Undelete for fat32

hal8000b · 01-16-2008, 04:38 PM

I'm looking for a tool to undelet files from fat32 and possibly fat16 partitions.
I believe mundelete will do this.
Has anyone used mundelete from a linux system?

I've used ntfsundelete with success many times now on NTFS partitions from a knoppix
bootable CD, but not mundelete.

I thought mundelete was part of mtools but this is a separate project.

Are there are more linux undelete tools for fat32/fat16 partitions?
Thanks in advance

tredegar · 01-17-2008, 09:06 AM

You could try fatback
http://sourceforge.net/projects/fatback
It worked very well for me.

hal8000b · 01-17-2008, 04:00 PM

Quote:

Originally Posted by tredegar

You could try fatback
http://sourceforge.net/projects/fatback
It worked very well for me.

Thank you, just compiled it on Knoppix 5.11 system (installed on HD not live ISO).

Just a question on command syntax, from help:
fatback -h
Usage: fatback [FILE] -l [LOG] [OPTION]...

If I had say a mounted usb stick at mount point /mnt/sda1 this is a directory not a file. How would you use fatback to unerase all deleted fat files?
Would you first gave to use dd to make a copy of the entire drive? or is there an easier way?
Thanks in advance.

tredegar · 01-18-2008, 01:10 AM

info fatback gives more help
I cannot now remember how I used it, but you might want to image the disk you are recovering, and work on that:

dd if=/dev/sda of=/home/user/diskimage
then maybe
mkdir /home/user/recovered
fatback /home/user/diskimage -o /home/user/recovered --auto

Quote:

/mnt/sda1 this is a directory not a file.

Strictly speaking, all directories are files, but only some files are directories.