Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
 |
07-17-2006, 09:42 PM
|
#1
|
Member
Registered: Jun 2003
Location: Thames Valley, UK
Distribution: RedHat from 4 -9, Fedora, Ubuntu, Centos 3 - 7, Puppy Linux, and lots of raspberry pi
Posts: 142
Rep:
|
Recover formatted ext3 partition files
I've completely fluffed up my drive when trying to install another distro onto one of my partitions. Even though I gave the correct drive (hdb2) it installed over my /home partition (hda2).
I have backed up but not for about a month and I could really do with trying to get some files off it. I realise that there are going to be some that are lost forever, but it was a big partition and only a small bit has been written to it - so I am hopeful of some.
Can anyone advise how to do it simply, whether there are any decent tools out there that don't cost the earth - and what my chances are
Thanks
PS: tried R-Linux but couldn't seem to get any sensible results.
Last edited by mazzo; 07-18-2006 at 03:43 AM.
|
|
|
07-18-2006, 04:42 AM
|
#2
|
Member
Registered: Oct 2004
Location: UK
Distribution: Ubuntu/Kubuntu
Posts: 249
Rep:
|
Well as you suggest some of your files are probably gone forever, however, I have heard that apparently files can actually be retrieved from a hard drive even if they've been over-written many times - I'm not too sure just how true that is, but you might want to have a look at security distributions such as Knoppix-STD and the Auditor distro to see if they have any tools that might help you.
|
|
|
07-18-2006, 04:52 AM
|
#3
|
Member
Registered: Oct 2004
Location: Germany
Distribution: Debian
Posts: 274
Rep:
|
good luck, I tried to recover deleted files on a ext3 drive some month ago and had to learn that compared to ext2 (non-journaling) this is nearly impossible.
but you may try using autopsy and elocker (google is your friend)
HTH,
Flo
|
|
|
07-18-2006, 06:58 AM
|
#4
|
Member
Registered: Jun 2003
Location: Thames Valley, UK
Distribution: RedHat from 4 -9, Fedora, Ubuntu, Centos 3 - 7, Puppy Linux, and lots of raspberry pi
Posts: 142
Original Poster
Rep:
|
Thanks. I hadn't thought of Knoppix STD. Looked at it years ago and thought I'd never need/use it. Need to get familiar with some of the tools.
I am not sure how ext3 saves files, whether it fragments them, puts them all in order from the start of the position - filling space as it goes along, or (as I am hoping) spews them all over the disk but complete.
I am not overly hopeful, but there must be decent reasons for migrating to ext3 than ext2 - just hope it benefits recovery.
Thanks again.
|
|
|
07-18-2006, 07:56 AM
|
#5
|
Member
Registered: Oct 2003
Location: Zürich
Distribution: Debian
Posts: 537
Rep:
|
Try it out:
http://www.cgsecurity.org/wiki/PhotoRec
I used it recently with much success on an 80-GB NTFS partition. ext3 is listed. A surprisingly large amount of file formats are supported. Its main strength is photo files, it won't get everything, and you'll also get garbage, but it works well for many types and is an open-source tool.
The most recent version of Knoppix (5.0.1) has its sister program TestDisk version 6.3-1, but apparently not PhotoRec. The most recent version is the 6.4 release.
|
|
|
07-19-2006, 04:29 AM
|
#6
|
Member
Registered: Jun 2003
Location: Thames Valley, UK
Distribution: RedHat from 4 -9, Fedora, Ubuntu, Centos 3 - 7, Puppy Linux, and lots of raspberry pi
Posts: 142
Original Poster
Rep:
|
I had tried photorec - which did pull some files out - but they were fragmented "bits". It did pull out jpegs well! I wanted something that got me my mail and documents back.
I have made an image of the drive and can grep for certain things. Some I find and others not, but getting them off is another thing.
Most recover programs - even though they are ext2/3 specific - tend to concentrate on .doc .xls etc and not .sxw (openoffice type) docs. They are also good at finding Outlook Express mail files - but not mbox or Evolution type. Seems odd that someone would even have OE on an ext3 file system.
Try as hard as I could, I could not get foremost to work. That looked my best bet as it seems you can create file masks for it to search - which with some reading and playing I might have got there - but it would not work (this was the version in the Knoppix STD)
So, I guess my questions now are:
If I can grep certain files, how can I easily get them back?
Are there other progs that could get back mbox / evolution files?
Will my wife ever speak to me again????
Last edited by mazzo; 07-19-2006 at 04:31 AM.
|
|
|
07-19-2006, 05:24 AM
|
#7
|
LQ Veteran
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,337
|
I went to a presentation on pyflag at LCA in NZ. It's more designed for forensic analysis rather than recovery, but it can certainly handle M$soft mail systems, so hopefully also Linux ones.
Files can be individually selected for saving, don't know about bulk saving.
You should find it on sourceforge I would think - check it out.
|
|
|
07-02-2010, 12:27 AM
|
#8
|
LQ Newbie
Registered: Jun 2010
Posts: 9
Rep:
|
Ext3 recovery
Quote:
Originally Posted by doc.nice
good luck, I tried to recover deleted files on a ext3 drive some month ago and had to learn that compared to ext2 (non-journaling) this is nearly impossible.
but you may try using autopsy and elocker (google is your friend)
HTH,
Flo
|
I guess u need some Ext3 Recovery software
|
|
0 members found this post helpful.
|
07-02-2010, 04:35 AM
|
#9
|
Senior Member
Registered: Oct 2004
Location: Houston, TX (usa)
Distribution: MEPIS, Debian, Knoppix,
Posts: 4,727
|
Quote:
Originally Posted by mariapeter12
I guess u need some Ext3 Recovery software
|
Any suggestions? ...
|
|
0 members found this post helpful.
|
07-02-2010, 09:36 AM
|
#10
|
LQ Veteran
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Mint
Posts: 17,809
|
Quote:
Originally Posted by mariapeter12
I guess u need some Ext3 Recovery software
|
Please do not dig up old threads and then post something like this which adds no useful information.
|
|
|
All times are GMT -5. The time now is 07:02 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|