undeleting with ntfsundelete

Question

trying to undelete some files using ntfsundelete:

sudo ntfsundelete /dev/sda1 -v -S 300m-20g -p 100 -o /mnt/bigboy/ntfsundelete/

but I am getting:

You must specify exactly one device.

as far as I can see, I am specifying the device I want to restore files from, and the location of the files.

What am I getting wrong?

Take a look at this, http://unix.stackexchange.com/a/40953/14349 I would have commented but I don't have the privilege level.

jokerdino · Accepted Answer · 2012-06-19 11:45:48Z

up vote 1 down vote accepted

It seems like the syntax needs to be ntfsundelete [options] device. So your example should look like this:

sudo ntfsundelete -v -S 300m-20g -p 100 -o /mnt/bigboy/ntfsundelete/ /dev/sda1

This worked for me, although I didn't specify the output -o. I just let it dump the data to the directory I was currently in.

edited Jun 19 '12 at 11:45

jokerdino♦
16.1k855140

answered Jun 19 '12 at 10:33

Garrett Fogerlie
1407

1 Answer