Solved

how to undelete files in Unix ?

Posted on 2002-05-12
8
1,083 Views
Last Modified: 2013-12-27
Is there a way to get back removed files.I have not written after deletion on that partition ! I have tried unrm/lazarus tools but it recovered partial data only.
thanks
0
Comment
Question by:anil27
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 38

Expert Comment

by:yuzh
ID: 7005353
If you delete file from the file manager, you might be able to get the files back from .dt/Trash.

If you use command line command "rm", bad news. You have to get the file back from you backup media
0
 
LVL 14

Accepted Solution

by:
chris_calabrese earned 200 total points
ID: 7006085
unrm and lazarus are pretty much the state of the art in doing this.  If they don't work, you're hosed.
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7006925
have seen this link, but never tested:
  http://www.porcupine.org/forensics/

'cause you have not written after delete, there is a chance  like following:

   grep -a -B2 -A200 "patter where your text starts" /dev/hda1
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:anil27
ID: 7026676
Ahoffman !
I could not understand this option of grep with -A and -B. Can u please explain .
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7026683
stolen from "man grep" :-))
---------------------------------------------

-A NUM, --after-context=NUM
        Print NUM lines of trailing context after  matching lines.
-B NUM, --before-context=NUM
        Print  NUM lines of leading context before matching lines.
0
 
LVL 14

Expert Comment

by:chris_calabrese
ID: 7028162
Well, the GNU version of grep anyway...
0
 
LVL 51

Expert Comment

by:ahoffmann
ID: 7028197
agreed, I should have used ggrep, as I do on my boxes ;-)
0
 

Author Comment

by:anil27
ID: 7553033
Although I could not recover the complete9only15%)data but these tools gave me the best results.
thanks
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let's say you need to move the data of a file system from one partition to another. This generally involves dismounting the file system, backing it up to tapes, and restoring it to a new partition. You may also copy the file system from one place to…
A metadevice consists of one or more devices (slices). It can be expanded by adding slices. Then, it can be grown to fill a larger space while the file system is in use. However, not all UNIX file systems (UFS) can be expanded this way. The conca…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question