summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorrobi <robi>2011-04-05 01:13:26 +0000
committerrobi <robi>2011-04-05 01:13:26 +0000
commit022612eae379cc1d70b09655096a33d0a5f09617 (patch)
treee97e167721414503f814e7d27bddf0f0075461bb
parentc98aee37f48b9523e2eceef61949aeda958ed3f8 (diff)
version stuff
-rw-r--r--ChangeLog7
-rw-r--r--INSTALL10
-rw-r--r--INSTALL.de4
-rw-r--r--Makefile.am1
-rw-r--r--Makefile.in1
-rw-r--r--NEWS8
-rw-r--r--README12
-rwxr-xr-xconfigure41
-rw-r--r--configure.in6
-rw-r--r--src/ext4magic.899
10 files changed, 135 insertions, 54 deletions
diff --git a/ChangeLog b/ChangeLog
index 83e56d9..9bbee97 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+0.2.1 new : optional Expert-Mode (activate at configure) new Options "-s blocksize" ; "-n blockcount" ; "-c"
+ change : activate magic level 1 and 2 for recover from the root inode
+ BUG : #018040
+
+
0.2.0 change :optimization of the ext3 magic scan functions
new: support for a lot of images, video and audio
new: possibility of the stream orientation. (needed for mp3)
@@ -7,7 +12,7 @@
0.2.0-pv2 new: support and modification for a lot of filetype
- change :adjusting settings for version file-5.04
+ change :adjusting settings for version file-5.04
change :stabilization of the magic scan functions
BUG: segfault if filesystem can not open.
BUG: #017625; #017618
diff --git a/INSTALL b/INSTALL
index 4843fc7..6514046 100644
--- a/INSTALL
+++ b/INSTALL
@@ -64,7 +64,7 @@ this is everything, and it installs the following files
-Detailed Installation Howto
+Detailed Install Howto
============================
Following detailed instructions for installing considered special cases,
@@ -132,10 +132,11 @@ Which of the two libmagic versions the finished ext4magic use, you can check wit
If you get the following error during configure ext4magic:
-"error: library libmagic.so file-version >= 5.04 not found, install the package "file-5.04" to build ext4magic"
+"library libmagic.so >= 5.04 not found, install package "file-5.04" and "file-devel" (workaround see INSTALL)"
-and "file-5.04" is installed, probably the devel package it is not installed. Not for all distributions
-it is available. You can work around that by generate a symlink to the existing version of this library. (on a 64-bit system, the library path can also be /usr/lib64 )
+and >= "file-5.04" is installed, then no file "libmagic.so" is found, probably the devel package is not installed.
+Not for all distributions it is available. You can work around that by generate a symlink "libmagic.so" to the
+existing version of this library. (on a 64-bit system, the library path can also be /usr/lib64 )
see the following log:
# cd /usr/lib
@@ -145,6 +146,7 @@ lrwxrwxrwx 1 root root 13 Sep 23 01:40 /usr/lib/libmagic.so -> libmagic.so.1
lrwxrwxrwx 1 root root 17 Aug 28 16:09 /usr/lib/libmagic.so.1 -> libmagic.so.1.0.0
-rwxr-xr-x 1 root root 116720 Oct 24 2009 /usr/lib/libmagic.so.1.0.0
+For more than one version of libmagic:
The version for compiling with ext4magic should have the symlink "libmagic.so"
another version of libmagic should not have this symlink.
diff --git a/INSTALL.de b/INSTALL.de
index edfd3da..0e4316d 100644
--- a/INSTALL.de
+++ b/INSTALL.de
@@ -145,10 +145,10 @@ Welche der beiden libmagic Versionen das fertig ext4magic nutzt, kann später wi
Erzeugt configure bei ext4magic trotz installiertem "file-5.04" Paket folgende Fehlermeldung:
-"error: library libmagic.so file-version >= 5.04 not found, install the package "file-5.04" to build ext4magic"
+"library libmagic.so >= 5.04 not found, install package "file-5.04" and "file-devel" (workaround see INSTALL)"
Es ist in diesem Fall wohl das devel Paket nicht installiert. Dieses ist auch nicht für jedes Linux erhältlich.
-Es fehlt nur ein Symlink, dieser ist schnell auch per Hand angelegt.
+Es fehlt nur ein Symlink zum kompilieren, dieser ist schnell auch per Hand angelegt.
Dazu als root in das Verzeichnis /usr/lib oder /usr/lib64 wechseln und einen Symlink libmagic.so
auf die dort vorhandene Version dieser Library erzeugen. Folgender Konsollog zeigt das Vorgehen.
(auf einem 64-bit System könnte dieses Verzeichnis auch /usr/lib64 sein)
diff --git a/Makefile.am b/Makefile.am
index 43bfa43..e84fb4a 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -2,3 +2,4 @@
# have all needed files, that a GNU package needs
AUTOMAKE_OPTIONS = foreign 1.4
SUBDIRS = src
+EXTRA_DIST = INSTALL.de
diff --git a/Makefile.in b/Makefile.in
index 1fe50ca..a39b7ff 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -217,6 +217,7 @@ top_srcdir = @top_srcdir@
# have all needed files, that a GNU package needs
AUTOMAKE_OPTIONS = foreign 1.4
SUBDIRS = src
+EXTRA_DIST = INSTALL.de
all: config.h
$(MAKE) $(AM_MAKEFLAGS) all-recursive
diff --git a/NEWS b/NEWS
index 105f23d..bc9f5fd 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,11 @@
+ext4magic 0.2.1 Optional Expert-Mode with the following new options "-s blocksize" ; "-n blockcount" ; "-c"
+ This makes it possible to open front corrupted file systems.
+
+ Modified flow control allows automatic a recover-all ("-r" or "-R" on the entire file system)
+ This enables the restore of deleted inode even if the directory inode is not found in journal.
+ The function uses the first two stages of the magic functions (ext3/ext4)
+
+
ext4magic 0.2.0 The Magic features for ext3 are complete.
Support for most files types of a typical Linux system and lots of multimedia files.
diff --git a/README b/README
index 13f3c74..0a9c4a4 100644
--- a/README
+++ b/README
@@ -1,4 +1,4 @@
-README for ext4magic V-0.2.0
+README for ext4magic V-0.2.1
You accidentally deleted files ?
@@ -269,7 +269,7 @@ Now you can test ext4magic with the deleted copy.
if not all files were deleted.
- It will automatically search for the time of the last deletion.
+ It will automatically search for the time of the last deletion.
And with a little delay should start the recover. You can now only wait. Depending on the
number of deleted files can take a long time. Then you can compare the files with
the original file system.
@@ -316,6 +316,12 @@ For select of the various listing- and recover actions.
+(NEW 2.0.1) Expert Options -s -n -c
+-------------------------
+available only if enabled by configure
+Allow access to damaged file systems, backup superblocks, ....
+
+
---------------------------------------------------------------------------------------------
@@ -355,7 +361,7 @@ Known Bugs
Only on big endian environments, there are some incorrect outputs of time stamps, and missing of
deleted directory entries. (BUG #017304 #017305)
These errors occur only if the journal is not read and so only called functions of libext2fs for
-printout of inode and directorys. All journal options and the file restoring are not affected.
+printout of inode and directory. All journal options and the file restoring are not affected.
The error is not within ext4magic and can not be compensated in ext4magic. This would be patched
in libext2fs. The error is very rare and not significant. If anyone needs a patch for this,
no problem, within ext4magic the problem is solved. It is also possible to write an unofficial patch
diff --git a/configure b/configure
index 3dd1f77..507a169 100755
--- a/configure
+++ b/configure
@@ -905,6 +905,7 @@ enable_libtool_lock
enable_debug
enable_debug_magic
enable_file_attr
+enable_expert_mode
'
ac_precious_vars='build_alias
host_alias
@@ -1553,6 +1554,7 @@ Optional Features:
--enable-debug Turn on debugging
--enable-debug-magic Turn on debugging magic-scan-engine
--enable-file-attr enable restore of file attribute
+ --enable-expert-mode enable advanced options for expert mode
Optional Packages:
--with-PACKAGE[=ARG] use PACKAGE [ARG=yes]
