[comp.unix.questions] undelete ?

rol@grasp1.univ-lyon1.fr (Paul Rolland) (04/12/91)

In his message, msc%SUN2.NCKU.EDU.TW@VM.TCS.Tulane.EDU said :
> 
> Dear Netters :
>       Is there any tool which can be used to undelete UNIX files ?
> 

#######
   #      ####    ####           #         ##     #####  ######
   #     #    #  #    #          #        #  #      #    #
   #     #    #  #    #          #       #    #     #    #####
   #     #    #  #    #          #       ######     #    #        ###     ###
   #     #    #  #    #          #       #    #     #    #        ###     ###
   #      ####    ####           ######  #    #     #    ######   ###     ###

   I'm afraid there's not such a tools... Sorry for you :(
	Paul

-- 
 Paul Rolland, engineer [I hope :)] in July 91,
 Specialist of assembly on PC [Not too bad in fact :)],
 Trying to progress on Unix administration
 					   Email : rol@grasp1.univ-lyon1.fr 

mcovingt@athena.cs.uga.edu (Michael A. Covington) (04/12/91)

In article <26542@adm.brl.mil> rol@grasp1.univ-lyon1.fr (Paul Rolland) writes:
>In his message, msc%SUN2.NCKU.EDU.TW@VM.TCS.Tulane.EDU said :
>> 
>> Dear Netters :
>>       Is there any tool which can be used to undelete UNIX files ?
>> 
>
 I'm told Norton Utilities for UNIX will do this, but you have to
 install Norton's filesystem code, which makes undeletion possible.
 Nothing can undelete from an ordinary UNIX filesystem.

-- 
-------------------------------------------------------
Michael A. Covington | Artificial Intelligence Programs
The University of Georgia  |  Athens, GA 30602   U.S.A.
-------------------------------------------------------

navarra@casbah.acns.nwu.edu (John 'tms' Navarra) (04/12/91)

In article <26542@adm.brl.mil> rol@grasp1.univ-lyon1.fr (Paul Rolland) writes:
>In his message, msc%SUN2.NCKU.EDU.TW@VM.TCS.Tulane.EDU said :
>> 
>> Dear Netters :
>>       Is there any tool which can be used to undelete UNIX files ?
>> 
>
>#######
>   #      ####    ####           #         ##     #####  ######
>   #     #    #  #    #          #        #  #      #    #
>   #     #    #  #    #          #       #    #     #    #####
>   #     #    #  #    #          #       ######     #    #        ###     ###
>   #     #    #  #    #          #       #    #     #    #        ###     ###
>   #      ####    ####           ######  #    #     #    ######   ###     ###
>
>   I'm afraid there's not such a tools... Sorry for you :(
>	Paul

    NOT TRUE!! There is entomb which I know is available on Purdue computers.
 (Bruce -- your input is needed.) 

        but besides that -- some systems set up a directory which keeps removed
 files for a coupla days until they are deleted. Also, if your sysop takes 
 regular backups than you can get them from him. 

 it sucks to lose files -- believe me I've been there:
 a few words of caution -- never never ever
 rm -r .*                 from a sub dir of your home dir if you have a 
                          glob variable set which expands the * to . and .. !

       

>
>-- 
> Paul Rolland, engineer [I hope :)] in July 91,
> Specialist of assembly on PC [Not too bad in fact :)],
> Trying to progress on Unix administration
> 					   Email : rol@grasp1.univ-lyon1.fr 


-- 
From the Lab of the MaD ScIenTiST:
      
navarra@casbah.acns.nwu.edu

asg@sage.cc.purdue.edu (Bruce Varney) (04/12/91)

In article <26542@adm.brl.mil> rol@grasp1.univ-lyon1.fr (Paul Rolland) writes:
}In his message, msc%SUN2.NCKU.EDU.TW@VM.TCS.Tulane.EDU said :
}> 
}> Dear Netters :
}>       Is there any tool which can be used to undelete UNIX files ?
}> 
}
}#######
}   #      ####    ####           #         ##     #####  ######
}   #     #    #  #    #          #        #  #      #    #
}   #     #    #  #    #          #       #    #     #    #####
}   #     #    #  #    #          #       ######     #    #        ###     ###
}   #     #    #  #    #          #       #    #     #    #        ###     ###
}   #      ####    ####           ######  #    #     #    ######   ###     ###
}
}   I'm afraid there's not such a tools... Sorry for you :(
}	Paul


