flashback linux 4

aamerjavaid · 09-06-2011, 06:06 AM

Hi All,

Can you please share, how can we get data back (in a previous date) similar to flashback in RHEL 4.

Actually we want to get one of our mount point back dated, but don't know, how to accomplish this.

Thanks,

John VV · 09-06-2011, 11:09 PM

??? what ???
back date a mount point ???

Quote:

how can we get data back

did you delete it ? or overwrite it

aamerjavaid · 09-06-2011, 11:20 PM

Thanks for update John,
Actually its deleted, a tar backup taken before system update, which is now needed, as we want to restore in previous state its almost 20 days back.

evo2 · 09-06-2011, 11:23 PM

Quote:

Originally Posted by aamerjavaid

Actually its deleted, a tar backup taken before system update, which is now needed, as we want to restore in previous state its almost 20 days back.

Are you asking how to extract a tar file?

If not, can you please be more specific as to what you what to do?

Evo2.

aamerjavaid · 09-06-2011, 11:23 PM

However if we can flashback OVERWRITTEN, it will be also the best solution, we just want to restore/recreate a tar of 50G, not the whole mount point.

Thanks,

aamerjavaid · 09-06-2011, 11:28 PM

Evo2,
We have updated a database/Apps on a Linux box, before upgrade, we have taken tar backup of database/Apps, it worked, but some how, the tar backup got removed from the filesystem, and we want to go back to previous state, and there are 2 options as john pointed out
1). Restore the filesystem to 20 days back without a backup
2). Get back tar backup somehow on filesystem

Thanks,

John VV · 09-06-2011, 11:42 PM

restore from the tape drive back up from 90 days back or 60 days back

you DO have multiple back ups ? right?

Quote:

and there are 2 options as john pointed out

??? WTF what ?????

i ASKED if you deleted it or overwrote it

so WHAT DID YOU DO !

lets see you said this is RHEL4
is it using ext2 or what as a file system
if the physical drive was UNPLUGGED as soon as "delete"( rm -R) was typed then "photorec " or "extundelete " might

aamerjavaid · 09-07-2011, 01:01 AM

Hi John,
Its a TEST Server and some Project updated/testing was going on that server, and we don't have backup either on TAPE or Disk. if we couldn't recover this, developers have to work for next 3 months.
its ext3 filesystem, and tar was removed with (rm) some 20 days back.

Can you help suggest some options, if we can recover from this, or please suggest some options/guidelines so that atleast avoid this in future.

Thanks,

John VV · 09-07-2011, 02:26 AM

Quote:

ts ext3 filesystem, and tar was removed with (rm) some 20 days back.

if the file on a working and in use drive was removed 20 days ago
you are out of luck
you could send it to a recovery specialist at about $5,000+ to $20,000

extundelete
http://extundelete.sourceforge.net/
might but do not count on it .

however if the file was not removed 5 Minuets ago do not expect much
or PhotoRec
http://www.cgsecurity.org/wiki/PhotoRec

aamerjavaid · 09-07-2011, 03:44 AM

Thank you very much John,
I will give it a try.