LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 10-10-2006, 10:28 PM   #1
Zero-0-Effect
Member
 
Registered: Sep 2002
Location: Texas
Distribution: SlackWare - Current LFS - CVS
Posts: 267

Rep: Reputation: 31
Deleted files through samba share; Recovery??


I have my linux home directory shared out to my xp machine and was experimenting with a few things and instead of deleting the link from 'docs and settings' to the linux home directory I deleted the contents the link pointed to - some files in my linux home directory. I immediately unmounted the drive and ran debugfs and lsdel but it shows 0 inodes being deleted but the files are indeed gone.

The file system is ext3 and home is on its own partition. Not all of /home/user is gone.. just a few important directories. .thunderbird being one.

Any ideas? Does samba do something strange with it like put it in a recycle bin somewhere? I dont remember setting anything like that up in samba.
 
Old 10-11-2006, 06:03 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3590Reputation: 3590Reputation: 3590Reputation: 3590Reputation: 3590Reputation: 3590Reputation: 3590Reputation: 3590Reputation: 3590Reputation: 3590Reputation: 3590
I immediately unmounted the drive and ran debugfs and lsdel but it shows 0 inodes being deleted but the files are indeed gone.
Indeed they are. Consider the files gone and irrecoverable. If you still want to try, there's the forensics approach. Check any major "undelete" thread for steps. Understand beforehand recovery will be costly as in learning curve and invested time and comes with no guarantee wrt (partial) results whatsoever. You do make backups, right?..


The file system is ext3 and home is on its own partition. Not all of /home/user is gone.. just a few important directories. .thunderbird being one.
Ext3 actually thwarts recovery but that's in the gory details.


Does samba do something strange with it like put it in a recycle bin somewhere?
No, AFAIK it doesn't. If you want a thrashcan you could try and LD_PRELOAD something like http://freshmeat.net/projects/libtrash/.
 
Old 10-12-2006, 06:54 PM   #3
Zero-0-Effect
Member
 
Registered: Sep 2002
Location: Texas
Distribution: SlackWare - Current LFS - CVS
Posts: 267

Original Poster
Rep: Reputation: 31
Thanks for the reply. Just so happens I did make a backup a few weeks ago of the more important data when I rearranged some partitions and was able to get it back for the most part.

I did a little looking around and found a program called ext3rminator which automates what you just sugested, although its still experimental. It did in fact work and got some info recovered before the program crashed on me. If it could get past a certain spot it would get more back I bet - I didnt patch it to the newest version so that might of helped. Was suprised to find some files I deleted months ago restored.

Incase anyone interest heres a link to the download area:
http://web.glandium.org/debian/repository/experimental/
 
Old 10-13-2006, 03:39 AM   #4
jayakrishnan
Member
 
Registered: Feb 2002
Location: India
Distribution: Slacky 12.1, XP
Posts: 992

Rep: Reputation: 30
U might be interested in this

http://www.data-recovery-software.ne...Recovery.shtml

Works from windows and is free
 
Old 05-01-2009, 02:30 PM   #5
tbeehler
Member
 
Registered: Aug 2003
Location: Washington State, USA
Distribution: Mainly RH 9.0
Posts: 227

Rep: Reputation: 30
Quote:
Originally Posted by Zero-0-Effect View Post
I have my linux home directory shared out to my xp machine and was experimenting with a few things and instead of deleting the link from 'docs and settings' to the linux home directory I deleted the contents the link pointed to - some files in my linux home directory. I immediately unmounted the drive and ran debugfs and lsdel but it shows 0 inodes being deleted but the files are indeed gone.

The file system is ext3 and home is on its own partition. Not all of /home/user is gone.. just a few important directories. .thunderbird being one.

Any ideas? Does samba do something strange with it like put it in a recycle bin somewhere? I dont remember setting anything like that up in samba.
Here's an article that I wrote that should save you some headaches in the future

http://www.linuxquestions.org/questi...in-tip-723004/
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
recovery of deleted files linux4real Linux - Newbie 7 06-29-2006 08:14 AM
recovery of deleted files linux4real Linux - Software 3 06-27-2006 01:13 PM
recovery of deleted files linux4real Linux - General 1 06-27-2006 09:32 AM
deleted files - reiser JS recovery eponymous Linux - Hardware 0 10-15-2004 03:06 PM
recovery files deleted in Linux Nandex Linux - Software 8 02-14-2004 04:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 07:54 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration