[NTLUG:Discuss] ext3 undelete! WHOO HOO!

[Chris Cox]

David Stanaway wrote:
> Chris Cox wrote:
>> Richard Geoffrion wrote:
>> ...
>>   
>>> Reiser fans can --rebuild-tree and dredge the lost+found directory for 
>>> their files... see 
>>> http://antrix.net/journal/techtalk/reiserfs_data_recovery_howto.comments
>>>
>>>     
>> I actually used that technique a couple of years ago or so... an engineer
>> found this large file ending in .vmdk and decided to free up some
>> space :)
>>
>>
>>   
> 
> 
> If the file was open, a link would have been held and its contents 
> wouldn't be re-used, but if he had deleted the file since the file 
> system was nearly full and the file is not open, you would have had to 
> jump on it pretty fast.

I did a hard power down on his workstation.... did the rebuild-tree
trick... extracted the largest thing in lost+found and voila!