data recovering in EXT3

[Keld Jørn Simonsen]

On Fri, Jul 28, 2006 at 08:30:53AM +0200, Keld Jørn Simonsen wrote:
> On Tue, Jul 25, 2006 at 07:27:11PM -0500, Dmitry Bandurin wrote:
> > Hello,
> > 
> > We have run and stopped by chance command "fsck -y" on one of our raid disks
> > (with ext3 file system). After that we have found that SOME files 
> > disappeared
> > (they are not seen in the directories where they have been before).
> > The data are extremely important and contain a lot of programs,
> > scripts for some data analysis and very hard to recover by hands.
> > I have run ''fsck -y" once more and it recovered just few files..
> > Is there any way, any tool that would allow to recover the data?
> > Probably there is some specific options for the recovery ralated with
> > journaling in ext3?
> > 
> > I have used debugfs, it produced following, if it helps:
> > debugfs:  open -f -w /dev/sdb1
> > debugfs:  features
> > Filesystem features: has_journal resize_inode filetype needs_recovery
> > sparse_super large_file
> 
> You could look at my patched version of debugfs - 
> http://std.dkuug.dk/keld/readme-salvage.html

It saves files in the system by looking at the data blocks only.
It does not need a directory structure at all. So you could have deleted
all files on the disk, like when you have reformatted it, and still you
can salvage most of the files.

Best regards
Keld