Solved

is it possible to undelete files from Linux EXT3?.

Posted on 2007-11-28
10
2,407 Views
Last Modified: 2013-12-05
Dear sir,
i want to recover file from ext3 partition,is it possible to recover files using journal?
waiting for your reply
Thanks  
0
Comment
Question by:davinder101
10 Comments
 
LVL 5

Expert Comment

by:pavaneeshkumar
ID: 20371495
it is really painfull to recover files in ext 3.

Have a look on this article hope this will help.

http://linux.sys-con.com/read/117909.htm
http://linux.sys-con.com/read/117909_2.htm
0
 
LVL 12

Assisted Solution

by:ibu1
ibu1 earned 50 total points
ID: 20371526
In order to ensure that ext3 can safely resume an unlink after a crash,
it actually zeros out the block pointers in the inode, whereas
ext2 just marks these blocks as unused in the block bitmaps and marks
the inode as "deleted" and leaves the block pointers alone.

Your only hope is to "grep" for parts of your files that have been
deleted and hope for the best.
0
 

Author Comment

by:davinder101
ID: 20371829
thanks for your suggestions,
  sir,i am providing some useful information which might  help you to guide me.
   in journal data structure,all the updations are recorded in descriptor of journal with their sequence no.
   we can get the inode no. from directory entry,it will give us the related block group
   in which that inode table resides,finally we can find out the corresponding block no.
   in journall there would many references to that block,
   but how can i get  the  reference which gives the previous inode entry of deleted file.
   Thanks
0
 
LVL 48

Assisted Solution

by:Tintin
Tintin earned 50 total points
ID: 20371872
As already mentioned, it's going to be tricky.  One thing you may want to consider in the future (apart from having good backups) is using GIIS.

http://sourceforge.net/projects/giis/
0
 

Author Comment

by:davinder101
ID: 20371919
i have accidentally deleted some files,but i did not install GIIS(in GIIS it would not recover the files which have been deleted before its installation)
how can i recover those files?
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 5

Accepted Solution

by:
pavaneeshkumar earned 150 total points
ID: 20371958
did you checked links posted before.
In your case this is the only way to recover deleted filed.

http://linux.sys-con.com/read/117909.htm
http://linux.sys-con.com/read/117909_2.htm

0
 

Author Comment

by:davinder101
ID: 20380191
ok,what wre the steps to recover files in ext3,using debugfs?
is it recover all types of files?
0
 
LVL 5

Expert Comment

by:pavaneeshkumar
ID: 20380293
what wre the steps to recover files in ext3,using debugfs?
             steps are already given in the article.

is it recover all types of files?
            yes .
0
 

Author Comment

by:davinder101
ID: 20393889
sir,i followed the steps of journal based recovery
the output is given below

debugfs:logdump -i <12>
inode 12 is at group 0,block 0,offset 4580
journal starts at block 0,transaction 125

but it did not show the block pointers of inode 12
where am i going wrong?
is this method recovers files which have not  been deleted recently?

0
 

Expert Comment

by:emadmoh
ID: 20626786
i have the same problem , some of my files are deleted , i tried to install recovery data for linux from recoverytools.com , but it's not working , and i when i tried the debugfs command , i got a message can't open file system , all my data are stored on SAN Storage  , any way to recover please , Help
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Introduction Regular patching is part of a system administrator's tasks. However, many patches require that the system be in single-user mode before they can be installed. A cluster patch in particular can take quite a while to apply if the machine…
I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now