LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Desktop (https://www.linuxquestions.org/questions/linux-desktop-74/)
-   -   Log of deleted/moved files (https://www.linuxquestions.org/questions/linux-desktop-74/log-of-deleted-moved-files-582189/)

TuxLives 09-04-2007 03:35 PM

Log of deleted/moved files
 
I am running a dual boot system with a shared file area. I am not sure what happened, but I cannot find some photos that I copied (I think I copied anyway) onto my machine.

Is there a log of these kinds of things that I might be able to look at to see if and where these files where created/deleted/etc?

TuxLives 09-04-2007 03:37 PM

I look at the meta data in the thumbnail, but the directory it references is not there????

gilead 09-04-2007 07:30 PM

If you're not sure whether you actually copied the files (and it was reasonably recently), have you tried grep'ing your command history? Substitute a real filename in the following and you should be able to see if you copied the files (depending on your history size and the number of commands used since then):
Code:

history | grep 'filename'

angryfirelord 09-04-2007 08:12 PM

Try coping the files again, but this time when it is done, unmount the drive. Sometimes, Linux likes to cache files and you have to unmount the drive in order for them to be transferred properly.

TuxLives 09-05-2007 10:18 AM

I'll try both of those and see what I get. I may have yanked the SD card out (not normal for me, but then again I don't normally lose things either).

What I was able to do was take the source (SD card) from which the files had been moved (IE: Copied and deleted from) and recover them using a piece of windows freeware (I'd love a linux gui app to do this).

I still want to learn how to do this in linux though.

pwc101 09-05-2007 10:36 AM

Quote:

Originally Posted by angryfirelord (Post 2881418)
Try coping the files again, but this time when it is done, unmount the drive. Sometimes, Linux likes to cache files and you have to unmount the drive in order for them to be transferred properly.

As an easier way of doing this, rather than unmounting and then remounting, try running sync from a command line - it flushes all the disk caches and forces the data to be written. It should have the same effect as unmount/mounting, but be quicker :)

edit:
Quote:

Originally Posted by TuxLives (Post 2882053)
What I was able to do was take the source (SD card) from which the files had been moved (IE: Copied and deleted from) and recover them using a piece of windows freeware (I'd love a linux gui app to do this).

You may want to look into photorec (http://www.cgsecurity.org/wiki/PhotoRec) for recovering images. foremost is also useful for file recovery.

tredegar 09-05-2007 12:13 PM

Quote:

try running sync from a command line - it flushes all the disk caches and forces the data to be written.
Off topic, but....
You need to be careful with this, I have known sync foul things up:
Try downloading a big file with your browser. Issue sync in a terminal window. The download is written to disk, and stops before it has finished. Not good.

TuxLives 09-06-2007 11:30 AM

Quote:

Originally Posted by pwc101 (Post 2882081)
As an easier way of doing this, rather than unmounting and then remounting, try running sync from a command line - it flushes all the disk caches and forces the data to be written. It should have the same effect as unmount/mounting, but be quicker :)

edit:You may want to look into photorec (http://www.cgsecurity.org/wiki/PhotoRec) for recovering images. foremost is also useful for file recovery.

Cool beans. I'll take a look at this app.

Thanks


All times are GMT -5. The time now is 02:36 AM.