[plug] undelete files in ext3 file system

[James Devenish]

In message <sf548ac8.013 at mmtnetworks.com.au>
on Tue, Sep 02, 2003 at 12:19:08PM +0800, Jon  Miller wrote:
> Need to find out how to undelete files on a RHL7.3 server using the
> ext3 file system.

Enable a snapshot of the drive ASAP (or, perhaps you will be lucky and
unmounting the drive ASAP will be okay for you) -- the more the
filesystem is used, the less likely you are to be able to recover
anything. Then...panic, unless you have a recent backup. Take the drive
offline. There are some luck-related undelete tools, but you may have to
resort to doing a string search over the entire drive.