+ Reply to Thread
Page 1 of 2 1 2 LastLast
Results 1 to 10 of 15

HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

  1. HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    Hi All,

    We had some very impotant scripts on a solaris 5.9 machine, but those
    files have got deleted by mistake.
    Is there any way, by which we can recover all those files?
    Please share your knowledge on the same and help us in resolving this
    issue.

    Thank you,
    -Neelam Chahar
    neelam.chahar@oracle.com


  2. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    On 2007-05-25, chah_neel@rediffmail.com wrote:
    > Hi All,
    >
    > We had some very impotant scripts on a solaris 5.9 machine, but those
    > files have got deleted by mistake.
    > Is there any way, by which we can recover all those files?


    Yep. You retrieve them from the backup. You did make backups, right?


    --
    Ignorance more frequently begets confidence than does knowledge: it is those
    who know little, not those who know much, who so positively assert that this
    or that problem will never be solved by science.
    [email me at huge {at} huge (dot) org uk]

  3. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    chah_neel@rediffmail.com wrote:
    > Hi All,
    >
    > We had some very impotant scripts on a solaris 5.9 machine, but those
    > files have got deleted by mistake.
    > Is there any way, by which we can recover all those files?
    > Please share your knowledge on the same and help us in resolving this
    > issue.


    Restore from backup! If something is "very impotant" you have backups, haven't you?

  4. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    chah_neel@rediffmail.com wrote:
    > Hi All,
    >
    > We had some very impotant scripts on a solaris 5.9 machine, but those
    > files have got deleted by mistake.
    > Is there any way, by which we can recover all those files?
    > Please share your knowledge on the same and help us in resolving this
    > issue.
    >
    > Thank you,
    > -Neelam Chahar
    > neelam.chahar@oracle.com
    >


    Restore them from a recent backup. You DO make regular disk backups
    don't you?


  5. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    In article <4656D3FA.502@comcast.net>,
    "Richard B. Gilbert" wrote:

    > chah_neel@rediffmail.com wrote:
    > > Hi All,
    > >
    > > We had some very impotant scripts on a solaris 5.9 machine, but those
    > > files have got deleted by mistake.
    > > Is there any way, by which we can recover all those files?
    > > Please share your knowledge on the same and help us in resolving this
    > > issue.
    > >
    > > Thank you,
    > > -Neelam Chahar
    > > neelam.chahar@oracle.com
    > >

    >
    > Restore them from a recent backup. You DO make regular disk backups
    > don't you?


    OP, are you seeing a theme here?

    There is a REMOTE possibility that if you physically write protected the
    disk ASAP and halted the system that a forensic disk restore of the
    files might be possible at about $10K a go with no guarantee.

    Basically, you're screwed if you don't have backups.

    --
    DeeDee, don't press that button! DeeDee! NO! Dee...




  6. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    Michael Vilain wrote:

    > There is a REMOTE possibility that if you physically write protected the
    > disk ASAP and halted the system that a forensic disk restore of the
    > files might be possible at about $10K a go with no guarantee.


    There are so many free utilities to try and recover files from an ext2 fs
    on linux (but far less for ext3, despite their closeness) that I doubt
    there is none that would work on solaris ufs. Randomly checking on the
    web, photorec might be able to get something, although there is no
    mention of UFS.

    Note that obviously you can't expect to recover everything perfectly.

  7. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    Hi,

    Funny thing is, I just KNEW when I saw this post, the next 5 responses
    would be "restore from backup" ;)

    Anyway, I have never heard of anyone actually using this, but I found
    this when googling for "Solaris data recovery" :
    http://www.stellarinfo.com/solaris-data-recovery.htm

    Maybe you could give it a shot - if it works, let us know.

    Alternatively, you could try using dd on on the disk device, capture
    the output in a file somewhere and trawl through it with "strings"
    looking for bits that match your scripts.

    Oh, and if you hadn't immediately stopped all write access to the disk
    involved, then you're probably straight out of luck anyway - the
    blocks containing your data are probably long overwritten...

    -Mark



  8. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    (message (Hello 'Marc)
    (you :wrote n '(Fri, 25 May 2007 19:12:56 +0000 (UTC)))
    (

    ??>> There is a REMOTE possibility that if you physically write protected
    ??>> the disk ASAP and halted the system that a forensic disk restore of
    ??>> the files might be possible at about $10K a go with no guarantee.

    there lots of software to restore from FAT and NTFS on Windows machines, and
    it really works -- i've successfully restored ocassionaly deleted files many
    times, on live system without any halting etc. is UFS so different?

    M> There are so many free utilities to try and recover files from an ext2
    M> fs on linux (but far less for ext3, despite their closeness) that I
    M> doubt there is none that would work on solaris ufs. Randomly checking on
    M> the web, photorec might be able to get something, although there is no
    M> mention of UFS.

    it should be possible to grep through all data on physicall disk, no? i've
    done it on linux, and have found my files. with no additional software --
    just grepping on block device.

    )
    (With-best-regards '(Alex Mizrahi) :aka 'killer_storm)
    "I am everything you want and I am everything you need")



  9. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    On Sat, 26 May 2007, Alex Mizrahi wrote:

    > there lots of software to restore from FAT and NTFS on Windows machines, and
    > it really works -- i've successfully restored ocassionaly deleted files many
    > times, on live system without any halting etc. is UFS so different?


    Yes. On FAT/NTFS, deleting a file consisted more or less of just setting a
    bit in the first character of the file's name, so to undelete it you just
    clear that bit. UFS is very different.

    > it should be possible to grep through all data on physicall disk, no? i've
    > done it on linux, and have found my files. with no additional software --
    > just grepping on block device.


    You've been very lucky. There's no guarantee that the blocks of a file
    will be contiguous or in the "right" order. Good luck trying to find
    all the blocks of a deleted 10 MB binary file, which are scattered all
    over the disk...

    --
    Rich Teer, SCSA, SCNA, SCSECA, OGB member

    CEO,
    My Online Home Inventory

    Voice: +1 (250) 979-1638
    URLs: http://www.rite-group.com/rich
    http://www.myonlinehomeinventory.com

  10. Re: HOW TO RECOVER DELETED FILES FROM SOLARIS 5.9 MACHINE

    Rich Teer wrote:

    > On Sat, 26 May 2007, Alex Mizrahi wrote:
    >
    >> there lots of software to restore from FAT and NTFS on Windows machines,
    >> and it really works -- i've successfully restored ocassionaly deleted
    >> files many times, on live system without any halting etc. is UFS so
    >> different?

    >
    > Yes. On FAT/NTFS, deleting a file consisted more or less of just setting
    > a bit in the first character of the file's name, so to undelete it you
    > just clear that bit. UFS is very different.


    ....and it's superior in every possible way, too. The fact that NTFS/FAT
    allow for recovery of deleted files was a /very/ poor design decision and
    is fraught with numerous security holes. If you remove a file on a real
    operating system, the file is removed because Unix respects your wishes and
    doesn't treat you like a mistake-prone child.


+ Reply to Thread
Page 1 of 2 1 2 LastLast