Lab 3 Notes

losetup/mount:

To mount the drive:
$ sudo losetup /dev/loop0 actN.img -o 32256 # associate sda.image with device /dev/loop0 at offset 
$ sudo losetup /dev/loop1 actN.img -o 1497000960 # associate sda.image with device /dev/loop/1 at offset

$ sudo mount /dev/loop1 mountpoint # mount loopback disk at directory 'mountpoint'
$ sudo mount /dev/loop1 mountpoint -o ro # mount loopback disk read only at directory 'mountpoint'

To disassociate:
$ sudo losetup -d /dev/loopN
$ sudo umount /dev/loop1 # unmount

To undelete:
$sudo e2undel -d /dev/loop0 -s /images/recovered -a -t
Syntax breakdown:

-d /dev/loop0 -- specifies the block device to search
-s /images/recovered -- specifies the directory to save recovered files. Files shouldn't be saved to the disk being searched if it can be helped, because valuable disk blocks may be overwritten by e2undel.
-a -- tells e2undel to look everywhere for files, not just in a special e2undel-specific journal
-t -- tells e2undel to try and determine what kind of file an inode contains.

application core irrelevant
1-3 keys
7 17jonquil23scent14
8 26daisy99daisy99
6 13tulip34root28
4 11hibiscus2hibiscus23
5 19rose42blossom35
1 23philo7dendron88


1 - me_and_you_and_you_and_me-so_happy_2gether
4 - im_pickin_up_good_vibrations
5 - its_the_little_old_lady_from_pasadena
6 - raindrops_keep_fallin_on_my_head
7 - twist_again_like-we_did_last_summer
8 - goodness_gracious_great_balls_of_fire