On Wed, Feb 25, 2009 at 12:05 PM, Dan Young <[email protected]> wrote:
> On Wed, Feb 25, 2009 at 9:41 AM, drew wymore <[email protected]> > wrote: > > In a punch drunk state I rm -rf'd a directory that I didn't intend to. > > I wasn't unable to immediately unmount the filesystem but was able to > > make a complete image of it to a backup device. The fs is ext3 and > > google led me to debugfs and I was able to see the deleted directory > > and associated inode. It has yet to be deleted as undel inode# said it > > was still allocated. My question is. How do I relink the inode to > > userland so I can grab the directory and back it up properly :) > > I've had good results with ext3grep: > > http://code.google.com/p/ext3grep/ > http://www.xs4all.nl/~carlo17/howto/undelete_ext3.html<http://www.xs4all.nl/%7Ecarlo17/howto/undelete_ext3.html> > > ext3grep $IMAGE --dump-names > and > ext3grep $IMAGE --restore-file path/to/your/file > were particularly helpful. > > -- > Dan Young > _______________________________________________ > --restore-all --after seem to be very useful. It dumped a large amount of data that was good to go before tanking for some unknown reason, I believe space constraints but I'm not sure yet. At least I know I have a usable image and that I can restore some data from it. I'm just hoping I can get what I want restored. Thanks to all for your valuable help and insights. Drew- _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
