MultiDrive – free backup, clone & wipe disk utility from Atola Technology

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]



Post new topic Reply to topic  Page 1 of 1
  [ 14 posts ] 
  Previous topic | Next topic 
Author Message
romulluss
 Post subject: Linux - deleted data recovery
PostPosted: August 4th, 2009, 17:39 
Offline

Joined: March 12th, 2009, 16:31
Posts: 18
Location: United Kingdom
Hi.. how to recover deleted data on a Linux partition: ext2/ext3?
Data was accidently deleted, and hard drive has never been used since. Problem is R-Studio find no original file/folder structure, same Stellar Phoenix for Linux.. is there anything ele I can use to recover those missing files?

Thank you in advance.
Top
 Profile  
 
N.C.
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 4th, 2009, 19:09 
Offline
User avatar

Joined: March 28th, 2008, 7:52
Posts: 1466
Location: Europe, Hungary
debugfs can help you if the structure is good enough...
Top
 Profile  
 
pcrecovery
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 5th, 2009, 8:36 
Offline

Joined: June 9th, 2008, 12:06
Posts: 213
Post says ext2/ext3 , are you sure? There are MANY other FS used in *nix systems...also, mixed as well. Often I see 3 or more different FS on one box.

_________________
http://pcrecoveryllc.com
Top
 Profile  
 
pninja
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 5th, 2009, 9:45 
Offline
User avatar

Joined: April 16th, 2005, 11:34
Posts: 92
In Linux/Unix file systems, there is no way to recover File/Folder structure if deleted
intentionally or accidentally. The only solution left is RAW (signature based) recovery.
Top
 Profile  
 
N.C.
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 6th, 2009, 4:24 
Offline
User avatar

Joined: March 28th, 2008, 7:52
Posts: 1466
Location: Europe, Hungary
pninja wrote:
In Linux/Unix file systems, there is no way to recover File/Folder structure if deleted
intentionally or accidentally. The only solution left is RAW (signature based) recovery.


disagree

The most of the FSes is restorabel after delete. ;)
Top
 Profile  
 
pcrecovery
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 6th, 2009, 10:11 
Offline

Joined: June 9th, 2008, 12:06
Posts: 213
pninja wrote:
In Linux/Unix file systems, there is no way to recover File/Folder structure if deleted
intentionally or accidentally. The only solution left is RAW (signature based) recovery.


AGAIN, it depends very much on "what happened" and the FS...study Ext2 vs Ext3 or UFS and see what happens to deleted files' inode for example...

_________________
http://pcrecoveryllc.com
Top
 Profile  
 
pninja
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 6th, 2009, 19:55 
Offline
User avatar

Joined: April 16th, 2005, 11:34
Posts: 92
N.C. wrote:
pninja wrote:
In Linux/Unix file systems, there is no way to recover File/Folder structure if deleted
intentionally or accidentally. The only solution left is RAW (signature based) recovery.


disagree

The most of the FSes is restorabel after delete. ;)


In rare cases you can use information from journal
(In journaling FS) if you visited the deleted files recently.
Did you mean that?
AFAIK, no commercial recovery software is able to do that.
Top
 Profile  
 
N.C.
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 7th, 2009, 15:33 
Offline
User avatar

Joined: March 28th, 2008, 7:52
Posts: 1466
Location: Europe, Hungary
pninja wrote:
In rare cases you can use information from journal
(In journaling FS) if you visited the deleted files recently.
Did you mean that?


Linux have many fs.
Some are more recoverable, some less...
Personally i am supporting the XFS. :D

pninja wrote:
AFAIK, no commercial recovery software is able to do that.


Agree, there is no commercial software.
I have seen some ext2/3 undelet solution some years before, but i can't remember for the name or where was i found these...

Janos
Top
 Profile  
 
pepe
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 7th, 2009, 18:27 
Online

Joined: October 3rd, 2005, 0:40
Posts: 4754
Location: Hungary
on ext3 the inodes are zapped uppon file deletion, so there's no way of restoring a fragmented file based on the file system. This is not true for ext 2, so there are better chances with that.

pepe

_________________
Adatmentés - Data recovery
Top
 Profile  
 
fistron
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 8th, 2009, 0:17 
Offline

Joined: July 28th, 2008, 16:05
Posts: 34
Location: вирджиня
ext3grep will find copies of inodes lingering in the journal.

It's best to image ext3 filesystem, even mounting readonly will cause open transactions left in the journal to complete.
Top
 Profile  
 
PePa
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 27th, 2009, 13:06 
Offline

Joined: November 14th, 2005, 14:32
Posts: 4
Location: Lake
to Techtiger4 and techiee - did you check those websites?
There's NO information about the ability to restore deleted files. No wonders why.

From ExtFS, UFS , Reiser and XFS none have real undelete abilities like NTFS or FAT.

Raw recovery for ExtFS is possible, but with some complications (indirect inodes). I know only one program which can work with it properly.
Top
 Profile  
 
pepe
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 27th, 2009, 14:27 
Online

Joined: October 3rd, 2005, 0:40
Posts: 4754
Location: Hungary
Quote:
Raw recovery for ExtFS is possible, but with some complications (indirect inodes). I know only one program which can work with it properly.


U surely meant first indirrect blocks. Yes they represent some problem, but it is possible to circumvent it, as I did in my smart RAW rec prog.
So now we have at least 2 progs, since it is not very probable that u use mine ;)

_________________
Adatmentés - Data recovery
Top
 Profile  
 
HardDiskBug
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 28th, 2009, 5:34 
Offline

Joined: October 19th, 2006, 11:56
Posts: 217
Yes, there are chances that he used yours, as he seems to be inspired from you..Pepe - Pepa..nice. :)

_________________
I just hate spammers...It was a Spammer, who ruined my life!
Top
 Profile  
 
pepe
 Post subject: Re: Linux - deleted data recovery
PostPosted: August 29th, 2009, 5:15 
Online

Joined: October 3rd, 2005, 0:40
Posts: 4754
Location: Hungary
not very probable... Unless hacked my PC... :)

_________________
Adatmentés - Data recovery
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 14 posts ] 

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 25 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Switch to mobile style
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group