08-30-2007
Hi,
i think in UNIX we can recover the deleted file when the UNIX system is in single user mode. if the UNIX system is in multi user mode them we can't recover the delete files.
using "wall" and "init l" commands we can recover the deleted files which the server is in single user mode.
Thanks,
Siva.P
Bangalore
8 More Discussions You Might Find Interesting
1. AIX
How to recover deleted files in AIX ? (1 Reply)
Discussion started by: vjm
1 Replies
2. Solaris
Anybody know how to recover a deleted file in unix
Please help (3 Replies)
Discussion started by: pmsuper
3 Replies
3. UNIX for Dummies Questions & Answers
Hi Experts,
by mistake i deleted some files that are very important to the project.
is there any way that i can recover those files,there is no backup for that but the details of the file we know.
This will be a great help.
Thanks (5 Replies)
Discussion started by: namishtiwari
5 Replies
4. Shell Programming and Scripting
Hi,
By mistake, executed the following command :
rm -rf *
and ALL files got deleted.
But I need to get back these files as they are very very important.
Please help me how to recover this file. Its Urgent for me please.
Thanks in advance. (6 Replies)
Discussion started by: unx100
6 Replies
5. Solaris
Recently our Server Room got burnt and we lost everything including a sunfire V880 server. I had a backup and restored it on our 2nd server. I mistakenly restored the etc folder from the burnt server too. After rebooting the 2nd server I can't get the root directory and other volumes mounting. I... (11 Replies)
Discussion started by: rahmantanko
11 Replies
6. Solaris
dear all
please tell me
how can i recover deleted file in solaris.
i am removing file with rm command.
thanks in advance. (3 Replies)
Discussion started by: nikhil kasar
3 Replies
7. UNIX for Dummies Questions & Answers
Hi All
By mistake i have deleted some file in a directory, is there any way to get it back in Unix( i am using sh ) (2 Replies)
Discussion started by: parthmittal2007
2 Replies
8. UNIX for Advanced & Expert Users
hi,
i deleted one file from linux
please let me know, if we can recover it ? if yes, pls let me know the steps to do.. (3 Replies)
Discussion started by: raghur77
3 Replies
LEARN ABOUT DEBIAN
tsk_recover
TSK_RECOVER(1) General Commands Manual TSK_RECOVER(1)
NAME
tsk_recover - Export files from an image into a local directory
SYNOPSIS
tsk_recover [-vVae] [-i imgtype ] [-b dev_sector_size ] [-o sector_offset ] [-d dir_inum ] image output_dir
DESCRIPTION
tsk_recover recover files to the output_dir from the image. By default recovers only unallocated files. With flags, it will export all
files.
The arguments are as follows:
-v verbose output to stderr
-V Print version
-a Recover allocated files only
-e Recover all files (allocated and unallocated)
-i imgtype
The format of the image file (use '-i list' for supported types) If not given, autodetection methods are used.
-b dev_sector_size
The size (in bytes) of the device sectors If not given, autodetection methods are used.
-o sector_offset
Sector offset for a volume to recover (recovers only that volume) If not given, will attempt to recover all volumes in image and
save them to different folders.
-d dir_inum
Directory inum to recover from (must also specify a specific partition using -o or there must not be a volume system)
EXAMPLES
To recover only unallocated files from image.dd to the recovered directory:
# tsk_recover ./recovered ./image.dd
AUTHOR
Brian Carrier <carrier at sleuthkit dot org>
Send documentation updates to <doc-updates at sleuthkit dot org>
TSK_RECOVER(1)