For the Ext4 file system data recovery software, see many online are introduced extundelete this tool, download the latest version of the experiment (in Centos5.8, Centos6.7 experimental results are not very good). Finally, it was found that Ext4magic is very powerful for EXT4 data recovery support. You can also do this based on point-in-time, inode, specified file recovery, and so on. You need to unmount the partition during recovery to mount the recovery read-only. The specific software is:
http://sourceforge.net/projects/ext4magic/
1. Installation
You can refer to the official install file for installation, if you have dependencies to handle the package dependencies can be installed. The system must install make, file
, GCC tools. The following libmagic, LIBEXT2FS, LIBZ, and libbz2 libraries must be installed,
# TAR-XZF Ext4magic-0.3.2.tar.gz
# CD ext4magic-0.3.2
#./configure
# make
# make Install
2. Testing
(1), Time-based recovery (in 1970-01-01 00:00:00 UTC number of seconds to start calculation)
[Email protected] ~]# mount/dev/sdb1/media/
[Email protected] ~]# cp-rp/boot/*/media/
[Email protected] ~]# cd/media/
[email protected] media]# LL
Total 34884
-rw-r--r--. 1 root root 107134 Jul 00:13 config-2.6.32-573.el6.x86_64
Drwxr-xr-x. 3 root root 4096 Dec 19:20 EFI
-rw-r--r--. 1 root root 166756 Jul elf-memtest86+-4.10
Drwxr-xr-x. 2 root root 4096 Dec 19:33 Grub
-RW-------. 1 root root 27925110 Dec 19:31 initramfs-2.6.32-573.el6.x86_64.img
DRWX------. 2 root root 16384 Dec 18:17 lost+found
-rw-r--r--. 1 root root 165080 Jul memtest86+-4.10
-rw-r--r--. 1 root root 205998 Jul 00:14 symvers-2.6.32-573.el6.x86_64.gz
-rw-r--r--. 1 root root 2585052 Jul 00:13 system.map-2.6.32-573.el6.x86_64
-rw-r--r--. 1 root root 289193 Oct tboot.gz
-rw-r--r--. 1 root root 12277 Oct tboot-syms
-rwxr-xr-x. 1 root root 4220560 Jul 00:13 vmlinuz-2.6.32-573.el6.x86_64
[[Email protected] media]# Date
Mon Dec 19:36:06 CST 2015
[Email protected] media]# RM-RF *
[[Email protected] media]# CD
[Email protected] ~]# UMOUNT/DEV/SDB1
[Email protected] ~]# Mount-o Ro/dev/sdb1/media
[Email protected] ~]# ext4magic/dev/sdb1-d/home-a 1450086000-m 3# #改时间通过date命令获取当前时间秒数减去3600秒得来.
Warning:activate Magic-scan or Disaster-recovery function, May is some command line options ignored
"/home" accept for Recoverdir
Filesystem in use:/DEV/SDB1
Using internal Journal at Inode 8
Activ time After:mon Dec 14 17:40:00 2015
Activ time Before:mon Dec 14 19:44:26 2015
Inode 2 is allocated
--------/home/config-2.6.32-573.el6.x86_64
--------/home/efi/efi/redhat/grub.efi
--------/home/elf-memtest86+-4.10
--------/home/grub/menu.lst
--------/home/grub/reiserfs_stage1_5
--------/home/grub/e2fs_stage1_5
--------/home/grub/xfs_stage1_5
--------/home/grub/fat_stage1_5
--------/home/grub/stage1
--------/home/grub/iso9660_stage1_5
--------/home/grub/splash.xpm.gz
--------/home/grub/vstafs_stage1_5
--------/home/grub/ufs2_stage1_5
--------/home/grub/device.map
--------/home/grub/stage2
--------/home/grub/ffs_stage1_5
--------/home/grub/minix_stage1_5
--------/home/grub/jfs_stage1_5
--------/home/grub/grub.conf
--------/home/initramfs-2.6.32-573.el6.x86_64.img
--------/home/memtest86+-4.10
--------/home/symvers-2.6.32-573.el6.x86_64.gz
--------/home/system.map-2.6.32-573.el6.x86_64
--------/home/tboot.gz
--------/home/tboot-syms
--------/home/vmlinuz-2.6.32-573.el6.x86_64
MAGIC-1: Start lost Directory search
MAGIC-2: Start lost File search
MAGIC-2: Start Lost in Journal Search
MAGIC-3: Start Ext4-magic-scan Search
--------/home/magic-3/text/plain/0000028685.txt
