On Fri, Mar 15, 2002 at 11:54:38PM -0600, Brian wrote: > rm -rf is a great utility. Unless, of course, you're in the wrong > directory. And so I ask, how can I go about recovering a directory that > became victim to the almighty rm -rf? > > Some of the files have probably been overwritten, but I'm talking about 6 > GB+ of files that were deleted. Since it's on the /home partition, I can > only assume that < 1 MB of data has been written to the partition. In > theory, the deleted inodes should still be out there. Are there any > methods/utilities that can help me? Maybe. You could try The Coroner's Toolkit (TCT): http://www.porcupine.org/forensics/tct.html The TCT FAQ also refers to a "Linux Ext2fs Undeletion mini-HOWTO": http://www.praeclarus.demon.co.uk/tech/e2-undel/howto.txt Joel