Re: [edlug] Recovering deleted file on ext3?

[Craig Webster <craig@xxx.xxx.xxx>]

On 16 Aug 2007, at 14:14, Brett Sheffield wrote:
> Possible?  Easy?
Q: How can I recover (undelete) deleted files from my ext3 partition?

Actually, you can't! This is what one of the developers, Andreas  
Dilger, said about it:
In order to ensure that ext3 can safely resume an unlink after a  
crash, it actually zeros out the block pointers in the inode, whereas  
ext2 just marks these blocks as unused in the block bitmaps and marks  
the inode as "deleted" and leaves the block pointers alone.

Your only hope is to "grep" for parts of your files that have been  
deleted and hope for the best.

  -- http://batleth.sapienti-sat.org/projects/FAQs/ext3-faq.html

Cheers,
Craig
--
Craig Webster   | Lead Developer   | skype: craigwebster
Xeriom Networks | t: 0131 208 3800 | w: http://xeriom.net/

 -- Virtual machines, dedicated servers and colocation --

Xeriom Networks Limited.
94/1 Spring Gardens, Abbeyhill, Edinburgh, Scotland.
Registered in England and Wales. Company No. 5961686.

All agreements are made under our standard terms and conditions.
These can be found at http://xeriom.net/terms_and_conditions


-
----------------------------------------------------------------------
You can find the EdLUG mailing list FAQ list at:
http://www.edlug.org.uk/list_faq.html