Article View: aus.computers.linux
Article #59942Re: undelete / unrm / file recover for linux? (solved! - kind of:)
From: Jonathan George
Date: Wed, 01 Nov 1995 00:00
Date: Wed, 01 Nov 1995 00:00
42 lines
2636 bytes
2636 bytes
Tony Nugent (T.Nugent@sct.gu.edu.au) wrote: : drew@chopper.poohsticks.org (Drew Eckhardt) writes: : >In article <46vke4$lu5@tornix.tornado.be>, : >Jan Van Overbeke <jan.vo@tornado.be> wrote: : >>Tony Nugent <T.Nugent@sct.gu.edu.au> wrote: : >>>Is there a file recovery tool about the place that I could use to get : >>>them back? (I couldn't spot anything on sunsite). : >No. : >Run debugfs on the damaged filesystem, do an lsdel to find the files : >you're interested in, and use dump <inode #> output_file where the : >inode # is in angle brackets. : debugfs (in the e2fsprogs-0.5b package - although I now notice the : announcement of version 0.5c) did the trick! :-) Great! : The dump <inode> file command sequence recovered most of the : files less than 12K (why this limit?), usually with trailing garbage. This is because you are getting the entire blocks, and not just the portion used by your file. : The reading that I did about the ext2 filesystem told me that : eventually an undelete capability will be part of the system in the : future (although I won't old my breath for this to happen:) I don't think that it is really that far off. : I'll be putting in a "safe-delete" facility for command-line use soon, : but I accidently deleted these files using a filemanager program... : circumventing system calls to rm() would be a lot harder to cope with : :-) : (BTW, must look at lde real soon... sounds like a good tool to use : with debugfs). It sounds sort of like fsdb; does anyone know whether that is a valid equivant? If so I would encourge system packagers to include it.
Technical Details
Message-ID:
<4785np$okn@tech.cftnet.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<46v9e4$oui@ngriffin.itc.gu.edu.au> <46vke4$lu5@tornix.tornado.be> <471p14$91f@information-retrieval.village.org> <474gip$pjn@ngriffin.itc.gu.edu.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f5392,355ac0499e9cf894 X-Google-Attributes: gidf5392,public X-Google-Thread: 10c696,355ac0499e9cf894 X-Google-Attributes: gid10c696,public X-Google-Thread: 1103af,355ac0499e9cf894 X-Google-Attributes: gid1103af,public X-Google-Thread: 102983,355ac0499e9cf894 X-Google-Attributes: gid102983,public From: jgeorge@cftnet.com (Jonathan George) Subject: Re: undelete / unrm / file recover for linux? (solved! - kind of:) Date: 1995/11/01 Message-ID: <4785np$okn@tech.cftnet.com> X-Deja-AN: 118365667 references: <46v9e4$oui@ngriffin.itc.gu.edu.au> <46vke4$lu5@tornix.tornado.be> <471p14$91f@information-retrieval.village.org> <474gip$pjn@ngriffin.itc.gu.edu.au> followup-to: aus.computers.linux,comp.os.linux.development.apps,comp.os.linux.misc,comp.os.linux.development.system organization: CFTnet newsgroups: aus.computers.linux,comp.os.linux.development.apps,comp.os.linux.misc,comp.os.linux.development.system