{"id":315,"date":"2006-02-24T13:39:02","date_gmt":"2006-02-24T18:39:02","guid":{"rendered":"http:\/\/linode.siwko.org\/wordpress\/?p=315"},"modified":"2006-02-24T13:39:02","modified_gmt":"2006-02-24T18:39:02","slug":"another-drive-image-recovery","status":"publish","type":"post","link":"https:\/\/www.siwko.org\/wordpress\/?p=315","title":{"rendered":"Another Drive Image Recovery&#8230;"},"content":{"rendered":"<p><html><br \/>\n  <head><\/p>\n<style type=\"text\/css\">\n      <!--\n        .warning { color: #cc5555 }\n        .invert { color: #ffffff; background-color: #000000 }\n        .highlight { color: #000000; background-color: #ffffaa }\n        .notice { color: #1f8f1f }\n        h1 { font-family: monospaced; color: #8f8f2f }\n      -->\n    <\/style>\n<p>        &#8230;<br \/>\n  <\/head><br \/>\n  <body><br \/>\n    &#8230;this time from rm on an ext3 file system.  I thought I was removing a<br \/>\n    symbolic link.  When rm didn&#8217;t return after 5 seconds I looked and<br \/>\n    realized I had deleted a 60G NTFS image file containing important data.  I<br \/>\n    pulled the plug on the server.  When I brought the system back up I failed<br \/>\n    to stop the mount so some cleanup took place.  I wrote down the orphaned<br \/>\n    inode number.  It turned out to belong to the file I wanted to recover.<\/p>\n<p>I bought a 200G USB disk and copied the whole 160G partition with the ext3<br \/>\n    file system which contained the 60G NTFS image file.  The operation took<br \/>\n    50 hours over a USB 1.1 link.<\/p>\n<p>With debugfs I was able to determine that the direct, indirect and double<br \/>\n    indirect blocks had been zeroed.  The triple indirect block points to 13<br \/>\n    double indirect blocks.<br \/>\n  <\/body><br \/>\n<\/html><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8230; &#8230;this time from rm on an ext3 file system. I thought I was removing a symbolic link. When rm didn&#8217;t return after 5 seconds I looked and realized I had deleted a 60G NTFS image file containing important data. I pulled the plug on the server. When I brought the system back up I [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-315","post","type-post","status-publish","format-standard","hentry","category-roller"],"_links":{"self":[{"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/315"}],"collection":[{"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=315"}],"version-history":[{"count":0,"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/315\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=315"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=315"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.siwko.org\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=315"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}