LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-12-2013, 04:48 AM   #1
boby.kumar
Member
 
Registered: Mar 2013
Posts: 92

Rep: Reputation: Disabled
Need backup of lost data in linux


Hi Team

All the data has been lost accediently from the home area in linux. No data is found in Trash folder.

Could you please help me to recover all data? its very critical for me and no work is more without this data.
please help me here, i don't know backup procedure in linux.


Thanks and Regards
your friend
 
Old 08-12-2013, 04:55 AM   #2
astrogeek
Moderator
 
Registered: Oct 2008
Distribution: Slackware [64]-X.{0|1|2|37|-current} ::12<=X<=14, FreeBSD_10{.0|.1|.2}
Posts: 3,884
Blog Entries: 1

Rep: Reputation: 2005Reputation: 2005Reputation: 2005Reputation: 2005Reputation: 2005Reputation: 2005Reputation: 2005Reputation: 2005Reputation: 2005Reputation: 2005Reputation: 2005
It would be helpful if you could tell us what distro, filesystem, how the data went missing, what you have done since the data disappeared, etc.

It is obviously too late for a "backup procedure", that is what you do before data is erased.

And there is no "recovery procedure", although there are tools that can sometimes recover erased data - depending on how it went missing.

One important thing - do NOT reboot or write new data to the disk - don't "try things" until you have a good plan, all of that just makes it worse.

Last edited by astrogeek; 08-12-2013 at 05:00 AM.
 
Old 08-12-2013, 11:06 AM   #3
boby.kumar
Member
 
Registered: Mar 2013
Posts: 92

Original Poster
Rep: Reputation: Disabled
Thanks a lot for your suggestion

filesystem is ext4 and linux version is RHEL6.2. some users had word that randomly data is disappeared. No consolidated output is there what they have gone for erasing all data.

I have done lot of googling but not found how to recover the data. please help me to get the data if possible, as i am responsible person for this. please share as soon as what you can do for this.

I would be waiting you.

Thanks and Regards
 
Old 08-12-2013, 11:29 AM   #4
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 17,945

Rep: Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693
Quote:
Originally Posted by boby.kumar View Post
Thanks a lot for your suggestion
filesystem is ext4 and linux version is RHEL6.2. some users had word that randomly data is disappeared. No consolidated output is there what they have gone for erasing all data.

I have done lot of googling but not found how to recover the data. please help me to get the data if possible, as i am responsible person for this. please share as soon as what you can do for this.
Well, if you're the responsible person, did you not back up the server?? And as astrogeek said, there are ways (like photorec), that can *MAYBE* recover some data, but if people have continued to use that server, then it's less and less likely that you're going to be able to recover the data.

And what you posted isn't very clear. What do you mean by "randomly data is disappeared. No consolidated output is there what they have gone for erasing all data."?? Either someone deleted the files (in which case, check the trash cans on their local desktop clients), or you have a hardware problem (which can't be easily recovered, if at all). Since you need quick help, have you contacted Red Hat support??

As the responsible person, you should be paying for RHEL, which does entitle you to support.
 
Old 08-12-2013, 11:46 AM   #5
haertig
Senior Member
 
Registered: Nov 2004
Distribution: Debian, Ubuntu, LinuxMint, Slackware, SysrescueCD
Posts: 2,117

Rep: Reputation: 330Reputation: 330Reputation: 330Reputation: 330
First off, the obvious thing, is /home mounted? (if it has its own seperate mountpoint) Post the output of the "mount" command and the output of "cat /etc/fstab".

Next, get the users off the system if they are logged in. The more they write additional data to /home, the harder it will become to recover (this is the worst case scenerio, assuming the disk is failing, etc., but it's always prudent advice to STOP WRITING DATA to a disk that is having problems - at this point we don't know if your disk is failing or something else is going on).

I would boot the system into single user mode, run some disk diagnostics (is your disk SMART enabled?), mount /home read-only, and start carefully snooping around. See what's there. You said all data is gone, but it can't be ALL data that is missing, because with no $HOME directories existing your users would not be able to login normally and would probably be dumped to /. Are they getting error messages related to "missing $HOME" when they attempt to login?
 
