Delete a file called abc.sh: rm abc.sh Type the following command: # debugfs -w /dev/mapper/root At debugfs: prompt type lsdel command: debugfs: lsdel Sample outputs: Inode Owner Mode Size Blocks Time deleted 2113537 0 120777 3 1/ 1 Tue May 1 06:21:22 2016 1 deleted inodes found. Get block data, enter: debugfs: logdump -i <2113537> …
Howto: Recover a file when you don’t know inode number in Linux Read More »
A step-by-step guide for recovering files using debugfs [root@unix-support-server ~]# mount /dev/sda2 on / type ext4 (rw) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) tmpfs on /dev/shm type tmpfs (rw) /dev/sda1 on /boot type ext4 (rw) /dev/sdb1 on /var/www type ext3 (rw) /dev/sdd1 on …
It is possible to recover the file using the “fsdb” command (filesystem debugger). when, No new files have been created on the filesystem. No files have been extended. The filesystem is able to be unmounted. Warning: I have test this in my test server. This is undocumented one. You may facing the critical problem when …