Subject: Re: I just mkfs'd my backup!!
To: None <port-i386@netbsd.org>
From: Christophe Kalt <kalt@taranis.org>
List: port-i386
Date: 05/27/2002 13:04:44
On May 27, Manu Bouyer wrote:
| Maybe. Is your /usr at the exact same place as the old one ?
| If so, datas are still there but inodes have all been zeroed, so recovering
| the file is a matter of finding the rigth blocks, and in the rigth order.

the coroner's toolkit should be able to help with this.
http://www.porcupine.org/forensics/tct.html