1

recovering deleted file held open by apache?

view story
linux-howto

http://unix.stackexchange.com – suppose an apache log file gets deleted but its held open by apache then this is what i am doing. pid=$(lsof | grep text.txt | awk '/deleted/ {print $2}') fd=$(lsof | grep text.txt | awk '/deleted/ {print $4}' | grep -oE "[[:digit:]]{1,}") cp /proc/$pid/fd/$fd directorytobecopied/testfile.txt this is what i am doing to recover the file and put it back where it was. is there any simpler way of doing this because above code doesn't look good. and furthermore how do i know from where the file was deleted(directorytobecopied) so that i don't have to manually ask somebody where the file was loc (HowTos)

Songlist's picture
Submitted by Songlist on 12/20/2012

Stories similar to recovering deleted file held open by apache?

How do I pass this variable below?

This doesn't work:

fname=testfile.txt lsof | awk '/deleted/&&/$fname/ {print $4}' *----no output*

While this works:

lsof | awk '/deleted/&&/testfile.txt/ {print $4}' 3r

I have an hourly hour-long crontab job running with some mtr (traceroute) output every 10 minutes (that is going to go for over an hour prior to it being emailed back to me), and I want to see the current progress thus far.

On Linux, I have used lsof -n | fgrep cron (lsof is similar to BSD's fstat), and it seems like I might have found the file, but it is annotated as having been deleted (a stand

I just shift-deleted some important pdf-files from my dual-boot system. The files were originally on Windows drive, but I deleted them from Ubuntu. I just used Foremost to recover, but it returns more than 1000 files, with numbered-names.

I do this on impulse: deleting spam from an application that I've installed. Now I want it back, (no solid reason). I really believe it has been deleted for good and there's no cache system for this. Let me know if there is a process to find the orgin or the deleted file. I'll keep using my file manager to search my phone for something until I get a better option.

I started downloading a big file and accidently deleted it a while ago. I know how to get its current contents by cping /proc/<pid>/fd/<fd> but since the download is still in progress it'll be incomplete at the time I copy it someplace else.

Can I somehow salvage the file right at the moment the download finishes but before the downloader closes the file and I lose it for good?

how to Securely delete files 3 years 26 weeks ago

Hi all,

It is possible to make a system setting somewhere or install code so that when a file is deleted or moved, regardless of how, ie: using any means a shell cmd or a desktop application, the file is securely deleted?

I typically use gnome desktop and when I delete a file I want to know for certain it has been deleted, erased, all data gone... etc.

I have been deleted the file

rm -rf ./Desktop/myScript.sh

I think it's possible to recover this file because rm command just remove temporarily. How can I recover deleted file on Mac OSX?

Thank you a lot.

When a file is deleted from your computer it is not really deleted. it still exists and it’s possible to recover even if you empty the trash. In this video I demonstrate deleting files and recovering them using Testdisk (Photorec) in Ubuntu. - This will work as long as the space where those files are [...]

I have seen several posts about recovering deleted files, but this situation is different. My wife had a file called Journal.odt in which she kept a lot of important personal information such as special memories about our kids. The other day when she tried to open it in OpenOffice it complained about the format. I had her hit cancel and back out. When I cat the file it is completely empty.