Deleted files recovery, inodes and size is known
 

ok guyz, i manage to delete some files from the system. now i need to recover them.. i know the inode # (through ext3undel) and also the size.
How can i use this information to recover the files?

Also can i search the text from a partition? (file don't exists). As i need figures

Has anything been written to the disk since the deletion? If so, your file's probably toast. :(

As I understand it, (Any file system Gurus out there...Please correct me if my concept is wrong) the inodes are what is used to point to the various file "blocks" which make up the file. Like the arrows below.

Data Block --> Data block --> Data Block --> Data block... etc.

All the blocks together form the file. When you delete the file you loose the connection between the blocks. If you've saved any other file the inodes may have been re-assigned, original file blocks overwritten, and the original file's gone. :(

My :twocents: I'd be interested to see what others say though.

Play Bonny! :hattip:

Can you tell us what operating system you have?

Linux of course, ext3 type partition..

Any ways, closing this