[PLUG] File recovery

drew wymore drew.wymore at gmail.com
Wed Feb 25 20:30:25 UTC 2009


I'm working with that now. I appreciate everyone's input. I've never
dealt with a fs issue like this before and if I lose the data then its
a lesson learned. However it is a good exercise for any future issues
if they god forbid happen.

On 2/25/09, Dan Young <danielmyoung at gmail.com> wrote:
> On Wed, Feb 25, 2009 at 9:41 AM, drew wymore <drew.wymore at gmail.com> wrote:
>> In a punch drunk state I rm -rf'd a directory that I didn't intend to.
>> I wasn't unable to immediately unmount the filesystem but was able to
>> make a complete image of it to a backup device. The fs is ext3 and
>> google led me to debugfs and I was able to see the deleted directory
>> and associated inode. It has yet to be deleted as undel inode# said it
>> was still allocated. My question is. How do I relink the inode to
>> userland so I can grab the directory and back it up properly :)
>
> I've had good results with ext3grep:
>
> http://code.google.com/p/ext3grep/
> http://www.xs4all.nl/~carlo17/howto/undelete_ext3.html
>
> ext3grep $IMAGE --dump-names
> and
> ext3grep $IMAGE --restore-file path/to/your/file
> were particularly helpful.
>
> --
> Dan Young
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>

-- 
Sent from my mobile device



More information about the PLUG mailing list