LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices

Closed Thread
 
LinkBack Search this Thread
Old 07-17-2006, 08:42 PM   #1
mazzo
Member
 
Registered: Jun 2003
Location: Thames Valley, UK
Distribution: RedHat 7.3 & 9 Ubuntu, Puppy Linux, Ubuntu and CentOS
Posts: 135

Rep: Reputation: 15
Recover formatted ext3 partition files


I've completely fluffed up my drive when trying to install another distro onto one of my partitions. Even though I gave the correct drive (hdb2) it installed over my /home partition (hda2).

I have backed up but not for about a month and I could really do with trying to get some files off it. I realise that there are going to be some that are lost forever, but it was a big partition and only a small bit has been written to it - so I am hopeful of some.

Can anyone advise how to do it simply, whether there are any decent tools out there that don't cost the earth - and what my chances are

Thanks

PS: tried R-Linux but couldn't seem to get any sensible results.

Last edited by mazzo; 07-18-2006 at 02:43 AM.
 
Old 07-18-2006, 03:42 AM   #2
mickyg
Member
 
Registered: Oct 2004
Location: UK
Distribution: Ubuntu/Kubuntu
Posts: 245

Rep: Reputation: 30
Well as you suggest some of your files are probably gone forever, however, I have heard that apparently files can actually be retrieved from a hard drive even if they've been over-written many times - I'm not too sure just how true that is, but you might want to have a look at security distributions such as Knoppix-STD and the Auditor distro to see if they have any tools that might help you.
 
Old 07-18-2006, 03:52 AM   #3
doc.nice
Member
 
Registered: Oct 2004
Location: Germany
Distribution: Debian
Posts: 274

Rep: Reputation: 34
good luck, I tried to recover deleted files on a ext3 drive some month ago and had to learn that compared to ext2 (non-journaling) this is nearly impossible.
but you may try using autopsy and elocker (google is your friend)

HTH,
Flo
 
Old 07-18-2006, 05:58 AM   #4
mazzo
Member
 
Registered: Jun 2003
Location: Thames Valley, UK
Distribution: RedHat 7.3 & 9 Ubuntu, Puppy Linux, Ubuntu and CentOS
Posts: 135

Original Poster
Rep: Reputation: 15
Thanks. I hadn't thought of Knoppix STD. Looked at it years ago and thought I'd never need/use it. Need to get familiar with some of the tools.

I am not sure how ext3 saves files, whether it fragments them, puts them all in order from the start of the position - filling space as it goes along, or (as I am hoping) spews them all over the disk but complete.

I am not overly hopeful, but there must be decent reasons for migrating to ext3 than ext2 - just hope it benefits recovery.

Thanks again.
 
Old 07-18-2006, 06:56 AM   #5
michapma
Member
 
Registered: Oct 2003
Location: Zürich
Distribution: Debian
Posts: 537

Rep: Reputation: 39
Try it out:
http://www.cgsecurity.org/wiki/PhotoRec

I used it recently with much success on an 80-GB NTFS partition. ext3 is listed. A surprisingly large amount of file formats are supported. Its main strength is photo files, it won't get everything, and you'll also get garbage, but it works well for many types and is an open-source tool.

The most recent version of Knoppix (5.0.1) has its sister program TestDisk version 6.3-1, but apparently not PhotoRec. The most recent version is the 6.4 release.
 
Old 07-19-2006, 03:29 AM   #6
mazzo
Member
 
Registered: Jun 2003
Location: Thames Valley, UK
Distribution: RedHat 7.3 & 9 Ubuntu, Puppy Linux, Ubuntu and CentOS
Posts: 135

Original Poster
Rep: Reputation: 15
I had tried photorec - which did pull some files out - but they were fragmented "bits". It did pull out jpegs well! I wanted something that got me my mail and documents back.

I have made an image of the drive and can grep for certain things. Some I find and others not, but getting them off is another thing.

Most recover programs - even though they are ext2/3 specific - tend to concentrate on .doc .xls etc and not .sxw (openoffice type) docs. They are also good at finding Outlook Express mail files - but not mbox or Evolution type. Seems odd that someone would even have OE on an ext3 file system.

Try as hard as I could, I could not get foremost to work. That looked my best bet as it seems you can create file masks for it to search - which with some reading and playing I might have got there - but it would not work (this was the version in the Knoppix STD)


So, I guess my questions now are:

If I can grep certain files, how can I easily get them back?

Are there other progs that could get back mbox / evolution files?

Will my wife ever speak to me again????

Last edited by mazzo; 07-19-2006 at 03:31 AM.
 
Old 07-19-2006, 04:24 AM   #7
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 11,801

Rep: Reputation: 923Reputation: 923Reputation: 923Reputation: 923Reputation: 923Reputation: 923Reputation: 923Reputation: 923
I went to a presentation on pyflag at LCA in NZ. It's more designed for forensic analysis rather than recovery, but it can certainly handle M$soft mail systems, so hopefully also Linux ones.
Files can be individually selected for saving, don't know about bulk saving.

You should find it on sourceforge I would think - check it out.
 
Old 07-01-2010, 11:27 PM   #8
mariapeter12
LQ Newbie
 
Registered: Jun 2010
Posts: 9

Rep: Reputation: 0
Ext3 recovery

Quote:
Originally Posted by doc.nice View Post
good luck, I tried to recover deleted files on a ext3 drive some month ago and had to learn that compared to ext2 (non-journaling) this is nearly impossible.
but you may try using autopsy and elocker (google is your friend)

HTH,
Flo
I guess u need some Ext3 Recovery software
 
0 members found this post helpful.
Old 07-02-2010, 03:35 AM   #9
archtoad6
Senior Member
 
Registered: Oct 2004
Location: Houston, TX (usa)
Distribution: MEPIS, Debian, Knoppix,
Posts: 4,727
Blog Entries: 15

Rep: Reputation: 230Reputation: 230Reputation: 230
Quote:
Originally Posted by mariapeter12 View Post
I guess u need some Ext3 Recovery software
Any suggestions? ...
 
0 members found this post helpful.
Old 07-02-2010, 08:36 AM   #10
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Arch/XFCE
Posts: 17,802

Rep: Reputation: 728Reputation: 728Reputation: 728Reputation: 728Reputation: 728Reputation: 728Reputation: 728
Quote:
Originally Posted by mariapeter12 View Post
I guess u need some Ext3 Recovery software
Please do not dig up old threads and then post something like this which adds no useful information.
 
  


Closed Thread

Tags
file, recovery


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
corrupt ext3 partition - need to recover whysyn Linux - Hardware 8 07-02-2010 08:30 AM
Trying to recover files with ext3 filesystem bgenora Linux - Newbie 1 11-07-2005 11:54 AM
recover fat partition formatted with ext3 by error mermoz Linux - Newbie 3 05-31-2005 06:55 AM
Recover files from formatted hard disk bankfishin Linux - General 2 10-22-2004 04:39 PM
recover files in ext3 hana_abe Linux - Newbie 3 11-16-2003 09:46 AM


All times are GMT -5. The time now is 08:14 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration