LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (https://www.linuxquestions.org/questions/linux-general-1/)
-   -   recover lost files (https://www.linuxquestions.org/questions/linux-general-1/recover-lost-files-523147/)

thtr2k 01-26-2007 09:41 PM

recover lost files
 
Hi,
i accidentedly deleted some files, does anyone know how to recover them from "command line"?
Thanks

FnordPerfect 01-26-2007 10:04 PM

Be warned, this is not trivial... :-(

For the future I suggest you to have a look at this
http://directory.fsf.org/libtrash.html
It is a wrapper library (LD_PRELOAD hack) around the system calls which Linux uses when deleting files, and which moves them to a configurable location instead.

However, for now, it might be easy but it might be as well impossible.

I once read that you should for heaven's sake not unmount and re-mount the partition (that is, not reboot!).

If there is still any process running which holds the specific file open, then you're lucky and just copy the file descriptor from the /proc directory.
Here's a guide for that:
http://www.linux.com/article.pl?sid=06/10/30/1652211

There are utilities for ext2 based file systems. One is called recover, and one e2undel. But you need to remember some informations about the files. And it won't work with ext3...

Also, depending on file type you might want to try forensic utilities. These scan the whole partition for "magic bytes"/headers of known filetypes and *try* to restore them.
* magicrescue
* foremost
* http://www.cgsecurity.org/wiki/PhotoRec
* probably others... search for 'forensic' in your package manager

good night, and good luck


All times are GMT -5. The time now is 09:48 AM.