Actually, it depends on your system. At purdue we have something called an
entombing library. It is a set of systemcall-look-alikes (creat, unlink, etc.)
which first call and entombing daemon, and then call the real system call.
by linking programs to this library (such as rm) when you compile them
you enable entombing. When files are destroyed by rm, mv or cp, they are
acually moved to a directory called $HOME/../tomb/$NAME   (i.e. My $HOME
is /userb/asg so my entombed files would be put it /userb/tomb/asg .)
There they are kept for 24 hours (unless the disk is near full at which point
the time decreases, and except for a.out and .o files which last only 15
minutes). So if I accidently rm a file, I can use the program unrm which
war created to unremove files. If you would like a more techinichal 
explaination of the system, let me know and I will see what I can find out.

  And there are always tape backups if your sysadm makes them, and the file
existed at the time of the last backup.
Good luck, I hope your file(s) is(are) on tape.
			As Always
			  The Grand Master.
---------
                                   ###             ##
Courtesy of Bruce Varney           ###               #
aka -> The Grand Master                               #
asg@sage.cc.purdue.edu             ###    #####       #
PUCC                               ###                #
;-)                                 #                #
;'>                                #               ##

trevc@tecate.mips.com (Trevor Cotton) (04/13/91)

In article <10212@mentor.cc.purdue.edu>, asg@sage.cc.purdue.edu (Bruce Varney) writes:
|> In article <26542@adm.brl.mil> rol@grasp1.univ-lyon1.fr (Paul Rolland) writes:
|> }In his message, msc%SUN2.NCKU.EDU.TW@VM.TCS.Tulane.EDU said :
|> }> 
|> }> Dear Netters :
|> }>       Is there any tool which can be used to undelete UNIX files ?

I seem to remember reading that Norton Utilities are available for
Xenix on 386 boxes. They use a scheme of time delaying the deletes so that
you can recover the files within 10 minutes or so of deleting them. After that,
they are gone..

-- 
--trevc--

rg@gandp (Dick Gill) (04/15/91)

In article <26542@adm.brl.mil> rol@grasp1.univ-lyon1.fr (Paul Rolland) writes:
>In his message, msc%SUN2.NCKU.EDU.TW@VM.TCS.Tulane.EDU said :
>> 
>> Dear Netters :
>>       Is there any tool which can be used to undelete UNIX files ?
>> 
>
>#######
>   #      ####    ####           #         ##     #####  ######
>   #     #    #  #    #          #        #  #      #    #
>   #     #    #  #    #          #       #    #     #    #####
>   #     #    #  #    #          #       ######     #    #        ###     ###
>   #     #    #  #    #          #       #    #     #    #        ###     ###
>   #      ####    ####           ######  #    #     #    ######   ###     ###
>
>   I'm afraid there's not such a tools... Sorry for you :(
>	Paul


                                                                         #####
 #####   #    #   #####          #    #    ##     #   #  #####   ###### #     #
 #    #  #    #     #            ##  ##   #  #     # #   #    #  #            #
 #####   #    #     #            # ## #  #    #     #    #####   #####     ###
 #    #  #    #     #            #    #  ######     #    #    #  #         #
 #    #  #    #     #            #    #  #    #     #    #    #  #
 #####    ####      #            #    #  #    #     #    #####   ######    #

According to a review in the September, 1990 Unix World titled
"Save Your What?", a product called "Buttsaver" from Lone Star
Inc. can retreive files by reading the free list.  The number
given in the article is 301-829-1622.  I have no connection with
them except as a user of their tape backup product.

