I had an ext3 partition of around 10 GB which I formated with reiserFS
and written around 1 GB data over it. After some time I came to know a
few things which were a data of around 5 GB on that previous ext3
format. Now I want the same format back. As far as I know the data was
not really deleted as technically nothing was written over them.

I tried sleuthkit, and was able to get the file names which were on
that partition. Is there any way to write the same old partiotion
record and have the partiton back with all the previous
non-overwritten data.

thanks and regards

Loknath

Loknath Bharti wrote:
> I had an ext3 partition of around 10 GB which I formated with reiserFS
> and written around 1 GB data over it. After some time I came to know a
> few things which were a data of around 5 GB on that previous ext3
> format. Now I want the same format back. As far as I know the data was
> not really deleted as technically nothing was written over them.

Your questioin is unclear.

Are you saying that
1.) you you had a 10 GB ext3 partition with 5GB of data on it?
2.) That you then formatted this 10 GB formerly ext3 partition to be a
reiserFS partition?
3.) That you then you wrote 1 GB of data on it?
4.) Now you want to read some of the old 5GB of data?
>
> I tried sleuthkit, and was able to get the file names which were on
> that partition. Is there any way to write the same old partiotion
> record and have the partiton back with all the previous
> non-overwritten data.

Sure: just restore the files from your backup of the file system while it
was still ext3. If I understand correctly, you have 1 GB of data you wrote
into the reiserFS and 5 GB you had when it was ext3. Total 6GB: should
easily fit a 10GB file system.
>
> thanks and regards
>
> Loknath


--
.~. Jean-David Beyer Registered Linux User 85642.
/V\ Registered Machine 241939.
/( )\ Shrewsbury, New Jersey http://counter.li.org
^^-^^ 08:20:00 up 37 days, 11:15, 3 users, load average: 4.22, 4.15, 4.16

Loknath Bharti wrote:

> I had an ext3 partition of around 10 GB which I formated with reiserFS
> and written around 1 GB data over it.

so, you HAD a 10gig partition with an ext3 filesystem.

> After some time I came to know a
> few things which were a data of around 5 GB on that previous ext3
> format.

you "came to know"? what does that mean? so the previous
ext3 filesystem had 5gig of data on it?

> Now I want the same format back. As far as I know the data was
> not really deleted as technically nothing was written over them.
>
> I tried sleuthkit, and was able to get the file names which were on
> that partition. Is there any way to write the same old partiotion
> record and have the partiton back with all the previous

use the backup you made before creating the partition
with the reiserfs filesystem on it. the ONLY hope that
i see happening is to mark the partition with an ext3
filesystem and try a recovery tool to get the files off
of it. however, i doubt this will work. your second
option is to use a tool to read the disk directly, as
you've already attempted.
--
<< http://michaeljtobler.homelinux.com/ >>
Large cats can be dangerous, but a little pussy never hurt anyone.

Loknath Bharti wrote:

> I had an ext3 partition of around 10 GB which I formated with reiserFS
> and written around 1 GB data over it. After some time I came to know a
> few things which were a data of around 5 GB on that previous ext3
> format. Now I want the same format back. As far as I know the data was
> not really deleted as technically nothing was written over them.
>
> I tried sleuthkit, and was able to get the file names which were on
> that partition. Is there any way to write the same old partiotion
> record and have the partiton back with all the previous
> non-overwritten data.
>
> thanks and regards
>
> Loknath

Hi Loknath:

The most important thing to do is to NOT write any more to the disk. Use
'dd' to make an exact image of it and work off that.

Depending on the type of data residing on the disk, and where on the disk it
actually is (whether or not it is in the overwritten part), you may be able
to get it off, you may not. Good luck.

Cheers,
--
** Matt van de Werken -- Cricket, Unix, Electronics Enthusiast **
** Linux -- Dual Athlon MP1800+ -- Mon, 06 Dec 2004 8:17PM **
The little girl expects no declaration of tenderness from her doll.
She loves it -- and that's all. It is thus that we should love.
-- DeGourmont