similar to: Undelete for ext3 fs ?

Plz help me. My Q:I want solid help on how to undelete files in ext3 fs?How can I? Plz help me with full concepts with debug_fs or any other way to undel ? regards, pranav

I was fooled by a hard link trying to clean up disk space. How can I undelete many files? (time is of the essence as I cannot unmount the partition) -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th

After a extensive search about a tool or method to undelete/recover files deleted from a partition whit the ext3 FS, i want to make some comments about the use of this FS. What are the benefits of use the ext3 FS in a system (server, desktop, etc.) if i cant recover files deleted by an intruder if i want need to make forensics; or if i want to recover important files deleted (business, personal

Hi! I have made some extensions to debugfs to undelete or recover files from a damaged ext3 file system. Salvage or undelete files of damaged ext2/ext3 file systems debugfs salvage command can be used to salvage files from a damaged ext3 or ext2 file system. The code is alpha, so use at your own risk. the usage is: salvage first-block count-blocks Salvage tries to salvage files found in

Months ago there was a thread here about the implementation of a simple undelete-function (i.e: dont delete files, but move them to a folder). Is this this still a relevant idea or has this feature low priority ? thanx, peter ps: anyone knows about a 3rd-party software (propably on nt-side) that implements such a feature ? -- mag. peter pilsl phone: +43 676 3574035 fax : +43 676 3546512

I'm using the lazy expunge plugin as configured in: http://wiki.dovecot.org/Plugins/Lazyexpunge The page claims users can undelete messages without assistance from a sysadmin. How is this accomplished? When I try to subscribe to the folders under the EXPUNGED namespace, nothing happens. ~Cory Coager

Having just spent a day trying to recover a deleted ext3 file for a friend, I'm wondering about this way of maintining undelete information in ext3, like is done for ext2: The last step in the deletion process would be to put back the (previously zeroed) block pointers. Since it gets logged to the journal, I _think_ that this should be safe. The worst that would happen is that, if the plug

I just removed a bunch of Personal stuff I should not have. Is there anyway to undelete??? Jerry

Recently I've encountered a problem, and now I would preciate any help about being able to undelete files. My /var filestructured is mounted at /dev/hdc1 Part of my /etc/mtab looks like this: /dev/hdc1 /var ext3 rw 0 0 I'm using the e2fsprogs-1.23-2 package currently installed with Redhat 7.2 So, could anyone give me a hint of how things could be done to find deleted inodes? I've

Hi there: > ps: my little suggestion: if we add some parameters at smb.conf like > protected dir = /home/share, /home/user1 ; > trashcan dir = /smbtrash ; It seems that implementation of such parameter has some difficulties and eventuates reduction on performance (e.g. handling "protected dir"s and "trash dir" on the different devices like /dev/hda1

I`m sorry to post that topic again, but i propose to implement a way to recover information deleted in ext3 (undeletion) in my graduation class, and i want to know your opinion and suggestions about that. I read about that at linux kernel mailing list and somebody said something about do that in vfs and it will be aplied to all filesystems. What do you thing about it ? ps.: sorry about my

I am trying in vain to discover any way to undelete a deleted directory on a ext3 filesystem. I have followed the recommended steps of immediately unmounting the file system containing the directory and remounting it as read-only, but have no luck: debugfs indicates no deleted inodes. If there is no disk activity following the incident, how can the data disappear? Any and all suggestions would

hi, I want to make some changes in ext3_unlink code to make undelete works, i read a lot about it and im planning to put this lines in that function: if (IS_UNDEL(inode)){ trash = ???? ext3_link(dir,dentry,trash); //make a hard link } somebody know how do i get a especific directory dentry using the ext3 functions ? (im planning to use the inode 6 or inode 11 that somebody said that usually

Hello everyone, I've just lost my whole EXT3 linux partition by what was probably a bug. For your reading pleasure, and in the hope there is enough information to fix this problem in the future, here the story of a violent ending: This tragic history starts actually on windows: MS Word had wiped out an important file on a floppy, and I got the task of retrieving what was possible. Using

Hi, my / is located on /dev/hda6 and my "personal storage partition" - the palce where I store my important files - is located on /dev/hda9. I've deleted a couple of files in /dev/hda9/xyz/abc. Exactly I've deleted the whole directory "abc" with mc. Now hda9 is unmounted, of course. Can you give me a recipe about how to recover those files, please! Probably

Sir/Mam Is there a way we can recover deleted files in samba shared folders?? Ryan SystemAdmin Quality Results Incorporated

> ps: my little suggestion: if we add some parameters at smb.conf like > protected dir = /home/share, /home/user1 ; > trashcan dir = /smbtrash ; Such an addon to samba would make me weep tears of joy. The trashcan is a "security blanket" feature that Windows/MacOS/OS2/BeOS users now take for granted. Convincing them that this is now impossible because we've

Hi, I have remove files on my current directory ... I'm using RCS, but I have loose a working day! How can I recover deleted files? (inode with link counter at zero?) Actually, I just remount the partition on read-only mode. Thanks, Yves

Hi, I tried to recover an accidentally deleted text file from a btrfs volume using the trusty old ''grep --text -C 500'' method and failed, since the filesystem was compressed. So I wrote a shell script that uses btrfs-progs for a proper undelete functionality. Attached is the script that implements a working btrfs-undelete using the find- root and restore tools from

Today our Novell file server attacked by the virus "Explore worm". many word & excel & powerpoint files are deletetd and the file size become 0. with novell's utility, it is just easy to recover the deleted files. although the same files is deleted several times, we can find the original back. >From long time ago, we are trying to use samba instead of novell. the