Can deleted files on a NetRS be recovered? (internal)
Can deleted files on a NetRS be recovered using the receiver’s web interface or programmatic interface?
No.
Deleting files on a NetRS is equivalent to using the "rm" command in Linux and requires using a Linux program like "ext3grep". This requires removal of the internal flashcard which would void the receiver’s warranty if not performed by a licensed technician.
If you remove files that you wish to recover, DO NOT RECORD ANY MORE DATA ON THE RECEIVER and TURN THE POWER OFF.
Contact the UNAVCO equipment repair facility. Check out the UNAVCO Equipment Repair page for information on requesting repairs and data recovery.
Jim Normandeau worked with Jeff Frymueller to try to recover some files from a NetRS without success because the files were overwritten due to the receiver being left on. Below is Jim’s e-mail explaining the situation to Jeff.
Jeff I’m sorry to report that your data could not be undeleted from the NetRS flashcard. I believe what happened was that the new data files overwrote the deleted files. There is a program called "ext3grep" that allows you to examine and recover deleted files from an ext3 (LINUX) file system. However, in order for it to be successful you need to unmount the file system that contains the deleted files immediately or they could be overwritten (e.g shut off the receiver and don’t turn it back on). What your CF Card looked like was this: This is the directory (200808/a) that should have had deleted files in it:
.-- File type in dir_entry (r=regular file, d=directory, l=symlink) | .-- D: Deleted ; R: Reallocated Indx Next | Inode | Deletion time Mode File name ==========+==========+----------------data-from-inode------+-----------+========= 0 1 d 58627 drwxrwxrwx . 1 3 d 14657 drwxrwxrwx .. 3 4 r 58628 rrw-rw-rw- UV19821200808080000a.T00 4 5 r 58629 rrw-rw-rw- UV19821200808090000a.T00 5 end r 58630 rrw-rw-rw- UV19821200808100000a.T00
However, in a different directory(200807/a) (where I deliberately deleted files as an example) you can see the files that can be recovered.
.-- File type in dir_entry (r=regular file, d=directory, l=symlink) | .-- D: Deleted ; R: Reallocated Indx Next | Inode | Deletion time Mode File name ==========+==========+----------------data-from-inode------+-----------+========= 0 1 d 29314 drwxrwxrwx . 1 3 d 58625 drwxrwxrwx .. 2 3 r 29318 D 1222705677 Mon Sep 29 10:27:57 2008 rrw-rw-rw- UV19821200807180000a.T00.A 3 4 r 29315 D 1222705677 Mon Sep 29 10:27:57 2008 rrw-rw-rw- UV19821200807100000a.T00 4 5 r 29316 D 1222705677 Mon Sep 29 10:27:57 2008 rrw-rw-rw- UV19821200807150000a.T00 5 6 r 29317 D 1222705677 Mon Sep 29 10:27:57 2008 rrw-rw-rw- UV19821200807160000a.T00 6 end r 29318 D 1222705677 Mon Sep 29 10:27:57 2008 rrw-rw-rw- UV19821200807180000a.T00