devrait suffire.

bonne chance
-- 
Camille