Foremost custom file type not accepted by -t argument

Posted by Channel72 on Server Fault See other posts from Server Fault or by Channel72
Published on 2010-08-16T14:49:01Z Indexed on 2012/10/09 21:44 UTC
Read the original article Hit count: 205

I'm trying to recover a deleted file on an ext3 file system using the foremost utility. The file I want to recover is a hpp C++ source code file. However, foremost does not automatically support the hpp file extension, so I have to add it to the config file. So, following the instructions on the man page, I add the following line to the config file:

hpp n 50000 include include ASCII

Then I run foremost as follows:

$foremost -v -T -t hpp -i /dev/md0 -o /home/recover/

Instead of doing anything, it just displays the help message. If I change the hpp to htm or jpg, it works. So apparently foremost isn't accepting the custom file type I added into the config file. But I've looked over this dozens of times now, and I can't see what I'm doing wrong. I'm following the instructions exactly. Why doesn't foremost recognize the new file type I added to the config file?

© Server Fault or respective owner

Related posts about linux

Related posts about data-recovery