On 25 October 2011 14:01, Kerwin Khu <kerwin.khu@???> wrote:
> Another vote for TestDisk, or to be more specific it's companion
> program PhotoRec[1]. It's a very handy tool for those "oh ****"
> moments.
>
> It claims support for Mac OS X and HFS+, so I guess there's no need
> for special mount commands.
>
> [1] http://www.cgsecurity.org/wiki/PhotoRec
>
> Regards,
> Kerwin
>
It is times like this that I wish this was IBM OS/2. I think it was
called HPFS. (High Performance File System)
It had a file system that was perfect for file recovery.
It used extends in the directory descriptors to link filenames to files.
But the really amazing part was that although it used 512 bytes
sectors, only 508 bytes of that were file data. The first 4 bytes of
every sector contained a sector offset to the next sector of the same
file.
Recovery was easy.
You just did a sector by sector scan of the entire disk, built up a
linked list of which sectors belonged to the same file and your file
recovery was done!
Added to that, the first sector of the file did not contain file data,
but instead contained the filename, date/time stamps etc.
So, even if you had lost the entire extends directory information, you
could rebuild it by doing a sector scan of the entire disk.
Not only that, but a tool came with the OS that essentually did the
above scan and then presented a list of filenames that you could
choose to recover.
I think the tool was "undelete" with some special command line option!
My guess is that Mac OS X HFS will not be so nice.
--
Please post to: Hampshire@???
Web Interface:
https://mailman.lug.org.uk/mailman/listinfo/hampshire
LUG URL:
http://www.hantslug.org.uk
--------------------------------------------------------------
