LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-27-2011, 03:59 AM   #1
Fracker
Member
 
Registered: Mar 2009
Posts: 86

Rep: Reputation: 0
Deleted files recovery, inodes and size is known


ok guyz, i manage to delete some files from the system. now i need to recover them.. i know the inode # (through ext3undel) and also the size.
Quote:
Unfortunately, we cannot automatically obtain the name of a deleted file
from Unix file systems - since the connection between the iNode (which
holds the MetaData, including the file name) and the real data is dropped
on deletion. However, we can obtain a list of names from the deleted files.
How can i use this information to recover the files?

Also can i search the text from a partition? (file don't exists). As i need figures

Last edited by Fracker; 04-27-2011 at 04:02 AM.
 
Old 04-27-2011, 06:11 AM   #2
Soadyheid
Senior Member
 
Registered: Aug 2010
Location: Near Edinburgh, Scotland
Distribution: Cinnamon Mint 17.0 at present.
Posts: 1,167

Rep: Reputation: 201Reputation: 201Reputation: 201
Has anything been written to the disk since the deletion? If so, your file's probably toast.

As I understand it, (Any file system Gurus out there...Please correct me if my concept is wrong) the inodes are what is used to point to the various file "blocks" which make up the file. Like the arrows below.

Data Block --> Data block --> Data Block --> Data block... etc.

All the blocks together form the file. When you delete the file you loose the connection between the blocks. If you've saved any other file the inodes may have been re-assigned, original file blocks overwritten, and the original file's gone.

My I'd be interested to see what others say though.

Play Bonny!
 
1 members found this post helpful.
Old 04-27-2011, 12:37 PM   #3
xzcallaway
Member
 
Registered: Oct 2008
Posts: 33

Rep: Reputation: 4
Can you tell us what operating system you have?
 
Old 04-29-2011, 05:47 AM   #4
Fracker
Member
 
Registered: Mar 2009
Posts: 86

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by xzcallaway View Post
Can you tell us what operating system you have?
Linux of course, ext3 type partition..

Any ways, closing this
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
recovery of deleted files linux4real Linux - Newbie 7 06-29-2006 09:14 AM
recovery of deleted files linux4real Linux - Software 3 06-27-2006 02:13 PM
recovery of deleted files linux4real Linux - General 1 06-27-2006 10:32 AM
deleted files - reiser JS recovery eponymous Linux - Hardware 0 10-15-2004 04:06 PM
recovery files deleted in Linux Nandex Linux - Software 8 02-14-2004 05:22 PM


All times are GMT -5. The time now is 01:00 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration