Restore deleted files

Previous thread: 64-bit quota support now available for 6.x and 7.x by John Kozubik on Thursday, January 8, 2009 - 7:55 am. (1 message)

Next thread: RE: iscsi client hangs performing I/O on a dead target by Graham Todd on Sunday, January 11, 2009 - 7:33 pm. (1 message)
From: Polytropon
Date: Thursday, January 8, 2009 - 4:28 pm

Hi,

I'd like to ask a two-stage question:

1. Is it possible to recover files that have been deleted?

2. Which tools or procedures are suggested for recovery?

While sorting out some files and transfering them to another
hard disk, I accidentally deleted too much: the directory with
my videos taken by a digital camera. They were located in a
directory within a subtree, and I deleted the whole subtree
without first copying these files.

I used the Midnight Commander to do this. As I read from its
source code, it seems to use the unlink() call to delete the
subtree recursively. Pressing PF8 can really ruin your day...

Just after I noticed what I had done I unmounted the file system,
powered off the machine and put the disk on the shelf (it's still
there), no further write accesses.

I would be glad if someone could enlighten me if there is any
chance to get the files back, even with the loss of the file
names (doesn't matter), and which tools seem to serve best in
this difficult task.

And if it's impossible, please tell me. I can newfs the disk
then and free it, along with my mind.




PS.
I'm posting this question to -fs, too. Answers from this list
please keep me in CC because I'm not subscribed to -fs. Thank you!

-- 
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...
_______________________________________________
freebsd-fs@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-fs
To unsubscribe, send any mail to "freebsd-fs-unsubscribe@freebsd.org"
From: Julian Elischer
Date: Thursday, January 8, 2009 - 5:07 pm

unmounting could have made things worse :-/

it then actually cleaned up and wrote the changes....
the best would have been to ahve hit <CTL><ALT><ESC> and dropped into 
the debugger
and then unplugged the drive..

still you MIGHT be lucky if the files are contiguous on disk (which 
images are likely to be.

I don't know hte tools bu there are some...
they are usually more useful for recovering from crashes etc.
the trouble with accidental deletes is that they often leave no
information as to what went where.


_______________________________________________
freebsd-fs@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-fs
To unsubscribe, send any mail to "freebsd-fs-unsubscribe@freebsd.org"
From: Chuck Swiger
Date: Thursday, January 8, 2009 - 5:36 pm

The preferred method is to recover files from backup.  If you don't  
take backups, you've decided that you don't really care about the  

This can be used to attempt to "undelete" files from a UFS  
filesystem....

Regards,
-- 
-Chuck

_______________________________________________
freebsd-fs@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-fs
To unsubscribe, send any mail to "freebsd-fs-unsubscribe@freebsd.org"
Previous thread: 64-bit quota support now available for 6.x and 7.x by John Kozubik on Thursday, January 8, 2009 - 7:55 am. (1 message)

Next thread: RE: iscsi client hangs performing I/O on a dead target by Graham Todd on Sunday, January 11, 2009 - 7:33 pm. (1 message)