On 9/30/06, Paul Stoeber <[EMAIL PROTECTED]> wrote:
On Sat, 30 Sep 2006 19:24:43 +0200 Bambero <[EMAIL PROTECTED]> wrote:
> Hello
>
> I need to recovery overwritten txt file.
>
> Ex.
> echo "my data" > testfile.txt
> echo "" > testfile.txt
>
> I have partition image file creted using dd.
> Is it possible to dump it and search using grep for example ?
> Is it possible to recover overwritten data ?
>
> Thanks
> Bambero
I've had luck with
tr '\0' '\n' < disk | grep -C1000 KEYWORD > /mnt/safe
what is disk in this example ?