On Wed, Feb 25, 2009 at 9:41 AM, drew wymore <[email protected]> wrote: > In a punch drunk state I rm -rf'd a directory that I didn't intend to. > I wasn't unable to immediately unmount the filesystem but was able to > make a complete image of it to a backup device. The fs is ext3 and > google led me to debugfs and I was able to see the deleted directory > and associated inode. It has yet to be deleted as undel inode# said it > was still allocated. My question is. How do I relink the inode to > userland so I can grab the directory and back it up properly :)
I've had good results with ext3grep: http://code.google.com/p/ext3grep/ http://www.xs4all.nl/~carlo17/howto/undelete_ext3.html ext3grep $IMAGE --dump-names and ext3grep $IMAGE --restore-file path/to/your/file were particularly helpful. -- Dan Young _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
