Wednesday, June 1, 2011

Re: Restore file from undo

On Tue, May 31, 2011 9:35 pm, Vsevolod Velichko wrote:
> 2011/5/31 Christian Brabandt <cblists@256bit.org>:
>> Hm, if I remember correctly, the inodes are zeroed out, when a file is
>> deleted for ext3 and ext4. That's why extundelete only works correctly
>> with ext2.
>
> Not exactly.
>
> There is even utility ext3grep[1] written by Carlo Wood, which
> performs all the lookup for you. It can help in some cases.
>
> [1] http://code.google.com/p/ext3grep/

Thanks. I was refering to that part from the ext3 faq易:

,----
| Q: How can I recover (undelete) deleted files from my ext3
| partition?
|
| Actually, you can't! This is what one of the developers, Andreas
| Dilger, said about it: In order to ensure that ext3 can safely
| resume an unlink after a crash, it actually zeros out the block
| pointers in the inode, whereas ext2 just marks these blocks as
| unused in the block bitmaps and marks the inode as "deleted" and
| leaves the block pointers alone.
|
| Your only hope is to "grep" for parts of your files that have been
| deleted and hope for the best.
`----

It seems, this is not entirely correct, as stated in the ext3 undelete
HOWTO昌.

extundelete昆, ext3grep昂 and ext3undel&#8309; and might be helpful in
these cases.

That being said, I have no experience with any of these tools and just
wanted to add this info to this thread, just in case this might be useful
to anybody who stumbles over this thread via google.

Links:
易)http://batleth.sapienti-sat.org/projects/FAQs/ext3-faq.html
昌)http://carlo17.home.xs4all.nl/howto/undelete_ext3.html
昆)http://extundelete.sourceforge.net/
昂)http://code.google.com/p/ext3grep/
&#8309;)http://projects.izzysoft.de/trac/ext3undel

regards,
Christian

--
You received this message from the "vim_use" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

No comments: