I am attempting to recover data from Digital UNIX 4.0b system with Advfs datasets. There are processes running on the system which are writing to log files, and all links to those log files have been deleted. The question is, how do I recover the data from those log files?
lsof lists the open files, so I have inode numbers. I have been looking at the Advfs utilities, but the man pages don't describe the data structures (metadata) well enough for me to navigate. Verify only works on unmounted filesystems (at least non-root as the one in question is), and if the processes terminate, and the data only stays around as long as the process is running and keeps the file open.
Otherwise, anyone know any tricks with dbx or whatever to attach to the file descriptors of the running process and dump the data?
Any help would be greatly appreciated. Particularly pointers to documentation of the Advfs internal data structures.
Thanks,
Ian Goodacre
goodaci_at_mbs.gov.on.ca
Received on Fri Jun 12 1998 - 00:58:28 NZST