?
Solved

how to undelete files in Unix ?

Posted on 2002-05-12
8
Medium Priority
?
1,085 Views
Last Modified: 2013-12-27
Is there a way to get back removed files.I have not written after deletion on that partition ! I have tried unrm/lazarus tools but it recovered partial data only.
thanks
0
Comment
Question by:anil27
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 38

Expert Comment

by:yuzh
ID: 7005353
If you delete file from the file manager, you might be able to get the files back from .dt/Trash.

If you use command line command "rm", bad news. You have to get the file back from you backup media
0
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 600 total points
ID: 7006085
unrm and lazarus are pretty much the state of the art in doing this.  If they don't work, you're hosed.
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7006925
have seen this link, but never tested:
  http://www.porcupine.org/forensics/

'cause you have not written after delete, there is a chance  like following:

   grep -a -B2 -A200 "patter where your text starts" /dev/hda1
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:anil27
ID: 7026676
Ahoffman !
I could not understand this option of grep with -A and -B. Can u please explain .
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7026683
stolen from "man grep" :-))
---------------------------------------------

-A NUM, --after-context=NUM
        Print NUM lines of trailing context after  matching lines.
-B NUM, --before-context=NUM
        Print  NUM lines of leading context before matching lines.
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 7028162
Well, the GNU version of grep anyway...
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7028197
agreed, I should have used ggrep, as I do on my boxes ;-)
0
 

Author Comment

by:anil27
ID: 7553033
Although I could not recover the complete9only15%)data but these tools gave me the best results.
thanks
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Attention: This article will no longer be maintained. If you have any questions, please feel free to mail me. jgh@FreeBSD.org Please see http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-update-server/ for the updated article. It is avail…
When you do backups in the Solaris Operating System, the file system must be inactive. Otherwise, the output may be inconsistent. A file system is inactive when it's unmounted or it's write-locked by the operating system. Although the fssnap utility…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.
Suggested Courses
Course of the Month12 days, 5 hours left to enroll

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question