Re: Data loss

[Francesco Pirozzi <francesco pirozzi accent it>]

"Stephen C. Tweedie" wrote:

> Hi,
>
> On Wed, 2003-02-12 at 13:28, Francesco Pirozzi wrote:
>
> > Actually, lde is the tool I'm using and I'm looking for a command-line procedure
> > to search throughout the fs in order to find all the data blocks that are not just
> > filled with zeros.
> > Can you suggest me any, please?
>
> It won't help.  Disk sectors are not pre-formatted to zero, or are
> unused blocks initialised to zero during mkfs, so you probably won't see
> any zero blocks at all on disk unless they represent valid null data
> that the filesystem has deliberately written there.
>
> Cheers,
>  Stephen

I understand... But, one last thing: do you think that the first block of each
overwritten
file is somewhere intact - so that I can search the disk for format headers - or do I
have
to rebuild the puzzle from the second block (or deeper)?