Re: recover files

From	Max Nikulin <manikulin@gmail.com>
Newsgroups	linux.debian.user
Subject	Re: recover files
Date	2024-10-26 13:40 +0200
Message-ID	<JBNjb-4kSH-11@gated-at.bofh.it> (permalink)
References	<JBxo5-4b7j-9@gated-at.bofh.it> <JBxR7-4bwF-5@gated-at.bofh.it> <JBFbX-4fQa-1@gated-at.bofh.it> <JBJSh-4iHX-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 26/10/2024 14:53, Hans wrote:
> Yes, whilst extundelete is not so easy to use,

Thank you for the detailed answer.

I have tried ext4magic. My impression is that it might have an issue 
with reading journal and that it is unnecessary strict walking through 
inodes (zeroing invalidates checksums if I remember it correctly). It 
may restore some files, however I can not figure out what approach 
extundelete or other tools may use to noticeably improve success rate 
since important data is overwritten.

> I was very successfull with photorec and autopsy.

Does autopsy/sleuthkit use some heuristic that allows to restore 
significantly more data than extundelete and photorec in the case of 
unintentional removing of directories?

> Last time I had to revover 2 TB music files for a friend, and photorec gave me
> all files back.

Of course, a few MB size files with reach metadata (audio, image, zip) 
is an optimal case for photorec and foremost. For 1 hour long .mp3 files 
fragmentation causes recovery of only some parts of files (at least in 
the case of FAT32).

> Also foremost is another tool of my favourites, as it is easy to use.

I am curious what are cases when it may perform noticeably better than 
photorec.

Thread

recover files louletian@sina.com - 2024-10-25 20:40 +0200
  Re: recover files Hans <hans.ullrich@loop.de> - 2024-10-25 21:10 +0200
    Re: recover files Max Nikulin <manikulin@gmail.com> - 2024-10-26 05:00 +0200
      Re: recover files <tomas@tuxteam.de> - 2024-10-26 08:30 +0200
      Re: recover files Hans <hans.ullrich@loop.de> - 2024-10-26 10:00 +0200
        Re: recover files Max Nikulin <manikulin@gmail.com> - 2024-10-26 13:40 +0200
          Re: recover files Hans <hans.ullrich@loop.de> - 2024-10-26 15:30 +0200
            Re: recover files Max Nikulin <manikulin@gmail.com> - 2024-10-26 17:10 +0200
              Re: recover files Hans <hans.ullrich@loop.de> - 2024-10-26 18:40 +0200
                Re: recover files <tomas@tuxteam.de> - 2024-10-26 18:50 +0200

csiph-web