@@ -2494,7 +2496,7 @@ fi
# Define the identity of the package.
PACKAGE=ext4magic
- VERSION=0.2.0
+ VERSION=0.2.1
cat >>confdefs.h <<_ACEOF
@@ -4365,13 +4367,13 @@ if test "${lt_cv_nm_interface+set}" = set; then
else
lt_cv_nm_interface="BSD nm"
echo "int some_variable = 0;" > conftest.$ac_ext
- (eval echo "\"\$as_me:4368: $ac_compile\"" >&5)
+ (eval echo "\"\$as_me:4370: $ac_compile\"" >&5)
(eval "$ac_compile" 2>conftest.err)
cat conftest.err >&5
- (eval echo "\"\$as_me:4371: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
+ (eval echo "\"\$as_me:4373: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
(eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
cat conftest.err >&5
- (eval echo "\"\$as_me:4374: output\"" >&5)
+ (eval echo "\"\$as_me:4376: output\"" >&5)
cat conftest.out >&5
if $GREP 'External.*some_variable' conftest.out > /dev/null; then
lt_cv_nm_interface="MS dumpbin"
@@ -5577,7 +5579,7 @@ ia64-*-hpux*)
;;
*-*-irix6*)
# Find out which ABI we are using.
- echo '#line 5580 "configure"' > conftest.$ac_ext
+ echo '#line 5582 "configure"' > conftest.$ac_ext
if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5
(eval $ac_compile) 2>&5
ac_status=$?
@@ -7430,11 +7432,11 @@ else
-e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-e 's:$: $lt_compiler_flag:'`
- (eval echo "\"\$as_me:7433: $lt_compile\"" >&5)
+ (eval echo "\"\$as_me:7435: $lt_compile\"" >&5)
(eval "$lt_compile" 2>conftest.err)
ac_status=$?
cat conftest.err >&5
- echo "$as_me:7437: \$? = $ac_status" >&5
+ echo "$as_me:7439: \$? = $ac_status" >&5
if (exit $ac_status) && test -s "$ac_outfile"; then
# The compiler can only warn and ignore the option if not recognized
# So say no if there are warnings other than the usual output.
@@ -7769,11 +7771,11 @@ else
-e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-e 's:$: $lt_compiler_flag:'`
- (eval echo "\"\$as_me:7772: $lt_compile\"" >&5)
+ (eval echo "\"\$as_me:7774: $lt_compile\"" >&5)
(eval "$lt_compile" 2>conftest.err)
ac_status=$?
cat conftest.err >&5
- echo "$as_me:7776: \$? = $ac_status" >&5
+ echo "$as_me:7778: \$? = $ac_status" >&5
if (exit $ac_status) && test -s "$ac_outfile"; then
# The compiler can only warn and ignore the option if not recognized
# So say no if there are warnings other than the usual output.
@@ -7874,11 +7876,11 @@ else
-e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-e 's:$: $lt_compiler_flag:'`
- (eval echo "\"\$as_me:7877: $lt_compile\"" >&5)
+ (eval echo "\"\$as_me:7879: $lt_compile\"" >&5)
(eval "$lt_compile" 2>out/conftest.err)
ac_status=$?
cat out/conftest.err >&5
- echo "$as_me:7881: \$? = $ac_status" >&5
+ echo "$as_me:7883: \$? = $ac_status" >&5
if (exit $ac_status) && test -s out/conftest2.$ac_objext
then
# The compiler can only warn and ignore the option if not recognized
@@ -7929,11 +7931,11 @@ else
-e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-e 's:$: $lt_compiler_flag:'`
- (eval echo "\"\$as_me:7932: $lt_compile\"" >&5)
+ (eval echo "\"\$as_me:7934: $lt_compile\"" >&5)
(eval "$lt_compile" 2>out/conftest.err)
ac_status=$?
