![]() |
|
|
|
|
|||||||
| Forums | Portal | Register | Forum Rules | FAQ | Contribute | Members List | Arcade | Search | Today's Posts | Mark Forums Read |
| Shell Programming and Scripting Post questions about KSH, CSH, SH, BASH, PERL, PHP, SED, AWK and OTHER shell scripts here. |
|
|
Submit Tools | LinkBack | Thread Tools | Display Modes |
|
#1
|
||||
|
||||
|
debugfs use ?
using debugfs we can restore the deleted file provided if we know the inode no. of the same file
can anyone tell me how to use this command in practically.Below the inode of a file caled minfo.txt.I m using IBM AIX 5.3 90139 minfo.txt -------------------------------- |
| Forum Sponsor | ||
|
|
|
#2
|
|||
|
|||
|
debugfs was designed to work on ext2 filesystems. What type filesystem does the deleted file reside on?
|
|
#3
|
||||
|
||||
|
can u tell me how to check the filesystem
|
|
#4
|
|||
|
|||
|
Suppose the file system is ext2, ext3, or raiserfs, is it possible to use the debugfs tool or ext3grep?
I have posted here a solution for ext3 using debugfs to get the inode, and extrgrep to undelete the file. I hope it helps. 1. run debugfs to the location of files and list all files. # debugfs $HARDDISK debugfs> cd /lost/directory debugfs> ls -d <INODE> ... deleted_files_are_enclosed_in_<_> INODE 2. restore using ext3grep # ext3grep $HARDDISK --restore-inode INODE lordmwesh kivuva.kenya.or.ke |
|||
| Google The UNIX and Linux Forums |