--------/home/magic-3/text/plain/0000045944.txt
Ext4magic:exit_success
Verify that recovery is successful
[Email protected] ~]# cd/home/
[email protected] home]# LL
Total 34872
-rw-r--r--. 1 root root 107134 Jul 00:13 config-2.6.32-573.el6.x86_64
DRWX------. 3 root root 4096 Dec 19:44 EFI
-rw-r--r--. 1 root root 166756 Jul elf-memtest86+-4.10
DRWX------. 2 root root 4096 Dec 19:44 Grub
-RW-------. 1 root root 27925110 Dec 19:31 initramfs-2.6.32-573.el6.x86_64.img
DRWX------. 3 root root 4096 Dec 19:44 MAGIC-3
-rw-r--r--. 1 root root 165080 Jul memtest86+-4.10
-rw-r--r--. 1 root root 205998 Jul 00:14 symvers-2.6.32-573.el6.x86_64.gz
-rw-r--r--. 1 root root 2585052 Jul 00:13 system.map-2.6.32-573.el6.x86_64
-rw-r--r--. 1 root root 289193 Oct tboot.gz
-rw-r--r--. 1 root root 12277 Oct tboot-syms
-rwxr-xr-x. 1 root root 4220560 Jul 00:13 vmlinuz-2.6.32-573.el6.x86_64
[Email protected] home]#
(2), the entire file system recovery
[Email protected] ~]# ext4magic/dev/sdb1-d/home-m
Warning:activate Magic-scan or Disaster-recovery function, May is some command line options ignored
"/home" accept for Recoverdir
Filesystem in use:/DEV/SDB1
Using internal Journal at Inode 8
Activ time After:mon Dec 14 19:36:37 2015
Activ time Before:mon Dec 14 19:56:58 2015
Inode 2 is allocated
--------/home/config-2.6.32-573.el6.x86_64
--------/home/efi/efi/redhat/grub.efi
--------/home/elf-memtest86+-4.10
--------/home/grub/menu.lst
--------/home/grub/reiserfs_stage1_5
--------/home/grub/e2fs_stage1_5
--------/home/grub/xfs_stage1_5
--------/home/grub/fat_stage1_5
--------/home/grub/stage1
--------/home/grub/iso9660_stage1_5
--------/home/grub/splash.xpm.gz
--------/home/grub/vstafs_stage1_5
--------/home/grub/ufs2_stage1_5
--------/home/grub/device.map
--------/home/grub/stage2
--------/home/grub/ffs_stage1_5
--------/home/grub/minix_stage1_5
--------/home/grub/jfs_stage1_5
--------/home/grub/grub.conf
--------/home/initramfs-2.6.32-573.el6.x86_64.img
--------/home/memtest86+-4.10
--------/home/symvers-2.6.32-573.el6.x86_64.gz
--------/home/system.map-2.6.32-573.el6.x86_64
--------/home/tboot.gz
--------/home/tboot-syms
--------/home/vmlinuz-2.6.32-573.el6.x86_64
MAGIC-1: Start lost Directory search
MAGIC-2: Start lost File search
MAGIC-2: Start Lost in Journal Search
MAGIC-3: Start Ext4-magic-scan Search
--------/home/magic-3/text/plain/0000028685.txt
Ext4magic:exit_success
[Email protected] ~]#
(3), specify File recovery
[Email protected] ~]# ext4magic/dev/sdb1-r-F grub/grub.conf-d/Home
"/home" accept for Recoverdir
Filesystem in use:/DEV/SDB1
Using internal Journal at Inode 8
Inode found "grub/grub.conf" 655377
--------/home/grub/grub.conf
Ext4magic:exit_success
[Email protected] ~]# cd/home/
[email protected] home]# LL
Total 4
DRWX------. 2 root root 4096 Dec 20:08 Grub
[email protected] home]# ll grub/grub.conf
-RW-------. 1 root root 843 Dec 19:33 grub/grub.conf
[Email protected] home]#
When you specify file recovery, you need to be aware of the path writing problem that specifies the recovery file. Here's an example of the official:
An example:the mount point for this filesystem is "home" an "a" filename for Linux is "/home/usr1/document" can Use now
# ext4magic/dev/sda3-f Usr1/document
(Remove the file directory specified in the point directory).
Note: For more detailed recovery parameters, refer to the System man ext4magic help documentation.
This article is from "Technical achievement dream!" "Blog, be sure to keep this provenance http://dreamsanqin.blog.51cto.com/845412/1722767
Linux platform ext4magic data recovery software