[prev in list] [next in list] [prev in thread] [next in thread] 

List:       netbsd-port-i386
Subject:    Re: I just mkfs'd my backup!!
From:       Alistair Crooks <agc () wasabisystems ! com>
Date:       2002-05-28 8:43:44
[Download RAW message or body]

On Mon, May 27, 2002 at 01:04:44PM -0400, Christophe Kalt wrote:
> On May 27, Manu Bouyer wrote:
> | Maybe. Is your /usr at the exact same place as the old one ?
> | If so, datas are still there but inodes have all been zeroed, so recovering
> | the file is a matter of finding the rigth blocks, and in the rigth order.
> 
> the coroner's toolkit should be able to help with this.
> http://www.porcupine.org/forensics/tct.html

pkgsrc/security/tct

Regards,
Alistair
[prev in list] [next in list] [prev in thread] [next in thread]