"Q: How can I recover (undelete) deleted files from my ext3 partition?
Actually, you can't! This is what one of the developers, Andreas Dilger,
said about it:
/In order to ensure that ext3 can safely resume an unlink after a crash,
it actually zeros out the block pointers in the inode, whereas
ext2 just marks these blocks as unused in the block bitmaps and marks
the inode as "deleted" and leaves the block pointers alone./
/Your only hope is to "grep" for parts of your files that have been
deleted and hope for the best."
(
http://batleth.sapienti-sat.org/projects/FAQs/ext3-faq.html)
/
Sorry to have forgotten to send to the mailing list again. IMHO, the
list should be the default reply-to: but however ;)
The only method I found out about was indeed grepping your hdd for the
text file:
i.e.:
~ # grep --binary-files=text -30 "#include <stdio.h>" /dev/hda3 >
output
(-30 being the # of lines output before and after the found line)
cheers,
David
Brent Frere wrote:
What's your point ?
Ext3 is Ext2 + journaling, so recover tools for Ext2 work on Ext3, no ?