On Fri, 2002-08-16 at 06:14, Dudley F. Ca�as wrote: > Hi sorry for cross posting this message, but our friend Marvin, I think is > in trouble :). His question is that, if a file is accidentaly delete does > this mean goodbye or is there another way we can recover those deleted > files. > > I thinks help is much needed heheheehe! > BTW he's using MANDRAKE 8.2 on ext3f
First and foremost, he should shutdown his machine immediately lest the inodes where his files were get replaced by newer data. I'm not sure if this works as well as ext3, but one method I learned is to use the debugfs tool: # debugfs /dev/hda1 this will bring you to the debugfs prompt, where you type in the 'lsdel' command (list the recently deleted file/s): debugfs: lsdel Inode Owner Mode Size Blocks Time deleted 322457 0 100644 1111 1/ 1 Mon May 27 05:36:25 2002 322456 0 100644 1297 1/ 1 Mon May 27 08:40:55 2002 322455 0 100644 1052 1/ 1 Mon May 27 09:37:35 2002 322454 0 100644 1653 1/ 1 Mon May 27 10:34:15 2002 322453 0 100644 1324 1/ 1 Mon May 27 10:40:35 2002 322452 0 40755 0 1/ 1 Mon May 27 11:38:15 2002 322451 0 40755 0 1/ 1 Mon May 27 12:22:25 2002 7 deleted inodes found. >From the Owner, Size and Date entries, one can make a guess which inodes his accidentally deleted files are in. So say root (uid 0) accidentally deleted a file at around 5:30am, the closest would be inode 322457. To recover: debugfs: dump <322457> /some/directory This method can be very daunting if you need to recover a lot of deleted files. Fortunately, there's a tool to make things easier (at least one that I know of). Download the recover tool at http://revocer.sourceforge.net/linux/recover. HTH! -- Joon Guillen ================================ So computers are tools of the Devil? thought Newt. He had no problem believing it. Computers had to be the tools of _somebody_, and he knew for certain that it definitely wasn't him. from "Good Omens", Neil Gaiman & Terry Pratchett _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]
