On 10/05/12 16:27, Muhammad Yousuf Khan wrote:
> On Thu, May 10, 2012 at 11:01 AM, J. Bakshi <bakshi12@gmail.com> wrote:
>> On Thu, 10 May 2012 10:49:28 +0500
>> Muhammad Yousuf Khan <sirtcp@gmail.com> wrote:
>>
>>> if i mistakenly delete any partition or OS or HD corrupted. what is
>>> the best tool that i can use to recover the data in these situations.
>>>
>>
>> de-rescue for corrupted HD. But don't know about recovering deleted data.
>> I'm also interested in the same topic.
>
> testdisk
>
> http://www.howtoforge.com/data_recovery_with_testdisk

It's also in the Debian repository:-
# apt-get install testdisk

>
> seems good but haven't tested yet.
>
>
>

I've used it often. It's excellent - will recover partition tables, file
system journals, as well as a host of different file types.



Kind regards

--
Iceweasel/Firefox/Chrome/Chromium/Iceape/IE extensions for finding
answers to questions about Debian:-
https://addons.mozilla.org/en-US/firefox/collections/Scott_Ferguson/debian/


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4FAB6CFA.1080203@gmail.com">http://lists.debian.org/4FAB6CFA.1080203@gmail.com

2012/5/10 J. Bakshi <bakshi12@gmail.com>:
> On Thu, 10 May 2012 11:27:30 +0500
> Muhammad Yousuf Khan <sirtcp@gmail.com> wrote:
>
>> On Thu, May 10, 2012 at 11:01 AM, J. Bakshi <bakshi12@gmail.com> wrote:
>> > On Thu, 10 May 2012 10:49:28 +0500
>> > Muhammad Yousuf Khan <sirtcp@gmail.com> wrote:
>> >
>> >> if i mistakenly delete any partition or OS or HD corrupted. what is
>> >> the best tool that i can use to recover the data in these situations.
>> >>
>> >
>> > de-rescue for corrupted HD. But don't know about recovering deleted data.
>> > I'm also interested in the same topic.
>>
>> testdisk
>>
>> http://www.howtoforge.com/data_recovery_with_testdisk
>>
>> seems good but haven't tested yet.
>>
> How can I recover <myfolder> which I have already deleted by
> rm -rf <myfolder>
Hi,
There are many examples in testdisk homepage (
http://www.cgsecurity.org/wiki/TestDisk),
and may be this is a good start:
http://www.cgsecurity.org/wiki/TestDisk:_undelete_file_for_ext2
Good Luck!


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: CABfFVkLNuOaVyBXN7Td1O7v3KWX0HFfJ+YycaxVLL_QVOD7kT w@mail.gmail.com">http://lists.debian.org/CABfFVkLNuOaVyBXN7Td1O7v3KWX0HFfJ+YycaxVLL_QVOD7kT w@mail.gmail.com

On Thu, 2012-05-10 at 10:49 +0500, Muhammad Yousuf Khan wrote:
> if i mistakenly delete any partition or OS or HD corrupted. what is
> the best tool that i can use to recover the data in these situations.
>
> just wanted to test this stuff in my test environment.
>
> note : i work with command line only. so preferably tool should be
> command line supported. since i don't like to use mouse :-)
>
> Thanks

For what file systems?

- Ralf


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 1336651423.2307.6.camel@precise">http://lists.debian.org/1336651423.2307.6.camel@precise

I now read several replies and until now nobody mentioned to FIRST OF
ALL immediately REMOUNT THIS PARTITION AS R E A D ONLY !


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 1336651921.2307.8.camel@precise">http://lists.debian.org/1336651921.2307.8.camel@precise

On Thu, May 10, 2012 at 5:03 PM, Ralf Mardorf
<ralf.mardorf@alice-dsl.net> wrote:
> On Thu, 2012-05-10 at 10:49 +0500, Muhammad Yousuf Khan wrote:
>> if i mistakenly delete any partition or OS or HD corrupted. what is
>> the best tool that i can use to recover the data in these situations.
>>
>> just wanted to test this stuff in my test environment.
>>
>> note : i work with command line only. so preferably tool should be
>> command line supported. since i don't like to use mouse :-)
>>
>> Thanks
>
> For what file systems?

any, ext2, 3 or 4 . just asked in general perspective. so instead of
reading all the material on the net and filter out the garbage which
is very time consuming. so just to make my studies time efficient and
other like me also get some help as well.