cat out/conftest.err >&5
- echo "$as_me:7936: \$? = $ac_status" >&5
+ echo "$as_me:7938: \$? = $ac_status" >&5
if (exit $ac_status) && test -s out/conftest2.$ac_objext
then
# The compiler can only warn and ignore the option if not recognized
@@ -10729,7 +10731,7 @@ else
lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
lt_status=$lt_dlunknown
cat > conftest.$ac_ext <<_LT_EOF
-#line 10732 "configure"
+#line 10734 "configure"
#include "confdefs.h"
#if HAVE_DLFCN_H
@@ -10825,7 +10827,7 @@ else
lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
lt_status=$lt_dlunknown
cat > conftest.$ac_ext <<_LT_EOF
-#line 10828 "configure"
+#line 10830 "configure"
#include "confdefs.h"
#if HAVE_DLFCN_H
@@ -11782,8 +11784,8 @@ else
fi
test $fail = 1 &&
-{ { $as_echo "$as_me:$LINENO: error: library libmagic.so file-version >= 5.04 not found, install the package \"file-5.04\" to build ext4magic" >&5
-$as_echo "$as_me: error: library libmagic.so file-version >= 5.04 not found, install the package \"file-5.04\" to build ext4magic" >&2;}
+{ { $as_echo "$as_me:$LINENO: error: library libmagic.so >= 5.04 not found, install package \"file-5.04\" and \"file-devel\" (workaround see INSTALL)" >&5
+$as_echo "$as_me: error: library libmagic.so >= 5.04 not found, install package \"file-5.04\" and \"file-devel\" (workaround see INSTALL)" >&2;}
{ (exit 1); exit 1; }; }
@@ -11803,6 +11805,11 @@ if test "${enable_file_attr+set}" = set; then
enableval=$enable_file_attr; if test "$GCC" = "yes"; then CPPFLAGS="$CPPFLAGS -DFILE_ATTR"; fi
fi
+# Check whether --enable-expert-mode was given.
+if test "${enable_expert_mode+set}" = set; then
+ enableval=$enable_expert_mode; if test "$GCC" = "yes"; then CPPFLAGS="$CPPFLAGS -DEXPERT_MODE"; fi
+fi
+
ac_config_files="$ac_config_files Makefile src/Makefile"
diff --git a/configure.in b/configure.in
index 1187cec..023f6cb 100644
--- a/configure.in
+++ b/configure.in
@@ -1,7 +1,7 @@
AC_INIT(configure.in)
AM_CONFIG_HEADER(config.h)
-AM_INIT_AUTOMAKE(ext4magic, 0.2.0)
+AM_INIT_AUTOMAKE(ext4magic, 0.2.1)
AC_LANG_C
AC_PROG_CC
@@ -24,7 +24,7 @@ AC_MSG_ERROR([You must have ext2fs version >= 1.41.9 to build ext4magic])
fail=0
AC_SEARCH_LIBS([magic_getpath], [magic], [], [fail=1])
test $fail = 1 &&
-AC_MSG_ERROR([library libmagic.so file-version >= 5.04 not found, install the package "file-5.04" to build ext4magic])
+AC_MSG_ERROR([library libmagic.so >= 5.04 not found, install package "file-5.04" and "file-devel" (workaround see INSTALL)])
@@ -34,5 +34,7 @@ AC_ARG_ENABLE(debug-magic,[ --enable-debug-magic Turn on debugging m
[if test "$GCC" = "yes"; then CPPFLAGS="$CPPFLAGS -DDEBUG_MAGIC_SCAN"; fi])
AC_ARG_ENABLE(file-attr,[ --enable-file-attr enable restore of file attribute ],
[if test "$GCC" = "yes"; then CPPFLAGS="$CPPFLAGS -DFILE_ATTR"; fi])
+AC_ARG_ENABLE(expert-mode,[ --enable-expert-mode enable advanced options for expert mode ],
+ [if test "$GCC" = "yes"; then CPPFLAGS="$CPPFLAGS -DEXPERT_MODE"; fi])
AC_OUTPUT(Makefile src/Makefile)
diff --git a/src/ext4magic.8 b/src/ext4magic.8
index 7e2a5b3..cd7f874 100644
--- a/src/ext4magic.8
+++ b/src/ext4magic.8
@@ -1,4 +1,4 @@
-.TH ext4magic 8 "Dec 2010" "version 0.2.0" "Administrations Tool"
+.TH ext4magic 8 "Apr 2011" "version 0.2.1" "Administrations Tool"
.SH NAME
ext4magic \- allows to recover deleted files on ext3/4 filesystems
.SH SYNOPSIS
@@ -30,8 +30,8 @@ extensive information about the filesytem Journal.
.SH OPTIONS
.B
-Magic Options: (new in version 0.2.0)
-These options are for a mulit-stage recover especially for file restore after a recursiv deletion of parts or the whole file system.
