The Linux and Unix Menagerie: Recovering Deleted Files By Inode Nu...

http://linuxshellaccount.blogspot.com/2008/08/recovering-deleted-files-b...

SEARCH BLOG

FLAG BLOG

Next Blog

Create Blog | Sign In

THE LINUX AND UNIX MENAGERIE

DEDICATED TO KEEPING LINUX, UNIX AND SCRIPTING LANGUAGES ALIVE!
Linux - South Africa Specialist Linux Services JHB, South Africa
www.synaq.com

Ubuntu Certified Training Become Ubuntu certified today! .

www.obsidian.co.za

An Introduction to Linux What is Linux ? Linux for the first time user
www.marek.co.za

Linux CDs DVDs JHB & RSA Linux is growing fast, try it now ! CD's from R24.95 DVD's from R49.95
www.pawinski.co.za

Office server solutions Linux office server solutions to monitor & manage internet & email
www.uls.co.za

Fix Linux .exe Try Top Linux .exe Repair Tool Easy to use - Free Download!
www.FastPCFixes.com

Synaq - South Africa Managed Linux Services Reduce TCO, Increase Security
www.synaq.com

Retrieve Deleted File Deleted by mistake? Don't worry - this tool will Undelete your file!
www.Filetonic.com/DataRecovery

1 of 4

10/24/2008 3:37 PM

The Linux and Unix Menagerie: Recovering Deleted Files By Inode Nu...

http://linuxshellaccount.blogspot.com/2008/08/recovering-deleted-files-b...

TUESDAY, AUGUST 12, 2008

Recovering Deleted Files By Inode Number In Linux And Unix

Fix Linux .exe Try Top Linux .exe Repair Tool Easy to use - Free Download!
www.FastPCFixes.com

Hey there, It should be noted, at the outset, that this post is limited in its scope. We're going to be looking at one particular way in which you can recover an accidentally deleted file on Linux or Unix ( Tested on RHEL3 and Solaris 8 ). If you ever want to scour a hard drive that you

Retrieve Deleted File Deleted by mistake? Don't worry - this tool will Undelete your file!
www.Filetonic.com/DataRecovery

Synaq - South Africa Managed Linux Services Reduce TCO, Increase Security
www.synaq.com

ODBC for DB2 UDB Fast ODBC access for all DB2 platforms - secure (SSL)
www.hitsw.com

need to get lots of information back from, then (assuming that you quarantined it immediately upon noticing this and haven't written to it since) you should check out The Coroner's Toolkit. Specifically, you'll want to look at the "ils" or "icat" programs, and most probably the "grave-robber" application to recover as much of everything as possible. In our post, we're going to look at one condition under which Unix and Linux operating systems can actually hold onto files, even after they've been deleted, so that you can recover them. Of course, you have to realize you've deleted something you wanted to keep (in most cases) immediately, and a fairly specific set of circumstances has to be in play. Note that all demonstrations have been tested on Solaris and RedHat. We're using RedHat's output, but the differences between the two were minor enough that they didn't bear repeating. First, we'll look at the controlled scenario: In this case, we're going to create a file. Then we're going to delete it, knowing that we want to retrieve it afterward. How many times does that happen "by accident"? ;)

host # echo "hi there" >>FILE host # ls -lai total 8 57794 drwxr-s--851795 drwxr-s--57795 -rw-r----2 user group 4096 Aug 11 12:36 . 3 user group 4096 Aug 11 12:31 .. 1 user group 9 Aug 11 12:36 FILE

2 of 4

10/24/2008 3:37 PM

The Linux and Unix Menagerie: Recovering Deleted Files By Inode Nu...

http://linuxshellaccount.blogspot.com/2008/08/recovering-deleted-files-b...

Send Me A Comment Mission & Policies Statement

Add Our Site to your Newsfeed Receive Blog Updates Via Email

PASS ANY COMPUTER TEST OR EXAM WITH EASE!

Check out this reasonably-priced Computer Certification Exam Ebook today and learn why knowing your stuff is only half the battle!

COMPUTING, BUSINESS AND OTHER NEWS FEEDS

Computing News Daily Business News Daily Bizarre News Daily

LXER - LINUX NEWS FEED

Sun, Cisco Vets Join Linux-Based Networking Play How to get VC investment for your open source business Kubuntu 8.10 'Intrepid Ibex' Beta Screenshots Tour New Xfce beta focuses on usability Adding a Lightweight GUI and Webmin to Ubuntu Server

Ads by Google Undelete Command Unix Vacancies Undelete Folder Recover Lost File

3 of 4

10/24/2008 3:37 PM

The Linux and Unix Menagerie: Recovering Deleted Files By Inode Nu...

http://linuxshellaccount.blogspot.com/2008/08/recovering-deleted-files-b...

UN L E SS O TH E RW I S E EX P R E SS L Y S TA TE D, A L L O R I G I N AL MATE R I A L O F W H A TE V ER N A TU RE C R E ATE D B Y MI K E G O L VA C H O R MI K E TR E MEL L A ND I N C LU D E D I N " TH E L I N U X A ND U N I X ME N AG E R I E " W E B LO G A ND A N Y R E L A TE D P A GE S , I N C LU D I N G TH E W EB L O G 'S AR C H I V E S, I S L IC E N S E D U N D E R A C R E ATI V E C OMMON S A TTR I B U TI O N - N O NC O MME R C I A L- S H A RE A L I KE 3 . 0 U N I TE D S TA TE S L I C E NS E.

A L L P A G E S C O P YW R I G H T - THE L I N UX A N D U N I X ME N A G ER I E

4 of 4

10/24/2008 3:37 PM