Arch Linux

prune

Member

From: Adelaide, Australia

Registered: 2007-01-30

Posts: 13

Website

Ext3 Undelete

Hello,

I was wondering if anyone has any recommendations or advice on how I can undelete a file on ext3. I accidentally deleted a VMware vmdk file on the filesystem (split into 60 2gb files) about two weeks ago. The strange thing is that the data has been accessible since then, as vmware server was still running so the fs probably didn't close the inode until that process stopped and the server was restarted.

Just to make it more difficult, the whole thing is on a linux software raid 10 (4 x 750gb drives). So it makes copying the whole thing to another drive difficult.

Does anyone have any advice?

Thanks!

MilosC

Member

From: Serbia

Registered: 2008-06-04

Posts: 79

Re: Ext3 Undelete

http://bbs.archlinux.org/viewtopic.php?id=50275
I hope You didn't write over deleted file...

semdornus

Member

From: Tokyo

Registered: 2007-08-07

Posts: 47

Re: Ext3 Undelete

I've had some successes with ext3grep, but it's not for the faint at heart.
Those files where recovered in minutes after an immediate unmount though, not after several weeks...
Explanation http://www.xs4all.nl/~carlo17/howto/undelete_ext3.html
Project page http://code.google.com/p/ext3grep/

Last edited by semdornus (2008-06-19 04:42:08)