LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Any recovery tool for Ubuntu (https://www.linuxquestions.org/questions/linux-newbie-8/any-recovery-tool-for-ubuntu-711575/)

vibinlakshman 03-14-2009 08:36 AM

Any recovery tool for Ubuntu
 
I've come to knw only about testdisk , which when googled told that it is used as to recover lost partition
I need to retrieve deleted files , can I can make it with testdisk
So any one know other different tools , please also send tutorial for that appropriate tools

unSpawn 03-14-2009 08:46 AM

Been asked before. Try searching LQ for terms like "recovery" or "undelete" and tools like photorec, foremost and toolkits like the HELIX Live CD.

pixellany 03-14-2009 08:51 AM

testdisk is for file recovery......have a look at their website.

vlademir 03-24-2009 08:18 AM

Quote:

Originally Posted by vibinlakshman (Post 3475274)
I've come to knw only about testdisk , which when googled told that it is used as to recover lost partition
I need to retrieve deleted files , can I can make it with testdisk
So any one know other different tools , please also send tutorial for that appropriate tools

Hi
please see this tutorial about how to recover deleted files using foremost

rweaver 03-24-2009 08:52 AM

Quote:

Originally Posted by vibinlakshman (Post 3475274)
I've come to knw only about testdisk , which when googled told that it is used as to recover lost partition
I need to retrieve deleted files , can I can make it with testdisk
So any one know other different tools , please also send tutorial for that appropriate tools

It depends more on the file system than the distribution, are you using ext2, ext3, jfs, xfs, etc...

If you're using ext3 I highly recommend ext3grep for file recovery. Then of course data carving utilities.

vibinlakshman 03-25-2009 09:12 PM

Quote:

Originally Posted by rweaver (Post 3486105)
It depends more on the file system than the distribution, are you using ext2, ext3, jfs, xfs, etc...

If you're using ext3 I highly recommend ext3grep for file recovery. Then of course data carving utilities.

I use ext2 !!

rweaver 03-26-2009 01:23 PM

Quote:

Originally Posted by vibinlakshman (Post 3487932)
I use ext2 !!

Unless part of the file has been overwritten in ext2 its very easy to recover deleted files. Almost all the tools in the sleuth kit work well on it.

Lets see, there's unrm, e2undel, and debugfs that will undelete files in ext2 in many cases... then any datacarving tool will have no real problems carving the data out of the file system directly.

The biggest thing to remember with any recovery is unmount the file system asap so that your file doesn't get overwritten. Make a copy of the file system (dd to a file is an easy way), COPY that file, and work on the copy of the copy only.


All times are GMT -5. The time now is 12:42 AM.