recovering deleted file from /tmp

Nikko Odiseos <[email protected]> Mon, 7 Jul 2003 11:59:37 -0700

Newsgroups	gmane.comp.security.forensics.tct
Message-ID	<[email protected]>

Need to recover a deleted file from /tmp (swap) after the system was
rebooted but I think I may be hosed.

[root@oasis:/usr/tct-1.11/bin]$
$ ./unrm /dev/dsk/c0t2d0s1 > /usr/nikko/unrm_ouput
./unrm: /dev/dsk/c0t2d0s1: bad magic number in superblock

Is it possible to recver from a swap partition?