[nSLUG] EXT3 missing log file

John Stanton john at stantonnet.org
Tue Feb 9 14:56:47 AST 2010


John Stanton, RHCE
john at stantonnet.org

On 02/09/2010 02:55 PM, Ben Armstrong wrote:
> On Tue, 09 Feb 2010 14:38:22 -0400
> John Stanton<john at stantonnet.org>  wrote:
>> Thanks, So the file has been removed but the process still has it open.
>> Know of anyway to get that file back?or view its contents?
> Short of an exhaustive search of the filesystem it's on, block by
> block, perhaps with a file recovery tool of some kind, no, I don't know
> of any easy way.  And once the process that has the file open is gone,
> those blocks are free for the filesystem to reclaim and use for other
> purposes, so if you want to do any kind of analysis, do it now, before
> the process ends.
> Ben
> --
>   ,-.  nSLUG    http://www.nslug.ns.ca   synrg at sanctuary.nslug.ns.ca
>   \`'  Debian   http://www.debian.org    synrg at debian.org
>    `          [ gpg 395C F3A4 35D3 D247 1387 2D9E 5A94 F3CA 0B27 13C8 ]

More information about the nSLUG mailing list