+Magic Options:
+(new in version 0.2.0) These options are for a mulit-stage recover especially for file restore after a recursiv deletion of parts or the whole file system.
(third step currently only available for ext3.)
Umount the file system directly after an accidentally destroy and use these options with the umount file system or with a copy of this file system.
@@ -215,16 +215,51 @@ the mount point for this filesystem is "
The root directory of the filesystem you can use
.B
--f /
+\-f /
or
.B
--f ""
+\-f ""
for ext4magic this is the same.
you should specify no leading "/" for all other filename. And directory names you should specify without final "/" .
+
+.PP
+.B
+Expert Options:
+(new 0.2.1) The optional Expert-Mode must be enabled with the option
+.B
+"\-\-enable\-expert\-mode"
+by configure. This makes it possible to open and recover front corrupted file systems.
+In the current version it is possible to address backup superblocks
+and the attempt to recover of the Journal address from the data of the super block.
+
+.TP
+.B
+\-s blocksize \-n blocknumber
+with this options you can select the backup superblock.
+.B
+blocksize
+can be 1024, 2048 or 4096.
+.B
+blocknumber
+is the block number of the backup superblock this depends on the block size. Use the same values as with "fsck" or "debugfs"
+or use the output of "mkfs -n .." to determine the correct value.
+
+Use the options necessarily in the order
+.B
+"\-s ... \-n ..."
+
+.TP
+.B
+\-c
+This will attempt to find the journal using the data of the superblock.
+Can help if the first inode blocks of the file system are damaged.
+
+
+
.PP
.B
Time Options:
@@ -257,7 +292,7 @@ n
is the number of seconds since 1970-01-01 00:00:00 UTC. This time information can you find in many prints of ext4magic, and you can it produce on the console with the command "date" and also insert directly in the ext4magic command line.
.B
--a $(date -d "-3day" +%s) -b $(date -d "-2day" +%s)
+\-a $(date \-d "\-3day" +%s) \-b $(date \-d "\-2day" +%s)
this example set "after=now-36h" and "before=now-24h"
@@ -279,7 +314,7 @@ or in the print of the Inode content.
.PP
.B
-File-, IN- and OUT-Options:
+File\-, IN\- and OUT\-Options:
With these options group, you select the filesystem, and other optional file input and output for control of ext4magic.
.TP
.B
@@ -398,6 +433,20 @@ will created. The maximum ist the extension "
single files also can recovered, possible search with time-stamps or transaction number.
+.B
+(new 0.2.1):
+Starts this function from the root directory the first stage of the magic functions will follow.
+
+This starts
+.B
+"lost directory search"
+and
+.B
+"lost file search"
+and recovers all the deleted inode that can not be assigned to a file name.
+These files you can find in the directories MAGIC-1 and MAGIC-2
+
+
.TP
.B
\-R
@@ -412,13 +461,13 @@ This recovers all deleted and all undeleted files, and it's possible to recover
In completely deleted directories the behavior "
.B
--R
+\-R
" and "
.B
--r
+\-r
" is identical. The difference is there only the complete recover of all directories with option "
.B
--R
+\-R
".
You can also restore individual files with time options or a transaction number.
@@ -428,10 +477,10 @@ You can also restore individual files with time options or a transaction number.
\-Q
This is a optional high quality Option for recover and only impact with "
.B
--r
+\-r
" and "
.B
--R
+\-R
". Without this option, any valid file name restored from the directories and you can set the "
.B
before
@@ -444,7 +493,7 @@ or some files created with wrong content. You have to check the files and find b
With option "
.B
--Q
+\-Q
" works ext4magic more accurately, and can avoid such false and duplicate files. This requires old data blocks of the directories in the Journal. You will not find of all directories those old blocks in the Journal. Only directories in which files have been previously created or deleted, but not of directories in which no change has been a long time. You should set the time stamp "
.B
before
@@ -453,7 +502,7 @@ before
.PP
.B
For all recover cases
-ACL and extended attribute can not recovered in the current version.
+ACL, SEL and other extended attribute can not recovered in the current version.
The output starts at line with a string "--------" before the recovered file name. This is a sign of successful recover. Are not enough permissions to write the recovered files, then you will see there some "x" in the string.
