如何使用ext3grep恢复Linux中的误删除的文件

Filters:

--group grp Only process group 'grp'.

--directory Only process directory inodes.

--after dtime Only entries deleted on or after 'dtime'.

--before dtime Only entries deleted before 'dtime'.

--deleted Only show/process deleted entries.

--allocated Only show/process allocated inodes/blocks.

--unallocated Only show/process unallocated inodes/blocks.

--reallocated Do not suppress entries with reallocated inodes.

Inodes are considered 'reallocated' if the entry

is deleted but the inode is allocated, but also when

the file type in the dir entry and the inode are

different.

--zeroed-inodes Do not suppress entries with zeroed inodes. Linked

entries are always shown, regardless of this option.

--depth depth Process directories recursively up till a depth

of 'depth'.

Actions:

--inode-to-block ino Print the block that contains inode 'ino'.

--inode ino Show info on inode 'ino'.

If --ls is used and the inode is a directory, then

the filters apply to the entries of the directory.

If you do not use --ls then --print is implied.

--block blk Show info on block 'blk'.

If --ls is used and the block is the first block

of a directory, then the filters apply to entries

of the directory.

If you do not use --ls then --print is implied.

--histogram=[atime|ctime|mtime|dtime|group]

Generate a histogram based on the given specs.

Using atime, ctime or mtime will change the

meaning of --after and --before to those times.

--journal-block jblk Show info on journal block 'jblk'.

--journal-transaction seq

Show info on transaction with sequence number 'seq'.

--dump-names Write the path of files to stdout.

This implies --ls but suppresses it's output.

--search-start str Find blocks that start with the fixed string 'str'.

--search str Find blocks that contain the fixed string 'str'.

--search-inode blk Find inodes that refer to block 'blk'.

--search-zeroed-inodes Return allocated inode table entries that are zeroed.

--inode-dirblock-table dir

Print a table for directory path 'dir' of directory

block numbers found and the inodes used for each file.

开始工作之前，我们先来制作一个分区，然后来做试验

[root@localhost bin]# mkdir /tmp/test

[root@localhost bin]# dd if=/dev/zero of=file count=102400

[root@localhost bin]#mkfs.ext3 file

######按Y继续

[root@localhost bin]#mount -o loop /tmp/test/file /mnt

本文URL地址：http://www.bianceng.cn/OS/Linux/201410/45343.htm

（编辑：佛山站长网）

【声明】本站内容均来自网络，其相关言论仅代表作者个人观点，不代表本站立场。若无意侵犯到您的权利，请及时与联系站长删除相关内容!