Hi Guys,
Greetings!.
I have executed the cronjob that runs the shell script which is in directory.When the cronjob was executed , I found that the directory where the script resides has got deleted.
Note: The directory was deleted with other use not root user.
The... (9 Replies)
Hi,
I am working Linux server machine. Somebody by mistake(or may be knowingly) deleted few folders and files from the machine. How is this possible to recover those files and folders????:confused:
I normally logged in through Putty and winscp only. And don't have any history for putty... (8 Replies)
Hi All,
I accidentally deleted a important folder using rm command.
Can i recover that folder.
I don't have any backup mechanism.
Please suggest.... its very urgant..Plz (1 Reply)
Hi,
By mistake, executed the following command :
rm -rf *
and ALL files got deleted.
But I need to get back these files as they are very very important.
Please help me how to recover this file. Its Urgent for me please.
Thanks in advance. (6 Replies)
Hi Experts,
by mistake i deleted some files that are very important to the project.
is there any way that i can recover those files,there is no backup for that but the details of the file we know.
This will be a great help.
Thanks (5 Replies)
I'm running Fedora Core4. I deleted images off of my Sony DSC-P73 digital camera's memory stick.
I'm looking for a *nix tool to recover the photos from the memory stick. Does anyone know of such a tool? (2 Replies)
EXTUNDELETE(1) General Commands Manual EXTUNDELETE(1)NAME
extundelete - utility to undelete files from an ext3 or ext4 partition.
SYNOPSIS
extundelete [options] device-file...
DESCRIPTION
extundelete is a utility that can recover deleted files from an ext3 or ext4 partition
extundelete uses the information stored in the partition's journal to attempt to recover a file that has been deleted from the partition.
There is no guarantee that any particular file will be able to be undeleted, so always try to have a good backup system in place, or at
least put one in place after recovering your files!
OPTIONS --version
Prints the version number of extundelete.
--help Print a brief usage summary for extundelete.
Partition name
Name of the partition that has deleted files, such as /dev/sda3.
Could also be the file name of a copy of the partition, such as that made with dd.
--superblock
Prints information about the filesystem from the superblock.
--journal --superblock
Prints information about the journal from the journal's superblock.
--inode #
Prints the information from the inode number of the filesystem given, such as "--inode 2".
--block #
Prints the contents of the block, called as "--block 9652".
--restore-file path/to/deleted/file
Attempts to restore the file which was deleted at the given filename, called as "--restore-file dirname/filename".
--restore-inode #
Used to restore inodes by number, called as "--restore-inode 2569".
Also accepts a list of inodes separated by only commas, such as "--restore-inode 2569,5692,6925".
--restore-files filename
Restores a list of files. First, construct a list of files in the same style as would be
used in the --restore-file option, and save it to the file "filename".
Then, this option may be used to attempt to restore those files with a single call to extundelete.
This form also reduces redundancy from multiple calls parsing the journal multiple times.
--output-dir path/to/dump/recovered/files
Restores files in the output dir 'path'.
By default the restored files are created under current directory 'RECOVERED_FILES'
--restore-all
Restores all files possible to undelete to their names before deletion, when possible. Other files are restored to a filename like
"file.NNNN".
--restore-directory path/of/directory
Restores all files possible to link to specified directory to their names before deletion, when possible.
-j journal_dev
Specifies the device that is the external journal of the file system.
-b block_number
Specifies the block number of the backup superblock to be used when opening the file system.
-B block_size
Specifies the block size of the partition to be used when opening the file system.
--before date
Only restore files deleted before the date specified, which should be in the form of the number of seconds since the UNIX epoch.
Use a shell command like
$ date -d "Aug 1 9:02" +%s
to convert a human-readable date to the proper format. The conversion from the number of seconds to a readable format may be found
by using either of the following:
$ date -d@1234567890
$ perl -le "print scalar localtime 1234567890"
--after date
Only restore files deleted after the date specified, which should be in the form of the number of seconds since the UNIX epoch.
See the notes for the --before option for more information.
AUTHOR
extundelete was written by Nic Case <number9652@users.sourceforge.net> Copyright (C) 2009, 2010
This manual page was written by Elias Alejandro Ano Mendoza <ealmdz@gmail.com>, for the Debian project (and may be used by others).
September 29, 2010 EXTUNDELETE(1)