Forensic recovery deleted pgdump custom format file - Mailing list pgsql-hackers

From David Guimaraes
Subject Forensic recovery deleted pgdump custom format file
Date
Msg-id CAJNfudK33i7ZN7D1Wt_VnJm_Dy5wCvdQJiGkBVqaxuimGoyZYg@mail.gmail.com
Whole thread Raw
Responses Re: Forensic recovery deleted pgdump custom format file
List pgsql-hackers
Hello. I need some help.

I have the following situation. My client deleted a number of old backups from a drive disc made by PGDUMP with custom flag activated. I could not find any program to recover backup files made by PGDUMP of customized / binary form. So I decided to try to understand the file format generated by pgdump. Analyzing the source code of pgdump/recovery, i concluded a few things:

The header of the file always starts with "PGDMP" followed by pgdump version number used, followed by int size, offset, etc. followed by TOCs.

My question is how to know the end of the file? Are there any signature that I can use? Or would have to analyze the whole file?

Thank u.

--
David

pgsql-hackers by date:

Previous
From: Michael Paquier
Date:
Subject: Re: Support for N synchronous standby servers - take 2
Next
From: Michael Paquier
Date:
Subject: Re: Forensic recovery deleted pgdump custom format file