Ext3 users - Jun 2011 - extcarve - ext2,ext3,ext4 file carving tool

Hi -
Updated my old project named "ext3carve" and renamed it as
"extcarve" . It
uses libext2fs. (To be precise,re-uses on 'debugfs' command's
"dump_unused"
feature)

In summary,the tool will do the following -   It will scan the linux machine
,for unused/deleted blocks and search for magic signatures. If it finds
valid signature (both header and footer) It saves the file at given external
drive.

Now it can recover- non-fragmented (like png,jpg,gif,html,c/cpp/php,pdf
files) deleted files.One main advantage is that it opens the affected
partitions on read-only mode,thus no changes made to affected disk.Disk
remains the same - regardless of whether extcarve recovers them or not.

Simply usage would be -
1. Copy extcarve binary to Pen drive.
2. Plug-in the pen-drive to affected system.(the system from where you want
to recover files)
3.Attach an external harddrive to affected system so that recovered files
will be stored on external hdd.
3. Run the extcarve from within pendrive - Provide affected drive as input
and external drive as output directory.
Checkout recovered files at external hdd.

Download url - www.giis.co.in/giis
Any feedbacks/comments are welcome.

-- 
----
Cheers,
Lakshmipathi.G
FOSS Programmer.
www.giis.co.in
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://listman.redhat.com/archives/ext3-users/attachments/20110613/3cd698ee/attachment.htm>

On Mon, Jun 13, 2011 at 2:56 AM, Lakshmipathi.G
<lakshmipathi.g at gmail.com> wrote:
> Hi -
> Updated my old project named "ext3carve" and renamed it as
"extcarve" . It
> uses libext2fs. (To be precise,re-uses on 'debugfs' command's
"dump_unused"
> feature)
>
> In summary,the tool will do the following -?? It will scan the linux
machine
> ,for unused/deleted blocks and search for magic signatures. If it finds
> valid signature (both header and footer) It saves the file at given
external
> drive.
>
> Now it can recover- non-fragmented (like png,jpg,gif,html,c/cpp/php,pdf
> files) deleted files.One main advantage is that it opens the affected
> partitions on read-only mode,thus no changes made to affected disk.Disk
> remains the same - regardless of whether extcarve recovers them or not.
>
> Simply usage would be -
> 1. Copy extcarve binary to Pen drive.
> 2. Plug-in the pen-drive to affected system.(the system from where you want
> to recover files)
> 3.Attach an external harddrive to affected system so that recovered files
> will be stored on external hdd.
> 3. Run the extcarve from within pendrive - Provide affected drive as input
> and external drive as output directory.
> Checkout recovered files at external hdd.
>
> Download url - www.giis.co.in/giis
> Any feedbacks/comments are welcome.
>
What are the pros and cons when compared to ext3grep and extundelete?

In addition, what is the Pen drive? I mean, since we need to attach an
external harddrive, why don't we run the command within the harddrive?

Regards
Jidong