Thanks

>
> *- Ralf
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: http://lists.debian.org/1336651423.2307.6.camel@precise
>


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/CAGWVfMn3khO+6z9wqjwKEZELH=Tb5CNg+z87MWpqBhYkvqDA@ mail.gmail.com

On Thu, 2012-05-10 at 17:32 +0500, Muhammad Yousuf Khan wrote:
> > For what file systems?
>
> any, ext2, 3 or 4 . just asked in general perspective. so instead of
> reading all the material on the net and filter out the garbage which
> is very time consuming. so just to make my studies time efficient and
> other like me also get some help as well.

Parted Magic is a good live media to use.
On Parted Magic there are command line tools such as ext3grep and
extundelete and others.

Mount the partition, where you deleted files as read only first. The
recovered data will be written to another partition. Any writing to the
partition with the deleted folders and files can overwrite important
directory entries and/or data. Note, even reading can cause a write,
IIRC e.g. if you don't mount with noatime, the last read access will be
written to a file.

I don't have all those commands and options in mind, but take care to
use options that will recover the data in a human readable/usable
format. IOW you'll get "/my_dir/my_file_a /my_dir/my_file_b" etc. and
not "no_dir_cryptic_filename_a no_dir_cryptic_filename_b".
They also have got options to recover data that is from a special time
etc..

All those tools for ext3 come with patches, they are usable for ext4,
theoretically. In practice 99% of your data will be lost.

I still have 2 unmounted ext4 partitions since December 2011. I nearly
couldn't recover anything, but sure, I got back some data.

I experienced recovering partition tables as working 100% perfect. If
there are errors on a HDD I experienced fsck -fcyv, fsck -f -y etc. as
working properly too.

You should read howtos. Use links e.g. given from an updated Wiki, the
home page of the current version of your recovery live media you're
using etc.. You never know if there won't be new tools or important
changes.

Hth,
Ralf


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 1336655317.2307.43.camel@precise">http://lists.debian.org/1336655317.2307.43.camel@precise

Thanks, Ralf and all, you guys have given me a solid info to study on.

Thanks

On Thu, May 10, 2012 at 6:08 PM, Ralf Mardorf
<ralf.mardorf@alice-dsl.net> wrote:
> On Thu, 2012-05-10 at 17:32 +0500, Muhammad Yousuf Khan wrote:
>> > For what file systems?
>>
>> any, ext2, 3 or 4 . just asked in general perspective. so instead of
>> reading all the material on the net and filter out the garbage which
>> is very time consuming. so just to make my studies time efficient and
>> other like me also get some help as well.
>
> Parted Magic is a good live media to use.
> On Parted Magic there are command line tools such as ext3grep and
> extundelete and others.
>
> Mount the partition, where you deleted files as read only first. The
> recovered data will be written to another partition. Any writing to the
> partition with the deleted folders and files can overwrite important
> directory entries and/or data. Note, even reading can cause a write,
> IIRC e.g. if you don't mount with noatime, the last read access will be
> written to a file.
>
> I don't have all those commands and options in mind, but take care to
> use options that will recover the data in a human readable/usable
> format. IOW you'll get "/my_dir/my_file_a /my_dir/my_file_b" etc. and
> not "no_dir_cryptic_filename_a no_dir_cryptic_filename_b".
> They also have got options to recover data that is from a special time
> etc..
>
> All those tools for ext3 come with patches, they are usable for ext4,
> theoretically. In practice 99% of your data will be lost.
>
> I still have 2 unmounted ext4 partitions since December 2011. I nearly
> couldn't recover anything, but sure, I got back some data.



if that is the case do you mean i should shift from ext4 to ext3.
since i am using ext4 however there is no specific reason of using
ext4.

>
> I experienced recovering partition tables as working 100% perfect. If
> there are errors on a HDD I experienced fsck -fcyv, fsck -f -y etc. as
> working properly too.
>
> You should read howtos. Use links e.g. given from an updated Wiki, the
> home page of the current version of your recovery live media you're
> using etc.. You never know if there won't be new tools or important
> changes.
>
> Hth,
> Ralf
>
>
> --
> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: http://lists.debian.org/1336655317.2307.43.camel@precise
>


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: CAGWVfMk9Q_sE3Jj86QV70kAwyr1Oz614b4Ay34CyMoo_d9248 A@mail.gmail.com">http://lists.debian.org/CAGWVfMk9Q_sE3Jj86QV70kAwyr1Oz614b4Ay34CyMoo_d9248 A@mail.gmail.com

sorry ignore the last paragraph it was due to Email-Draft in Google.

Thanks.

