linux adts 解析工具,Linux环境下几个好用的文件恢复工具

昨日看到了相关的文件恢复工具的介绍，多多少少感觉不怎么全面。搜索了一下，还真不少，列出来共享一下前人的成果：

1.testdisk

Partition scanner and disk recovery tool

其实这是一个Ubuntu里的工具包，包里包括了两部分：

TestDisk checks the partition and boot sectors of your disks. It is very useful in recovering lost partitions. It works with :

* DOS/Windows FAT12, FAT16 and FAT32

* NTFS ( Windows NT/2K/XP )

* Linux Ext2 and Ext3

* BeFS ( BeOS )

* BSD disklabel ( FreeBSD/OpenBSD/NetBSD )

* CramFS (Compressed File System)

* HFS and HFS+, Hierarchical File System

* JFS, IBM's Journaled File System

* Linux Raid

* Linux Swap (versions 1 and 2)

* LVM and LVM2, Linux Logical Volume Manager

* Netware NSS

* ReiserFS 3.5 and 3.6

* Sun Solaris i386 disklabel

* UFS and UFS2 (Sun/BSD/...)

* XFS, SGI's Journaled File System

.

PhotoRec is file data recovery software designed to recover lost pictures from digital camera memory or even Hard Disks. It has been extended to search also for non audio/video headers. It searches for following files and is able to undelete them:

* Sun/NeXT audio data (.au)

* RIFF audio/video (.avi/.wav)

* BMP bitmap (.bmp)

* bzip2 compressed data (.bz2)

* Source code written in C (.c)

* Canon Raw picture (.crw)

* Canon catalog (.ctg)

* FAT subdirectory

* Microsoft Office Document (.doc)

* Nikon dsc (.dsc)

* HTML page (.html)

* JPEG picture (.jpg)

* MOV video (.mov)

* MP3 audio (MPEG ADTS, layer III, v1) (.mp3)

* Moving Picture Experts Group video (.mpg)

* Minolta Raw picture (.mrw)

* Olympus Raw Format picture (.orf)

* Portable Document Format (.pdf)

* Perl script (.pl)

* Portable Network Graphics (.png)

* Raw Fujifilm picture (.raf)

* Contax picture (.raw)

* Rollei picture (.rdc)

* Rich Text Format (.rtf)

* Shell script (.sh)

* Tar archive (.tar )

* Tag Image File Format (.tiff)

* Microsoft ASF (.wma)

* Sigma/Foveon X3 raw picture (.x3f)

* zip archive (.zip)

2.recover

Undelete files on ext2 partitions

Recover automates some steps as described in the ext2-undeletion howto. This means it seeks all the deleted inodes on your hard drive with debugfs. When all the inodes are indexed, recover asks you some questions about the deleted file. These questions are:

* Hard disk device name

* Year of deletion

* Month of deletion

* Weekday of deletion

* First/Last possible day of month

* Min/Max possible file size

* Min/Max possible deletion hour

* Min/Max possible deletion minute

* User ID of the deleted file

* A text string the file included (can be ignored)

.

If recover found any fitting inodes, it asks to give a directory name

and dumps the inodes into the directory. Finally it asks you if you

want to filter the inodes again (in case you typed some wrong

answers).

Note that recover works only with ext2 filesystems - it does not support ext3.

http://recover.sourceforge.net/linux/recover/

3.ext3grep

Tool to help recover deleted files on ext3 filesystems

ext3grep is a simple tool intended to aid anyone who accidentally deletes a file on an ext3 filesystem, only to find that they wanted it shortly thereafter.

http://code.google.com/p/ext3grep/

4.extundelete

utility to recover deleted files from ext3/ext4 partition

extundelete uses the information stored in the partition's journal to attempt  to recover a file that has been deleted. There is no guarantee that any particular file will be able to be undeleted.

http://extundelete.sourceforge.net/

这下好了ext2、ext3、ext4这常用的分区都包含了。