File extundelete.1 of Package extundelete

Overview Repositories Revisions Requests Users Attributes Meta

File extundelete.1 of Package extundelete

.\"                                      Hey, EMACS: -*- nroff -*-
.\" First parameter, NAME, should be all caps
.\" Second parameter, SECTION, should be 1-8, maybe w/ subsection
.\" other parameters are allowed: see man(7), man(1)
.TH EXTUNDELETE 1 "2013-01-05" "extundelete 0.2.4" "Linux User's Manual"
.\" Please adjust this date whenever revising the manpage.
.\"
.\" Some roff macros, for reference:
.\" .nh        disable hyphenation
.\" .hy        enable hyphenation
.\" .ad l      left justify
.\" .ad b      justify to both left and right margins
.\" .nf        disable filling
.\" .fi        enable filling
.\" .br        insert line break
.\" .sp <n>    insert n+1 empty lines
.\" for manpage-specific macros, see man(7)
.SH NAME
extundelete \- undelete files from an ext3 or ext4 partition.

.SH SYNOPSIS
.B extundelete
.RI [ options ]\  device-file
.br

.SH DESCRIPTION
.PP
.\" TeX users may be more comfortable with the \fB<whatever>\fP and
.\" \fI<whatever>\fP escape sequences to invode bold face and italics,
.\" respectively.
\fBextundelete\fP is a utility that can recover deleted files from an
ext3 or ext4 partition.
.br
extundelete uses the information stored in the partition's journal to
attempt to recover a file that has been deleted from the partition.
.br
There is no guarantee that any particular file will be able to be
undeleted, so always try to have a good backup system in place, or at
least put one in place after recovering your files!

.SH OPTIONS
.TP
.B \-\-version
Prints the version number of extundelete.

.TP
.B \-\-help
Print a brief usage summary for extundelete.

.TP
.B device-file
Name of the partition that has deleted files, such as /dev/sda3.
.br
Could also be the file name of a copy of the partition, such as that
made with dd.

.TP
.B \-\-superblock
Prints information about the filesystem from the superblock.

.TP
.B \-\-journal \-\-superblock
Prints information about the journal from the journal's superblock.

.TP
.BI \-\-inode\  #
Prints the information from the inode number of the filesystem given,
such as "\-\-inode 2".

.TP
.BI \-\-block\  #
Prints the contents of the block, called as "\-\-block 9652".

.TP	
.BI \-\-restore\-file\  path/to/deleted/file
Attempts to restore the file which was deleted at the given filename,
called as "\-\-restore-file dirname/filename".

.TP
.BI \-\-restore\-inode\  #
Used to restore inodes by number, called as "\-\-restore-inode 2569".
.br
Also accepts a list of inodes separated by only commas, such as
"\-\-restore-inode 2569,5692,6925".

.TP
.BI \-\-restore\-files\  filename
Restores a list of files. First, construct a list of files in the same
style as would be used in the \-\-restore\-file option, and save it to
the file "filename".
.br
Then, this option may be used to attempt to restore those files with a
single call to extundelete.
.br
This form also reduces redundancy from multiple calls parsing the
journal multiple times.

.TP
.B \-\-restore\-all
Restores all files possible to undelete to their names before deletion,
when possible.
Other files are restored to a filename like "file.NNNN".

.TP
.BI \-\-restore\-directory\  path/of/directory
Restores all files possible to link to specified directory to their
names before deletion, when possible.

.TP
.BI \-j\  journal_dev
Specifies the device that is the external journal of the file system.

.TP
.BI \-b\  block_number
Specifies the block number of the backup superblock to be used when
opening the file system.

.TP
.BI \-B\  block_size
Specifies the block size of the partition to be used when opening the
file system.

.TP
.BI \-\-before\  date
Only restore files deleted before the date specified, which should be in
the form of the number of seconds since the UNIX epoch.
Use a shell command like
.br
$ date \-d "Aug 1 9:02" +%s
.br
to convert a human-readable date to the proper format. The conversion
from the number of seconds to a readable format may be found by using
either of the following:
.br
$ date \-d@1234567890
.br
$ perl \-le "print scalar localtime 1234567890"

.TP
.BI \-\-after\  date
Only restore files deleted after the date specified, which should be in
the form of the number of seconds since the UNIX epoch.
.br
See the notes for the \-\-before option for more information.

.TP
.B \-\-log 0
Run in quiet mode. Output as little as possible.

.TP
.BI \-\-log\  filename
Log all output to the filename specified.

.TP
.BI \-\-log\ info [=x] ,warn [=y] ,error [=z]
Log information according to severity level. If only the level name is
given without the equality sign, log messages with that level to the
console. If the value after the equality is 0, discard messages with
that level. Otherwise, the value is treated as a filename, and messages
with the specified level will be logged to that file. You may specify
the log output to any or all of the severity levels. The defaults, which
will be used if not specified, are equivalent to --log warn,error.

.SH SEE ALSO
.BR photorec (1),
.BR testdisk (1),
.BR foremost (1)

.SH AUTHOR
extundelete was written by Nic Case <number9652@users.sourceforge.net>
.br
Copyright (C) 2009, 2010, 2011, 2012, 2013

.PP
This manual page was written by Elías Alejandro Año Mendoza <ealmdz@gmail.com>,
for the Debian project (and may be used by others).

Places

File extundelete.1 of Package extundelete

Places