i do everything as u told
iPhone:~ root# /bin/dd if=/dev/rdisk0s2 bs=1M | nc 192.168.1.72 7000
iPhone:~ root#

and it looks nothing is going on

i left it for 3 hours but rdisk0s2 file is 0 bytes

Did you - in another terminal session - do

nc -l -p 7000 | dd of=./rdisk0s2 bs=1M

This is the netcat command to wait for the data. After that your above command will send the data. So you have to have opened two terninal sessions at a time. btw 192.168.1.72 is the Ip of your PC, right?

__________________
Read the stickies and search the forum before posting!
If you want to become a Hackint0sh supporter click here
----------
iPhone 3GS factory unlocked (3.1.2; Blackra1n, Cydia, OpenSSH, custom 3.0 ipcc file (no sig), tethering hack by Dev team, 32 GB)
iPhone 3G (3.0.1; Redsn0w 0.8, Cydia, OpenSSH) 16 GB

yes i did i left it for 3hr but rdisk0s2 files 0 bytes

i tryed it and tryed it i think now it working rdisk0s2 file is 64mb how do i know when is done?

It will take hours, once done the terminal session will tell you how many bits and bytes it transferred. On my 8GB 3G it took 3.5 hours, on my 16 GB 3G it took almost 5 hours.

Just dont interrupt the process until the terminal window tells you the session ended.

__________________
Read the stickies and search the forum before posting!
If you want to become a Hackint0sh supporter click here
----------
iPhone 3GS factory unlocked (3.1.2; Blackra1n, Cydia, OpenSSH, custom 3.0 ipcc file (no sig), tethering hack by Dev team, 32 GB)
iPhone 3G (3.0.1; Redsn0w 0.8, Cydia, OpenSSH) 16 GB

it still doing it but iphone lost couple times connection but i didnt touch it, so it continued doing it automatically is it ok? my iphone is 16gb it doing now maybe 4hr already and it still 4gb to go
after i get file what should i do run photorec?

iPhone:~ root# /bin/dd if=/dev/rdisk0s2 bs=1M | nc 192.168.1.64 7000
/bin/dd: reading `/dev/rdisk0s2': Device not configured
13588+0 records in
13588+0 records out
14248050688 bytes (14 GB) copied, 19586.3 s, 727 kB/s
i can understand that it now photorec?

You got it. Quit both terminal windows and download photorec here:
TestDisk Download - CGSecurity
Photorec is pretty straight forward to use, check it out here
PhotoRec Step By Step - CGSecurity

have fun, you made it!

happy recovering

__________________
Read the stickies and search the forum before posting!
If you want to become a Hackint0sh supporter click here
----------
iPhone 3GS factory unlocked (3.1.2; Blackra1n, Cydia, OpenSSH, custom 3.0 ipcc file (no sig), tethering hack by Dev team, 32 GB)
iPhone 3G (3.0.1; Redsn0w 0.8, Cydia, OpenSSH) 16 GB

sorry for asking again but which options i should use:

1) # photorec image.dd to carve a raw disk image
2) # photorec image.E01 to recover files from an Encase EWF image

I did never trythe linux version, on Mac OS x what is unix you'd

./photorec rdisk0s2

Just put the photorec in the same directory rdisk0s2 is in and run the command.

You'll get photorec running then on the image, select HFS+ as file system, this will work. just paly around with the settings, you wont destroy the image. Make sure to not activate all recovery option, just jpg, sqlite, ... the one's you want to restore.

__________________
Read the stickies and search the forum before posting!
If you want to become a Hackint0sh supporter click here
----------
iPhone 3GS factory unlocked (3.1.2; Blackra1n, Cydia, OpenSSH, custom 3.0 ipcc file (no sig), tethering hack by Dev team, 32 GB)
iPhone 3G (3.0.1; Redsn0w 0.8, Cydia, OpenSSH) 16 GB

As far as I understand the Linux how-to:


The command would be
sudo testdisk-6.9/linux/photorec_static rdisk0s2

You'd have to move rdisk0s2 into the directory testdisk-6.9/linux/ to do so. This will select the image for recovery and start up Photorec

__________________
Read the stickies and search the forum before posting!
If you want to become a Hackint0sh supporter click here
----------
iPhone 3GS factory unlocked (3.1.2; Blackra1n, Cydia, OpenSSH, custom 3.0 ipcc file (no sig), tethering hack by Dev team, 32 GB)
iPhone 3G (3.0.1; Redsn0w 0.8, Cydia, OpenSSH) 16 GB