Linux File Recovery tool extundelete recovery deleted files sample

Install Extundelete

[Root@xifenfei tmp]# bunzip2 extundelete-0.2.0.tar.bz2
[Root@xifenfei tmp]# tar xvf extundelete-0.2.0.tar
extundelete-0.2.0/
Extundelete-0.2.0/readme
Extundelete-0.2.0/acinclude.m4
Extundelete-0.2.0/configure.ac
Extundelete-0.2.0/aclocal.m4
extundelete-0.2.0/makefile.am
Extundelete-0.2.0/makefile.in
Extundelete-0.2.0/config.h.in
Extundelete-0.2.0/configure
Extundelete-0.2.0/compile
Extundelete-0.2.0/depcomp
Extundelete-0.2.0/install-sh
Extundelete-0.2.0/missing
Extundelete-0.2.0/license
extundelete-0.2.0/autogen.sh
extundelete-0.2.0/src/
extundelete-0.2.0/src/makefile.am
Extundelete-0.2.0/src/makefile.in
extundelete-0.2.0/src/extundelete.cc
Extundelete-0.2.0/src/block.c
extundelete-0.2.0/src/insertionops.cc
Extundelete-0.2.0/src/block.h
Extundelete-0.2.0/src/extundelete.h
Extundelete-0.2.0/src/extundelete-priv.h
Extundelete-0.2.0/src/jfs_compat.h
Extundelete-0.2.0/src/kernel-jbd.h
[Root@xifenfei tmp]# CD extundelete-0.2.0
[Root@xifenfei extundelete-0.2.0]#./configure
Configuring Extundelete 0.2.0
Writing generated files to disk
[Root@xifenfei extundelete-0.2.0]# make && make install
Make-s all-recursive
Making all in SRC
Making install in SRC
/usr/bin/install-c ' extundelete '/usr/local/bin/extundelete '
Restore Operation command
--umount or Read only partition
Umount/dev/partition
Mount-o remount,ro/dev/partition

--Recover files
Xtundelete/dev/partition--restore-all
Extundelete/dev/partition--restore-directory/backup/gnutool-delete
Extundelete/dev/partition--restore-files/etc/passwd
Test recovery
--Based on directory recovery
[Root@xifenfei tmp] #extundelete/dev/sdb1--restore-directory/u01/xifenfei
Loading FileSystem metadata ... 160 groups loaded.
Loading Journal Descriptors ... Descriptors loaded.
Writing output to directory recovered_files/
Failed to restore File/u01/xifenfei
Could not find correct inode number past Inode 2.
[Root@xifenfei tmp]# CD recovered_files/
[Root@xifenfei recovered_files]# LL
Total 0
--Not successful

--disk-based Recovery
[Root@xifenfei recovered_files] #extundelete/dev/sdb1--restore-all
Loading FileSystem metadata ... 160 groups loaded.
Loading Journal Descriptors ... Descriptors loaded.
Writing output to directory recovered_files/
Searching for recoverable inodes in directory/...
4 recoverable inodes found.
Looking through the directory structure for deleted files ...
Failed to restore Inode 1966081 to file Recovered_files/xifenfei:inode does not correspond to a regular file.
Restored Inode 1966082 to file Recovered_files/xifenfei/xff.txt
Failed to restore Inode 1966083 to file Recovered_files/xifenfei/xff:inode does not correspond to a regular file.
Restored Inode 1966084 to file recovered_files/xifenfei/xff/xff.txt132
0 recoverable inodes still lost.
[Root@xifenfei recovered_files]# LL
Total 4
Drwxr-xr-x 3 root root 4096 Aug 21:36 recovered_files
[Root@xifenfei recovered_files]# CD recovered_files/
[Root@xifenfei recovered_files]# LL
Total 4
Drwxr-xr-x 3 root root 4096 Aug 21:36 Xifenfei
[Root@xifenfei recovered_files]# CD xifenfei/
[Root@xifenfei xifenfei]# LL
Total 20
Drwxr-xr-x 2 root root 4096 Aug 21:36 Xff
-rw-r--r--1 root root 13231 Aug 21:36 xff.txt
[Root@xifenfei xifenfei]# CD Xff
[Root@xifenfei xff]# LL
Total 16
-rw-r--r--1 root root 13231 Aug 21:36 xff.txt132
--Restore success

--file-based recovery
[Root@xifenfei xff]# extundelete/dev/sdb1 --restore-files/u01/xifenfei/xff.txt
Loading FileSystem metadata ... 160 groups loaded.
Loading Journal Descriptors ... Descriptors loaded.
writing output to directory recovered_files/
[Root@xifenfei xff]# cd recovered_files/
[Root@xifenfei RECOVER ed_files]# ll
Total 0
--unsuccessful
through the above experiments to prove that Extundelete still has a great incompleteness, based on the entire disk recovery is more powerful, Directory-and file-based recovery is not strong enough. However, the software often has a fire-fighting function, especially when the egg-barrel personnel Delete some files from the database.