2 members found this post helpful.
Old 08-12-2013, 12:40 PM   #6
szboardstretcher
Senior Member
 
Registered: Aug 2006
Location: Detroit, MI
Distribution: GNU/Linux systemd
Posts: 3,816

Rep: Reputation: 1346Reputation: 1346Reputation: 1346Reputation: 1346Reputation: 1346Reputation: 1346Reputation: 1346Reputation: 1346Reputation: 1346Reputation: 1346
Hartig: those are some very good ideas.

However, I would like to mention that one of the first steps, the very first things that I do, is power the server off. Then I extract the drive/s and run forensics on them to pull the data into new drives.

This keeps caches/hardware caches/users/processes etc, from changing the disk and causing more inadvertent loss of data. Single user mode is ok, but the hardware is still running, especially if it is a raid, and small/big changes can happen even if it is not mounted.
 
2 members found this post helpful.
Old 08-14-2013, 05:52 AM   #7
boby.kumar
Member
 
Registered: Mar 2013
Posts: 92

Original Poster
Rep: Reputation: Disabled
Thanks a lot.
tried to logged in linux machine by user abc123, getting the following prompt:

login as: abc123
abc123@10.20.30.X's password:
Last login: Wed Aug 14 14:30:15 2013 from 10.20.30.y
-bash-4.1$
-bash-4.1$
could you please help me to get root cause of this probelm? It was working fine earlier.

please help me here.

Thanks and Regards
 
Old 08-14-2013, 09:33 AM   #8
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 17,945

Rep: Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693
Quote:
Originally Posted by boby.kumar View Post
Thanks a lot.
tried to logged in linux machine by user abc123, getting the following prompt:

login as: abc123
abc123@10.20.30.X's password:
Last login: Wed Aug 14 14:30:15 2013 from 10.20.30.y
-bash-4.1$
-bash-4.1$
could you please help me to get root cause of this probelm? It was working fine earlier.

please help me here.
Help you with WHAT??? You logged in, and got a bash prompt. What, exactly, were you expecting??

Also, you need to open new threads for new questions...unless this somehow has something to do with the data you lost.
 
Old 08-16-2013, 02:26 AM   #9
boby.kumar
Member
 
Registered: Mar 2013
Posts: 92

Original Poster
Rep: Reputation: Disabled
Thanks TB0ne.
Actually I was expecting [abc123@hostname]# promt. I was also getting the same prompt earlier.
Now it is -bash-4.1$ .
Could you please help me how to resolve this problem and how this occurred?

Thanks In Advance
 
Old 08-16-2013, 10:18 AM   #10
TB0ne
LQ Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 17,945

Rep: Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693Reputation: 3693
Quote:
Originally Posted by boby.kumar View Post
Thanks TB0ne.
Actually I was expecting [abc123@hostname]# promt. I was also getting the same prompt earlier.
Now it is -bash-4.1$ .
Could you please help me how to resolve this problem and how this occurred?
AGAIN, you need to open a new thread for a new question. And there IS no problem to resolve, and how can anyone here tell you how it occurred? We don't know what you did, unless you tell us.

The prompt comes from the users .bashrc or .profile files, and is from whatever the PS1 variable is set to. So, either it got unset, or someone deleted their .bashrc. Since those files are in the users HOME directory, and you lost data on the /home partition, that's probably where it is. So, restore those files from your backup.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
I lost most of my data, backup cannot restore. ThatPerson Linux - Distributions 4 09-14-2011 01:58 AM
backup script causing data to be lost on main server- RHEL fedora_user Linux - Newbie 4 02-16-2010 07:40 AM
HDD partition lost. xandros DVD + me = lost data lein Linux - General 18 05-22-2007 06:47 AM
Howto recover lost and formatted data on lost partitions. Sören Schneider LinuxQuestions.org Member Success Stories 2 04-05-2006 07:38 AM
Can I retrieve my data lost after installing Linux? alanell712 Red Hat 6 03-05-2006 07:35 AM


All times are GMT -5. The time now is 10:33 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration