Created
June 28, 2012 22:41
-
-
Save englishm/3014435 to your computer and use it in GitHub Desktop.
ext3grep deletion even histogram
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| root@datarecovery:~# ext3grep /dev/sdb3 --histogram=dtime --after 1335555802 --before 1335555805 | |
| Running ext3grep version 0.10.1 | |
| Only show/process deleted entries if they are deleted on or after Fri Apr 27 15:43:22 2012 and before Fri Apr 27 15:43:25 2012. | |
| Number of groups: 156 | |
| Minimum / maximum journal block: 1544 / 35884 | |
| Loading journal descriptors... sorting... done | |
| The oldest inode block that is still in the journal, appears to be from 1335458082 = Thu Apr 26 12:34:42 2012 | |
| Journal transaction 19354469 wraps around, some data blocks might have been lost of this transaction. | |
| Number of descriptors in journal: 30581; min / max sequence numbers: 19354439 / 19359432 | |
| Only show/process deleted entries if they are deleted on or after 1335555802 and before 1335555805. | |
| Only showing deleted entries. | |
| Fri Apr 27 15:43:22 2012 1335555802 0 | |
| Fri Apr 27 15:43:23 2012 1335555803 1575 =================================================== | |
| Fri Apr 27 15:43:24 2012 1335555804 3029 ==================================================================================================== | |
| Fri Apr 27 15:43:25 2012 1335555805 | |
| Totals: | |
| 1335555802 - 1335555804 4604 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment