Recover data after quick removing

StorCenter ix2-200 Network Storage
Post Reply
korisk
Posts: 2
Joined: Sat Jan 10, 2015 10:56 am

Recover data after quick removing

Post by korisk » Sat Jan 10, 2015 11:01 am

Hi!
Occasionally I activated "Factory Reset" option with quickly removing data.
Now i want return my data back.
I have a root ssh access to the Iomega ix2-200-TIJ5Y5.
So, please, give me an advice what should i do to recover data.

Thanx.

Mijzelf
Posts: 6224
Joined: Mon Jun 16, 2008 10:45 am

Re: Recover data after quick removing

Post by Mijzelf » Sat Jan 10, 2015 12:58 pm

That will be hard. The used filesystem doesn't have a 'undelete' option. Yet it might be possible to use extundelete, but you'll have to connect the disk to a Linux system, and assemble the logical volumes. (search the forum for a how-to on mounting the disk).

If that is too complicated, you could try PhotoRec, but you'll loose all metadata (filename, timestamp, ...)

korisk
Posts: 2
Joined: Sat Jan 10, 2015 10:56 am

Re: Recover data after quick removing

Post by korisk » Mon Jan 12, 2015 5:31 pm

Mijzelf wrote:That will be hard. The used filesystem doesn't have a 'undelete' option. Yet it might be possible to use extundelete, but you'll have to connect the disk to a Linux system, and assemble the logical volumes. (search the forum for a how-to on mounting the disk).
Thank you.

Is it possible to know which commands were used for removing data?

Mijzelf
Posts: 6224
Joined: Mon Jun 16, 2008 10:45 am

Re: Recover data after quick removing

Post by Mijzelf » Mon Jan 12, 2015 10:08 pm

Theoretically yes, but in practice not. I think it's either the moral equivalent of 'rm -rf /path/to/mountpoint/' or the volume is simply formatted.

Post Reply