[Leaplist] Forensic recovery EXT2

Dan Cherry dscherry at bellsouth.net
Tue Mar 27 10:17:28 EDT 2007


On Tuesday 27 March 2007 10:00:21 am Randall Perry wrote:
> Real challenge for recovering EXT2 data for a friend.
> Contact me if you have any experience using any of the following:
> -debugfs
> -unrm and lazarus (from the TCT)
> -e2recover
> -LDE
>
> In the past, I have successfully recovered data off FAT32 and NTFSv5
> drives (even after being reformatted) using similar tools.
> The real issue for me on the EXT2 is finding an efficient way of
> putting the blocks back together from the inode entries that were
> removed.
> I don't personally have the practical experience with any of the above
> mentioned ext2 tools to get it done.
>
> To the victor belongs the spoils.  Or an xbox with Gentoo Linux.
>
> --
> --
> Randall Perry
> www.hcrn.info (disaster recovery)
> www.domain-logic.com  (another kind of disaster recovery)

I've had success twice using 'testdisk' recovering data on ext3 (so what's a 
few journal entries ;-)  ).   Might be worth a try.
hth,

-- 
Dan
Finding a solution to a problem doesn't solve the problem...
Implementing the solution, solves the problem


More information about the Leaplist mailing list