Next
Contents Prev
Recovering
deleted files from the Ext2fs
This talk will be laid out as follows.
An overview of the Ext2fs on disk structures and documentation.
How ext2fs deletes files and what it leaves behind
What's required to undelete files - its not always possible.
Choice of tools MC, debugfs, LDE and the undelete HOWTO
Why LDE.
And finally a demo of LDE at work.
Is it still relevant with the releases Ext3fs?
Notes:
|
This talk is about how to recover deleted files after the event from the ext2fs the file system used commonly under Linux. Always remembering that file recovery is not a replacement for a good backup system. This talk will be in two parts with the first part covering the basic layout of ext2fs file system. Before we start recovering files we will need to have a basic understanding of the under lying on disk structure of the ext2fs system. This because most tools presently around to allow you to recover disk files expect the user to have a knowledge of how the disk is laid out. The talk will then touch on issues involved in recovering files and data from the ext2fs file system. Next a discussion of the tools available to aid in this task. Finally I will work though an example of using LDE to recover a deleted file. |