Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > alt.comp.os.windows-10 > #128253
| From | Paul <nospam@needed.invalid> |
|---|---|
| Newsgroups | alt.comp.os.windows-10, alt.comp.microsoft.windows, microsoft.public.windowsxp.general |
| Subject | Re: End of year survey for how much storage you typically use for your Windows program files & program data |
| Date | 2021-01-04 00:35 -0500 |
| Organization | A noiseless patient Spider |
| Message-ID | <rsu9es$181$1@dont-email.me> (permalink) |
| References | <rsl6qa$31c$1@news.mixmin.net> <XnsACA4A2141162Bauricauricauricauric@144.76.35.252> <rsmbk1$nlk$1@dont-email.me> <XnsACA68A4D1448Eauricauricauricauric@144.76.35.252> |
Cross-posted to 3 groups.
Auric__ wrote:
>
> I wish I knew more about how ext2/3/4 works. I have a very basic user-level
> understanding of it, but I'm not sure how to use the info presented to me to
> recover my files (and believe me, if I can recover instead of restore from
> backup, I'll be a happy man).
>
> Man, I miss the simple days of UNDELETE.EXE.
https://www.sciencedirect.com/science/article/pii/S1742287617300270
"Contribution
It can be concluded from the findings of this work that, by using
the described approach, files can be reconstructed from Ext4 file
systems even without knowledge about the particular structure of
the file system. By separating the inode search from the inode
reconstruction, it is possible to find inodes when there is no
given information about the file system layout available. Neither
the file system size, nor the examined Ext4 file system's offset
to the begin of the partition are necessary in order to locate
inodes (and thus gain first information about potential files).
"
So what that says, is EXT4 has some special properties. Especially
if it wasn't a conversion from EXT3 to EXT4. Apparently EXT4 likes
to use Extents, and then if the recovery software searches for
inode signatures, that makes it easier to recover complete files.
The files may be sans path information, but for a download folder,
getting the file itself back is a start.
The recovery then, doesn't have to be as bad as Photorec just
randomly grabbing blocks and slapping them together. There
may be enough "local structure" to what is on the disk, to
allow recovery of most everything still there. All it takes is
an Extent Aware recovery tool. (Apparently the following
code fits into the SleuthKit framework, which is command line.)
https://www.cs1.tf.fau.de/research/archive/ext4-file-recovery/
# source code
http://faui1s205.informatik.uni-erlangen.de/Thesis-Seufert.rar
Paul
Back to alt.comp.os.windows-10 | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
End of year survey for how much storage you typically use for your Windows program files & program data Arlen Holder <arlen_holder@newmachines.com> - 2020-12-31 18:55 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data Arlen Holder <arlen_holder@newmachines.com> - 2020-12-31 19:43 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data GlowingBlueMist <GlowingBlueMist@blackhole.io> - 2020-12-31 17:35 -0600
Re: End of year survey for how much storage you typically use for your Windows program files & program data Arlen Holder <arlen_holder@newmachines.com> - 2021-01-01 02:25 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data "Auric__" <not.my.real@email.address> - 2020-12-31 22:55 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data Arlen Holder <arlen_holder@newmachines.com> - 2021-01-01 02:56 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data Arlen Holder <arlen_holder@newmachines.com> - 2021-01-01 03:22 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data Paul <nospam@needed.invalid> - 2021-01-01 00:23 -0500
Re: End of year survey for how much storage you typically use for your Windows program files & program data Arlen Holder <arlen_holder@newmachines.com> - 2021-01-01 08:46 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data Paul <nospam@needed.invalid> - 2021-01-01 07:17 -0500
Re: End of year survey for how much storage you typically use for your Windows program files & program data Arlen Holder <arlen_holder@newmachines.com> - 2021-01-01 15:17 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data Arlen Holder <arlen_holder@newmachines.com> - 2021-01-02 17:33 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data "Auric__" <not.my.real@email.address> - 2021-01-02 20:35 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data David Brooks <DB@nomail.afraid.org> - 2021-01-02 21:17 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data Paul <nospam@needed.invalid> - 2021-01-02 16:19 -0500
Re: End of year survey for how much storage you typically use for your Windows program files & program data Paul <nospam@needed.invalid> - 2021-01-02 16:35 -0500
Re: End of year survey for how much storage you typically use for your Windows program files & program data Paul <nospam@needed.invalid> - 2021-01-04 00:35 -0500
Re: End of year survey for how much storage you typically use for your Windows program files & program data "Auric__" <not.my.real@email.address> - 2021-01-05 16:48 +0000
Re: End of year survey for how much storage you typically use for your Windows program files & program data Paul <nospam@needed.invalid> - 2021-01-15 08:50 -0500
Re: End of year survey for how much storage you typically use for your Windows program files & program data Paul <nospam@needed.invalid> - 2021-01-16 19:42 -0500
csiph-web