LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices



Reply
 
Search this Thread
Old 02-12-2004, 07:32 PM   #1
Nandex
LQ Newbie
 
Registered: Dec 2003
Location: Cbba
Distribution: Red hat 9.0
Posts: 4

Rep: Reputation: 0
recovery files deleted in Linux


hi all.
I have trouble getting a sotware to recovery deleted files in linux (ext2, ext3), if you know of some please , you can tell me, I'll be waiting your answers , thanks a lot.
 
Old 02-12-2004, 09:05 PM   #2
spuzzzzzzz
Member
 
Registered: Sep 2003
Location: Australia
Distribution: Gentoo
Posts: 465

Rep: Reputation: 30
If you delete a file using the command "rm", you can't recover it. If you are using gnome or kde and you delete a file by clicking on it and pressing "delete" then you can recover it by double clicking on the trash can on the desktop.
 
Old 02-12-2004, 10:58 PM   #3
Kristijan
Member
 
Registered: Sep 2003
Location: Melbourne, Australia
Distribution: NetBSD 3.0.1, Slackware 10.1
Posts: 394

Rep: Reputation: 30
Not entirly true spuzzzzzzz. There are forms of data recovery that can recover deleted data. From my understanding, data is not deleted. It is only deleted when another chunk of data overwrites it.

With Nandex's case though, once the data is deleted, playing with application software and what not would most likely make the data harder to retreive. Not 100% on all this though, so don't go quoting me. I'm trying to remember from a talk at ruxcon last year.

http://www.ruxcon.org
 
Old 02-13-2004, 01:47 AM   #4
spuzzzzzzz
Member
 
Registered: Sep 2003
Location: Australia
Distribution: Gentoo
Posts: 465

Rep: Reputation: 30
From what I understand, the only thing actually deleted is the inode for the file. The data from the file is still there (unless something else tries to use that part of the disk) but the only way I could possibly imagine to recover it would involve knowing the exact position on the disk of the deleted file. If there is a different way, though, I would be extremely interested in knowing it.
 
Old 02-13-2004, 01:58 AM   #5
hiteshmaisheri
Member
 
Registered: Nov 2003
Location: Kerala, India
Distribution: Red Hat, Knoppix, Mandrake, FreeBSD
Posts: 231

Rep: Reputation: 30
is there any software that does the recovery for us???? Can anyone sugges some sofware on it????
 
Old 02-13-2004, 01:14 PM   #6
Nandex
LQ Newbie
 
Registered: Dec 2003
Location: Cbba
Distribution: Red hat 9.0
Posts: 4

Original Poster
Rep: Reputation: 0
Hi all.
thanks for the answers, I was looking for some programs , and I find some here ,http://freshmeat.net/search/?q=delet...tion=projects, you can dowload this and prove it .
I proved some of this programs, but I didn't have luck, I think maybe because most of them is only for Ext2 and not Ext3,i find one that maybe function, the problem is that you have to know the blocks o inodes,it's a little to difficult to use, but I will try to find other one, tell me if you have better luck than me , ok?, Good luck.
 
Old 02-13-2004, 05:16 PM   #7
aigartua
Member
 
Registered: Dec 2002
Location: Xalapa, Ver. México
Distribution: Red Hat
Posts: 108

Rep: Reputation: 15
You can undelete manually.

Step 1: Stop write your hd,

Step 2: type

root#debugfs /dev/hda1

I suppose the file you want to recover is on /dev/hda1 .

Step 3:

debugfs:lsdel

list the file you delete recently.

pay more attention on file's inode,

debugfs:dump <file inode> yourhome

then you will find file in yourhome directory.
 
Old 02-14-2004, 01:12 AM   #8
hiteshmaisheri
Member
 
Registered: Nov 2003
Location: Kerala, India
Distribution: Red Hat, Knoppix, Mandrake, FreeBSD
Posts: 231

Rep: Reputation: 30
thanx for the help ... will check out the results of it...
 
Old 02-14-2004, 05:22 PM   #9
Nandex
LQ Newbie
 
Registered: Dec 2003
Location: Cbba
Distribution: Red hat 9.0
Posts: 4

Original Poster
Rep: Reputation: 0
Thanks for the help too aigartua, I did that , but in the step3 (lsdel),
I get 0 inodes founded , anyway , I'll try to find other solution, thanks
Greetings.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
recover deleted windows files from linux(help) rkrishna Linux - General 2 06-22-2005 12:32 PM
deleted linux partition adn the boot loader was deleted also,now i have only gnu grub boris199 Linux - Laptop and Netbook 2 01-29-2005 05:53 PM
deleted files - reiser JS recovery eponymous Linux - Hardware 0 10-15-2004 04:06 PM
Recover deleted files from a Win partition in Linux? PenguinPwrdBox Linux - General 3 08-03-2004 05:05 AM
How to delete the destination files while the source files deleted in cp -u ? myunicom Linux - General 4 09-26-2003 02:13 PM


All times are GMT -5. The time now is 06:43 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration