5 Jun
2007
5 Jun
'07
7:10 p.m.
Hello,
I had similar trouble not very long time ago (however I think that my
reiserfs had simply nulled the data where my images resided, as I still
see them in the file-system, with correct date and other file attributes)
Your only hope is to "grep" for parts of
your files that have been
deleted and hope for the best.
""""""""""""""""""""""""""""
The grep method does work for text files. It just implies searching
everywhere in the partition to grab some chucks of text. I am afraid to
tell you that for binary files, like jpg, that should not work that
good.
I had figured out the following method to find where the data had gone:
- First created a copy of the complete partition with dd as described by
sb else here.
- Then looked up for identifiers (like the picture date, the JFIF tag,
the camera name, ...or other data you can find in your Exif data - see
existing pictures what useful dat you want to look up) with commands like:
hexdump -c hdb3.iso | grep 'JFIF' > /tmp/found_jfif.dat
This gives you also the position of the found items in your file system.
HTH
Jean-Jacques