- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - Linux
- >
- deleted file
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-16-2010 06:53 PM
тАО11-16-2010 06:53 PM
deleted file
in.tftpd 5281 root cwd DIR 251,0 0 2223873 /tftpboot (deleted)
Hi there
I'm trying to recover the above file.
root@pxe001bri:~# cp /proc/5281/fd/4 myfile.saved
cp: cannot open `/proc/5281/fd/4' for reading: No such device or address
root@pxe001bri:~# ls -la /proc/5281/fd/4
lrwx------ 1 root root 64 2010-11-16 21:34 /proc/5281/fd/4 -> socket:[28748]
Anyone knows how to recover from that ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-17-2010 12:06 AM
тАО11-17-2010 12:06 AM
Re: deleted file
Why would you want to copy a socket?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-17-2010 05:43 AM
тАО11-17-2010 05:43 AM
Re: deleted file
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-17-2010 05:57 AM
тАО11-17-2010 05:57 AM
Re: deleted file
Why ask in an HP-UX forum?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-17-2010 06:06 AM
тАО11-17-2010 06:06 AM
Re: deleted file
> in.tftpd 5281 root cwd DIR 251,0 0 2223873 /tftpboot (deleted)
Note that the line says "cwd" and "DIR". /tftpboot is not a file, but a directory. It is the current working directory of process 5281. Looks like this is a TFTP server process, started by inetd.
> # ls -la /proc/5281/fd/4
> lrwx------ 1 root root 64 2010-11-16 21:34 /proc/5281/fd/4 -> socket:[28748]
This indicates /proc/5281/fd/4 is a socket, not a regular file. It probably represents a network connection to a TFTP client, or perhaps a local connection to the syslog service. I'd say copying it would not be meaningful.
When the /tftpboot directory was deleted, one of two things may have happened: either the directory was empty, or the deletion command was given with the recursive option and it deleted all the files and sub-directories in the directory.
Rebuilding the directory itself is simple:
mkdir /tftpboot
But because there are no files currently open in the /tftpboot directory, any files that might have been there are now gone.
Look for backups if you want to recover them.
(I think a TFTP server would only hold regular files open while a TFTP GET or PUT operation is ongoing; it would have no reason to hold any files open beyond that.)
MK