Locating file based on inode

Hi,


I am running fsck and the utility always find issue with this particular file:


Checking the fsroot tree

warning: inode (id 59555291): has the compression bsdflag, but doesn't have the compression xattr

warning: inode (id 59555291): dataless bsd_flag is set, but the compression xattr is missing

Can you help me locate the faulty file?

iMac 21.5″ 4K, macOS 13.3

Posted on May 1, 2023 2:47 AM

Reply
Question marked as Top-ranking reply

Posted on May 1, 2023 6:14 AM

Use the following Terminal command for your inode filename detection and suppress standard error "permission denied" eyestrain, or change the filesystem starting location from / :


find / -inum 59555291  2>/dev/null


If it finds the filename and then appears to hang, you can exit the command with a control-c interrupt. Hard linked files will have the same inode number.

Similar questions

8 replies
Question marked as Top-ranking reply

May 1, 2023 6:14 AM in response to miron.tokarski

Use the following Terminal command for your inode filename detection and suppress standard error "permission denied" eyestrain, or change the filesystem starting location from / :


find / -inum 59555291  2>/dev/null


If it finds the filename and then appears to hang, you can exit the command with a control-c interrupt. Hard linked files will have the same inode number.

May 1, 2023 9:17 AM in response to Luis Sequeira1

Hi,


Thanks for advice. Unfortunately I have not obtained file name, rather getting such output:


ls: com.apple.aned: Operation not permitted

ls: /Library/Caches: Operation not permitted

ls: /System/Library/Templates/Data/private/var/db/oah: Operation not permitted

ls: com.apple.aned: Operation not permitted

ls: /System/Volumes/Data/Library/Caches: Operation not permitted

ls: /System/Volumes/Data/System/Library/Templates/Data/private/var/db/oah: Operation not permitted

ls: Volumes: directory causes a cycle

ls: /System/Volumes/Data/Volumes/.timemachine/X/Y/Z/iMac (X).sparsebundle/bands: Socket is not connected

ls: /System/Volumes/Data/Volumes/.timemachine/X/Y/Z/iMac (X).sparsebundle/mapped: Socket is not connected

ls: fts_read: Socket is not connected


X, Y, Z are generic names for personal folder structure

May 2, 2023 1:59 AM in response to miron.tokarski

Something is amiss.


For example,


ls /Library/Caches


should work, even without prefixing it with "sudo"...


You should try the command that VikingOSX indicated, which in principle does the job better (my bad in not checking the option of using inode in find).

But given the errors you got above, I fear that you may get similar errors with that. Try it, anyway.


It seems that your drive may have permissions and other problems.

Make sure to have an up to date backup.


May 3, 2023 4:11 AM in response to Luis Sequeira1

I have checked my disk after login and via restore mode - both result in:

The volume /dev/rdisk1s1 appears to be OK

File system check exit code is 0


I have also checked all containers using disk utility via restore mode and everything is fine except that one issue with:

warning: inode (id 59555291): has the compression bsdflag, but doesn't have the compression xattr

warning: inode (id 59555291): dataless bsd_flag is set, but the compression xattr is missing


Do you have any other ideas what might be wrong and how to locate this file? Maybe I should run terminal via restore or safe mode?

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Locating file based on inode

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.