On Thu, May 10, 2012 at 11:54 PM, Muhammad Yousuf Khan <sirtcp@gmail.com> wrote:
> Thanks, Ralf and all, you guys have given me a solid info to study on.
>
> Thanks
>
> On Thu, May 10, 2012 at 6:08 PM, Ralf Mardorf
> <ralf.mardorf@alice-dsl.net> wrote:
>> On Thu, 2012-05-10 at 17:32 +0500, Muhammad Yousuf Khan wrote:
>>> > For what file systems?
>>>
>>> any, ext2, 3 or 4 . just asked in general perspective. so instead of
>>> reading all the material on the net and filter out the garbage which
>>> is very time consuming. so just to make my studies time efficient and
>>> other like me also get some help as well.
>>
>> Parted Magic is a good live media to use.
>> On Parted Magic there are command line tools such as ext3grep and
>> extundelete and others.
>>
>> Mount the partition, where you deleted files as read only first. The
>> recovered data will be written to another partition. Any writing to the
>> partition with the deleted folders and files can overwrite important
>> directory entries and/or data. Note, even reading can cause a write,
>> IIRC e.g. if you don't mount with noatime, the last read access will be
>> written to a file.
>>
>> I don't have all those commands and options in mind, but take care to
>> use options that will recover the data in a human readable/usable
>> format. IOW you'll get "/my_dir/my_file_a /my_dir/my_file_b" etc. and
>> not "no_dir_cryptic_filename_a no_dir_cryptic_filename_b".
>> They also have got options to recover data that is from a special time
>> etc..
>>
>> All those tools for ext3 come with patches, they are usable for ext4,
>> theoretically. In practice 99% of your data will be lost.
>>
>> I still have 2 unmounted ext4 partitions since December 2011. I nearly
>> couldn't recover anything, but sure, I got back some data.
>
>
>
> if that is the case do you mean i should shift from ext4 to ext3.
> since i am using ext4 however there is no specific reason *of using
> ext4.
>
>>
>> I experienced recovering partition tables as working 100% perfect. If
>> there are errors on a HDD I experienced fsck -fcyv, fsck -f -y etc. as
>> working properly too.
>>
>> You should read howtos. Use links e.g. given from an updated Wiki, the
>> home page of the current version of your recovery live media you're
>> using etc.. You never know if there won't be new tools or important
>> changes.
>>
>> Hth,
>> Ralf
>>
>>
>> --
>> To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
>> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>> Archive: http://lists.debian.org/1336655317.2307.43.camel@precise
>>


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: CAGWVfMm-Gk23WKTtEL5DvpD4A2mpq8KJ0Lu6KzU4v_Ufif1-2A@mail.gmail.com">http://lists.debian.org/CAGWVfMm-Gk23WKTtEL5DvpD4A2mpq8KJ0Lu6KzU4v_Ufif1-2A@mail.gmail.com

On Thu, 2012-05-10 at 23:54 +0500, Muhammad Yousuf Khan wrote:
> > All those tools for ext3 come with patches, they are usable for ext4,
> > theoretically. In practice 99% of your data will be lost.
> >
> > I still have 2 unmounted ext4 partitions since December 2011. I nearly
> > couldn't recover anything, but sure, I got back some data.
>
>
>
> if that is the case do you mean i should shift from ext4 to ext3.
> since i am using ext4 however there is no specific reason of using
> ext4.

I don't know. I switched back to ext3 and then back back to ext4. AFAIK
ext4 should be the better choice regarding to current kernels. Perhaps a
recovery won't be better for ext3.

IMO the best solution is to have separated backups on different HDDs if
possible. Shit happens! > 20 years I never had serious trouble, but in
the end of last year I had the maximum credible accident.

- Ralf


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 1336677132.5199.45.camel@precise">http://lists.debian.org/1336677132.5199.45.camel@precise

Muhammad Yousuf Khan wrote:

> On Thu, May 10, 2012 at 11:01 AM, J. Bakshi <bakshi12@gmail.com> wrote:
>> On Thu, 10 May 2012 10:49:28 +0500
>> Muhammad Yousuf Khan <sirtcp@gmail.com> wrote:
>>
>>> if i mistakenly delete any partition or OS or HD corrupted. what is
>>> the best tool that i can use to recover the data in these situations.
>>>
>>
>> de-rescue for corrupted HD. But don't know about recovering deleted data.
>> I'm also interested in the same topic.
>
> testdisk
>
> http://www.howtoforge.com/data_recovery_with_testdisk
>
> seems good but haven't tested yet.
>

First of all, make backups regularly. Make the process automated.

As for the testdisk, I have used it before and it is AWESOME.

The short story is that I screwed up the partition table of my laptop which
resulted in an unbootable system. I used testdisk to restore the partition
table. All the gory details, screenshots and what not are at my blog
http://malayamaarutham.blogspot.com/2010/08/recover-accidentally-
overwritten.html

hope that helps
--
Kamaraju S Kusumanchi
http://malayamaarutham.blogspot.com/


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: jouu3b$861$1@dough.gmane.org">http://lists.debian.org/jouu3b$861$1@dough.gmane.org