File UNDELETE for ext4

This may be a case of too much time on my hands but…

Playing with the 12.1 RC1 yesterday, I had cloned my working 11.4 system to
another drive for a test installation. I changed my mind on what I wanted
to do next and wiped out the cloned copy with rm but got side-tracked. When
I came back, I decided that this was a good chance to look at the current
state of file recovery programs and went looking for tools since nothing I
had on hand wanted to work for ext4. All I found was extundelete over on
Sourceforge. I was not impressed, to say the least - less than 40% recovery
from the cloned partition.

Any suggestions on other file recovery apps or methods? I’ve been around
long enough to know that it’s just a matter of time until I’ll need this
capability for real :wink:


WHonea

On 10/24/2011 06:32 PM, Will Honea wrote:
> Any suggestions on other file recovery apps or methods? I’ve been around
> long enough to know that it’s just a matter of time until I’ll need this
> capability for real :wink:

at this point i can only suggest you look at giis and decided if you
wanna try it, i learned about it in this thread, just last week:

http://tinyurl.com/3utlcc4

i’ve not yet found enough roundtoits to compile/instal and set it up
yet, but (since it tracks what is where) then i guess it ought to be
able to find it (assuming it has not been overwritten)…of course, the
down side is that (like, for instance TripWire) it must be installed and
running BEFORE the undelete is needed…

would love to read your experience there, or here…


DD
openSUSE®, the “German Automobiles” of operating systems

DenverD wrote:

> On 10/24/2011 06:32 PM, Will Honea wrote:
>> Any suggestions on other file recovery apps or methods? I’ve been around
>> long enough to know that it’s just a matter of time until I’ll need this
>> capability for real :wink:
>
> at this point i can only suggest you look at giis and decided if you
> wanna try it, i learned about it in this thread, just last week:
>
> http://tinyurl.com/3utlcc4
>
> i’ve not yet found enough roundtoits to compile/instal and set it up
> yet, but (since it tracks what is where) then i guess it ought to be
> able to find it (assuming it has not been overwritten)…of course, the
> down side is that (like, for instance TripWire) it must be installed and
> running BEFORE the undelete is needed…
>
> would love to read your experience there, or here…

Looks like this has a feature that is somewhat counter-inutitive: it
requires information from BEFORE the fat finger strikes. I found a couple
of those.

Extundelete is finding an appropriate number of files but it refuses a bunch
because it cannot determine the file type. I need to pull the source code
and run it in a debugger to see what it’s finding and why it barfs on some
of them because as far as I’m concerned, it shouldn’t care what the file
contains; as long as it finds a file location that does not create spacial
conflictes with anything else it should give it a name and call it good.

That’s one thing I liked about the OS/2 HPFS filesystem: deleted file
recovery was simple and reliable.


Will Honea

On 10/25/2011 06:18 AM, Will Honea wrote:

> That’s one thing I liked about the OS/2 HPFS filesystem: deleted file
> recovery was simple and reliable.

yep…i miss several of its features also…too bad it was so killed by
FUD Merchants…


DD
openSUSE®, the “German Automobiles” of operating systems