No description, website, or topics provided.
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
lib Fix some bugs Jul 9, 2013
tools Fix some bugs Jul 9, 2013
.gitignore Fix some bugs Jul 9, 2013
README.md Update README.md Jul 9, 2013
salvage_data.pl

README.md

ext3 file system salvage tool

Need Perl Modules class accessor

implemented duplicate check to extundelete.

Compile salvage tool

cd tools
yum -y install e2fsprogs-devel
aclocal
automake
autoconf
./configure --prefix=`pwd`
make
make install

SALVAGE

  • set salvage params
vi salvage_data.pl
# salvage parameter
# 2013/7/09 12:00 == 1373338800
# $salvage_after: only process entries deleted on or after 'dtime'.
# $salvage_dir:   target directory for undelete
# $salvage_dev:   target device-file
my $salvage_after   = '1373338800';
my $salvage_dir     = '/tmp';
my $salvage_dev     = '/dev/sdb1';
  • run
mount -o remount,ro $(salvage_dev)
./salvage_data.pl
  • undelete data into SALVAGED_DATA/RECOVERED_FILES/$(full-path-files)
  • duplicated inode list into SALVAGED_DATA/SUSPECT_LIST.txt