Solved

how to undelete files in Unix ?

Posted on 2002-05-12
8
1,068 Views
Last Modified: 2013-12-27
Is there a way to get back removed files.I have not written after deletion on that partition ! I have tried unrm/lazarus tools but it recovered partial data only.
thanks
0
Comment
Question by:anil27
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 38

Expert Comment

by:yuzh
ID: 7005353
If you delete file from the file manager, you might be able to get the files back from .dt/Trash.

If you use command line command "rm", bad news. You have to get the file back from you backup media
0
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 200 total points
ID: 7006085
unrm and lazarus are pretty much the state of the art in doing this.  If they don't work, you're hosed.
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7006925
have seen this link, but never tested:
  http://www.porcupine.org/forensics/

'cause you have not written after delete, there is a chance  like following:

   grep -a -B2 -A200 "patter where your text starts" /dev/hda1
0
 

Author Comment

by:anil27
ID: 7026676
Ahoffman !
I could not understand this option of grep with -A and -B. Can u please explain .
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 51

Expert Comment

by:ahoffmann
ID: 7026683
stolen from "man grep" :-))
---------------------------------------------

-A NUM, --after-context=NUM
        Print NUM lines of trailing context after  matching lines.
-B NUM, --before-context=NUM
        Print  NUM lines of leading context before matching lines.
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 7028162
Well, the GNU version of grep anyway...
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7028197
agreed, I should have used ggrep, as I do on my boxes ;-)
0
 

Author Comment

by:anil27
ID: 7553033
Although I could not recover the complete9only15%)data but these tools gave me the best results.
thanks
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

My previous tech tip, Installing the Solaris OS From the Flash Archive On a Tape (http://www.experts-exchange.com/articles/OS/Unix/Solaris/Installing-the-Solaris-OS-From-the-Flash-Archive-on-a-Tape.html), discussed installing the Solaris Operating S…
Introduction Regular patching is part of a system administrator's tasks. However, many patches require that the system be in single-user mode before they can be installed. A cluster patch in particular can take quite a while to apply if the machine…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now