Re: [SAGE] Recover deleted files from ext3 file system

[Jonathan Billings <billings@negate.org>]

Mike Noble wrote:
> This there a way to recover deleted files (command line rm) on linux
> ext3 file system?  I see a lot of utils that are windows based that
> can recover files but the ext3 disk(s) need to be on the same system
> as the windows box.  This is not the case in my situation.  I have a
> raid 5 disk with 3 partitions /, /boot, /export.  The hardware is a
> compaq dl380, rack mount.

First, be sure to take the filesystem offline as soon as possible.  Then 
use 'debugfs' to list the deleted inodes (lsdel), and undelete them 
(undel).  I've been able to rescue files that have *just* been deleted 
with this method.

-- 
Jonathan Billings <billings@negate.org>