Shulou(Shulou.com)06/01 Report--

This article will explain in detail how extundelete realizes the data recovery of files and folders under Linux. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.

Extundelete is a data recovery tool based on Linux. By analyzing the logs of the file system and parsing the inode information of all files, it can recover the mistakenly deleted files under the mainstream ext3,ext4 file system under Linux.

1. I use the Centos system. Before installing extundelete, I need to install e2fsprogsrecovere2fsprogsripple libsmae2fsprogsMurdevel.

Here: yum install e2fsprogs e2fsprogs-libs e2fsprogs-devel is used to complete the installation.

2. Compile and install extundelete:

Tar xjf extundelete-0.2.4.tar.bz2

Cd extundelete-0.2.4

. / configure

Make & & make install

3, the usage of extundelete, you can view the details through help!

4. The process of recovering data by extundelete:

After the data is deleted by mistake, the first thing to do is to uninstall the partition where the deleted data is located. If the data in the root partition is mistakenly deleted, you need to put the system into single-user mode and mount the root partition in read-only mode. The reason for this is very simple, because after deleting the file, only the sector pointer in the inode node of the file is cleared, and the actual file is still stored on disk. If the disk continues to mount in read-write mode, the data blocks of these deleted files may be redistributed by the operating system. After these databases are overwritten with new data, the data is really lost, and the recovery tool is powerless. So! Mounting the disk in read-only mode can minimize the risk of overwriting data in the database and increase the percentage of successful data recovery.

5. Environment for erroneous deletion of simulated data:

After creating a new partition, mount it to a directory, cp some files or directories to that directory, verify the MD5 value of a question, and then delete the files in that directory to simulate the experimental environment.

6. Uninstall the disk partition and query the recoverable data information of the / dev/sdb1 partition by executing the extundelete command:

# extundelete / dev/sdb1-- inode 2

According to the output information, the files or directories that have been deleted are marked as Deleted status. At the same time, you can also see the image value of the deleted file, and then you can restore the file.

7. Restore a single file:

Extundelete / dev/sdb1-- restore-file passwd

A RECOVERED_FILES directory is generated under the current directory, in which the recovered files are saved.

"/ >

8. Restore a single directory:

Extundelete / dev/sdb1-- restore-directory / mongodb

Restore all mistakenly deleted files:

Extundelete / dev/sdb1-- restore-all

Extundelete can also recover data for a certain period of time. This can be achieved through the "--after" and "--before" parameters!

On "extundelete how to achieve file and folder data recovery under Linux" this article is shared here, I hope the above content can be of some help to you, so that you can learn more knowledge, if you think the article is good, please share it out for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.