@@ -469,17 +518,17 @@ Check in any case, all the recoverd files before you use them.
Print the content of a Inode, there are some possibilities.
.B
- # ext4magic /dev/sda3 -f /
+ # ext4magic /dev/sda3 \-f /
.B
- # ext4magic /dev/sda3 -I 2
+ # ext4magic /dev/sda3 \-I 2
the output is the actual filesystem root Inode. In first example input the pathname, second example Inode 2 is also the root directory
.B
- # ext4magic /tmp/filesystem.iso -f / -T -x
+ # ext4magic /tmp/filesystem.iso \-f / \-T \-x
use filesystem image "/tmp/filesystem.iso", search and print all transactions of the Block which included the root Inode, and print all differend
Inode. Inclusiv the blocklist off the data blocks. If it's a directory, then print also for each individual Inode the content of the directory.
@@ -487,7 +536,7 @@ Inode. Inclusiv the blocklist off the data blocks. If it's a directory, then pri
.B
- # ext4magic /tmp/filesystem.iso -j /tmp/journal.backup -I 8195 -t 182
+ # ext4magic /tmp/filesystem.iso \-j /tmp/journal.backup \-I 8195 \-t 182
Use filesystem image "/tmp/filesystem.iso" and read from external Journal in file "/tmp/journal.backup" and
print the content of the Inode number 8195 from the journal transaction number 182
@@ -495,7 +544,7 @@ print the content of the Inode number 8195 from the journal transaction number 1
.B
- # ext4magic /dev/sda3 -f user1/Documents -a $(date -d "-3 day" +%s) -b $(date -d "-2 day" +%s)
+ # ext4magic /dev/sda3 \-f user1/Documents \-a $(date \-d "\-3 day" +%s) \-b $(date \-d "\-2 day" +%s)
print a undeleded Inode for pathname "user1/Documents" two to three days back. If it's a directory, then also the content of this directory.
If can not found the old directory blocks in Journal, the directory content would be the actual from filesystem.
@@ -505,27 +554,27 @@ If can not found the old directory blocks in Journal, the directory content woul
Examples of simple Recover
.B
- # ext4magic /dev/sda3 -r
+ # ext4magic /dev/sda3 \-r
try to restore all files deleted last 24 hours. Write in directory "./RECOVERDIR/"
.B
- # ext4magic /dev/sda3 -M -d /home/recover
+ # ext4magic /dev/sda3 \-M \-d /home/recover
try multi-stage recover of all files after the filesystem is deleted with a "rm -rf *" . Write the files to "/home/recover". (on ext4 : in this version skipped the last step.)
.B
- # ext4magic /dev/sda3 -RQ -f user1/Dokuments -a 1274210280 -b 1274211280 -d /mnt/testrecover
+ # ext4magic /dev/sda3 \-RQ \-f user1/Dokuments \-a 1274210280 \-b 1274211280 \-d /mnt/testrecover
try to restore the directory tree "user1/Dokuments/". The "-b" timestamp you must set just before deleting files, the "-a" timestamp prevents found old file versions. This will only work well, if you've there created or deleted files bevor the "-b" timestamp. Write in directory "/mnt/testrecover/"
.B
- # ext4magic /home/filesystem.iso -Lx -f user1 | grep "jpg" > ./tmpfile
+ # ext4magic /home/filesystem.iso \-Lx \-f user1 | grep "jpg" > ./tmpfile
.B
- # ext4magic /home/filesystem.iso -i ./tmpfile -r -d /mnt/testrecover
+ # ext4magic /home/filesystem.iso \-i ./tmpfile \-r \-d /mnt/testrecover
try to restore only all deleted files from directory tree "user1/", and have "jpg" in filename. (last 24 hour) and write to "/mnt/testrecover" - use a temporary file "./tmpfile" for a list of filenames.
@@ -534,7 +583,7 @@ try to restore only all deleted files from directory tree "user1/", and have "jp
Direct use of the Journal of a currently read-write open filesystem produce reading of bad blocks. Such bad blocks provide program errors and false results. You shall therefore never use the Journal of such a read-write open file system directly.
Should it be necessary to use a mounted file system, create a copy of the file system journal and used the option
.B
--j
+\-j
.SH AUTHOR