Home / server / Questions / 235152
In Process
vnix27
Asked: 2011-02-14 21:40:58 +0800 CST

Recover deleted files in linux , can debugfs command solve my purpose?

  • 772

I am trying to list deleted files from my ext3 file system. debugsfs command with -ld option , suppose to list deleted files but it only listing current existing files and folder. Is any alternate way without any third party tools to recover deleted files .

Thanks

linux ext3 data-recovery

2 Answers

  1. Check out extundelete, application for undeleting files on ext3. Please note that in typical system there is rather many automatic write operations to disk, and probability for losing deleted files (as those disk areas are overwritten) is high.

    Typically you want to remount your filesystem as read-only or boot from live-CD or similar to prevent overwriting, if you want to successfully restore any files.

    Another maybe useful (but less so) link is this tutorial for recovering files. Method described in there is rather complex.

    • 1

  2. You could also try photorec from CGSecurity. It tries to recover every stream it can detect. But you can't select files out of the restore process.

    http://www.cgsecurity.org/wiki/PhotoRec

    • 0