> A tar file comes in blocks of 512 bytes. First is the filename and > then comes other things including the word "ustar". After this header > comes the file and then comes many more header/file combinations. So > you should see "ustar" as many times as there are files in your tar > file. > If you want all the gory details, download the tar source package and > read tar.h. yikes, I can do without the gory details :) does this mean that once I find a block of a tar, I can start extracting, even if it wasn't the middle? And now that I think of it, someone mentioned that there are bad disk editors available for linux. I just realized that I can't use the same method I sed on an ext2 on a fat (unless it grew inodes while I wasn't looking :) Or should I just start using "dd if=/dev/hda7 skip=1| tar -tvf -" and incrementing the skip until I hit something (I think these two files would be the only ones ever to be created on that partition). thanks hawk --
