SUMMARY: Undelete

From: Krzysztof Rajewicz <rajewiks_at_eskom.co.za>
Date: Tue, 02 Feb 1999 10:19:49 +0200

Hi, managers.

Thank you very much to the following people who responded :

John F. Marten
Richard L Jackson Jr
Wallace, Lisa A.
Dr. Tom Blinn
alan_at_nabeth
Bevan Broun
Jim Belonis


SUMMARY:

1) for this method to work you will need to remember a word from
the
    beginining of the file and a word from the end of the file, this
works for
    text files only, and use with caution.
    -stop working emediately.
     -go to the filesystem where the file was.
     -issue the following command in this syntax: egrep
     'firstword.+endword' /dev/filesystem > /tmp/name
      example:
      egrep 'ftp.+free' /dev/rz1g > /tmp/mylostfile
      or you can use the name of the partition instead. ie:
/usr/fred.

2) There is an UNDELETE available from the DECUS Library.
But as usual with UNDELETE commands, it is likely that the free'ed
blocks
have already been re-used creating other new files
since the newly free'ed blocks are in the cache ready to be re-used
immediately.
If you want a real UNDELETE to work, you have to dismount the disk
immediately
to protect it from this effect.

3) Unless you are using an AdvFS file system and have configured it
to use the optional "wastebasket" feature, there is no way to
"undelete" a file on a Digital UNIX (or for that matter most any other
UNIX) system. If you've got backups, you can restore the file from
backups.

4) You must restore the file. UFS and AdvFS do not have undelete
file features.
Of course, unless the user is using a desktop environment that
supports said feature.








Best regards;

Krzysztof Reg.Eng.Tech.

Cel. 0837775407
Tel. 0331953857 (w)

e-mail: Rajewiks_at_eskom.co.za
Received on Tue Feb 02 1999 - 08:35:38 NZDT

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:38 NZDT