08-19-2008
1,
0
Join Date: Aug 2008
Last Activity: 19 August 2008, 9:24 AM EDT
Posts: 1
Thanks Given: 0
Thanked 0 Times in 0 Posts
Suppose the file system is ext2, ext3, or raiserfs, is it possible to use the debugfs tool or ext3grep?
I have posted here a solution for ext3 using debugfs to get the inode, and extrgrep to undelete the file. I hope it helps.
1. run debugfs to the location of files and list all files.
# debugfs $HARDDISK
debugfs> cd /lost/directory
debugfs> ls -d
<INODE> ... deleted_files_are_enclosed_in_<_>
INODE
2. restore using ext3grep
# ext3grep $HARDDISK --restore-inode INODE
lordmwesh
kivuva.kenya.or.ke