[nSLUG] EXT3 missing log file

Hatem Nassrat hnassrat at gmail.com
Wed Feb 10 10:56:06 AST 2010


On Tue, Feb 9, 2010 at 11:58 AM, Oliver Baltzer <oliver at hytek.org> wrote:
> John Stanton wrote:
>>
>> So the log is now just writing to nowhere(/dev/null)?
[...]
> Looking at the file should not be to difficult. Look around in
> /proc/<PID> you should find the mapped address space for the file in
> there if I am not mistaken.

I came across an article that talks about recovering the inode entries
for deleted open files using e2fsprogs
(http://e2fsprogs.sourceforge.net/):

    http://www.bigsoft.co.uk/blog/index.php/2009/08/12/linux-file-system-recovery-undelete

There was also mentions of people using fsdb, but it seems that its a
BSD utility, not sure.

-- 
Hatem Nassrat



More information about the nSLUG mailing list