-- 
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Dick Gill     Gill & Piette, Inc.             (703)761-1163  ..uunet!gandp!rg

  

ken@racerx.UUCP (Ken Hardy) (04/16/91)

In article <1991Apr12.072931.23362@casbah.acns.nwu.edu>, navarra@casbah.acns.nwu.edu (John 'tms' Navarra) writes:
> In article <26542@adm.brl.mil> rol@grasp1.univ-lyon1.fr (Paul Rolland) writes:
> >In his message, msc%SUN2.NCKU.EDU.TW@VM.TCS.Tulane.EDU said :
> >> 
> >> Dear Netters :
> >>       Is there any tool which can be used to undelete UNIX files ?
> >
> >   I'm afraid there's not such a tools... Sorry for you :(
> >	Paul
> 
>     NOT TRUE!! There is entomb which I know is available on Purdue computers.
> 
>         but besides that -- some systems set up a directory which keeps removed
>  files for a coupla days until they are deleted. Also, if your sysop takes 


I seem to remember a review in Unix World or Unix Review, or some such
place, of a set of tools that 1) do _not_ use a replacement for rm that
moves the files to a temporary directory to be deleted later by cron, or
2) involves kernel patches as suggested in some other posts.
Unfortunately, I cannot find the review on the covers of the magazines
in my stacks, and I'm not going to go paging through them.  If I recall
correctly, the utility in question actually find the i-node list for the
file and undeletes it.  It did not have 100% success, of course, but
could be better than nothing.  Also, if I remember correctly, for text
file, it gives the user the choice of which inodes to include if it is
unsure because of subsequent file system changes; the user can read the
text in question and choose what to include in the reconstructed file.

The claims made for it were quite impressive, though it seemed like a bit
of voodoo when I thought about what it must do.  Playing with the raw
disk partition seems a little spooky, introducing the potential for some
really interesting bugs, particularly when in multi-user mode.  But less
spooky to some, perhaps, than modifying the kernel.

Personally, I use a shell function that moves the files off to a
temporary directory of my own devising.  Cron cleans it up after me.  If
my disk gets too full, I browse through it cleaning out things I know I
don't care for.  I also use that directory for work I know is temporary,
since it gets cleaned out automatically.  I always have had a problem
with disks filling up with clutter.  E.g.; interesting sources or notes
I find on the net go there, since if I don't get around to them within a
week, I probably won't get to them at all.

I like to be able to _really_ remove things, so I have not replaced rm
verbatim.  My shell function is called "erase", because that is what I
use when I'm working under DOS, where I'm afraid to get into the habit
of typing DEL; I'm afraid my fingers will type DEL sometime when I mean
to type DIR *.C, the two commands being so similar to my semi-autonomous
typing fingers.


-- 
Ken Hardy		uunet!racerx!ken		ken@racerx.UUCP

navarra@casbah.acns.nwu.edu (John 'tms' Navarra) (04/16/91)

In article <572@racerx.UUCP> ken@racerx.UUCP (Ken Hardy) writes:
>In article <1991Apr12.072931.23362@casbah.acns.nwu.edu>, navarra@casbah.acns.nwu.edu (John 'tms' Navarra) writes:
>> 
>>     NOT TRUE!! There is entomb which I know is available on Purdue computers.
>>       but besides that -- some systems set up a directory which keeps removed
>>  files for a coupla days until they are deleted. Also, if your sysop takes 
>
>
>
>Personally, I use a shell function that moves the files off to a
>temporary directory of my own devising.  Cron cleans it up after me.  If
>my disk gets too full, I browse through it cleaning out things I know I
>don't care for.  I also use that directory for work I know is temporary,
>since it gets cleaned out automatically.  I always have had a problem
>with disks filling up with clutter.  E.g.; interesting sources or notes
>I find on the net go there, since if I don't get around to them within a
>week, I probably won't get to them at all.

     SO DO I!!! This is a good idea for many reasons. All files I remove
 are sent to tmp and are erased by cron sometime in the morning. Similarly,
 I use a program which saves a copy of the file I am currently editing in
 a dir in case I screw up. 

>
>-- 
>Ken Hardy		uunet!racerx!ken		ken@racerx.UUCP


-- 
From the Lab of the MaD ScIenTiST:
      
navarra@casbah.acns.nwu.edu