Recognized options of extundelete 0.2.0

Below is an explanation of the command-line options recognized by extundelete 0.2.0.

--version

Prints the version number of extundelete.

--help

Prints a brief usage summary for extundelete.

Partition name

Name of the partition that has deleted files, such as /dev/sda3. Could also be the file name of a copy of the partition, such as that made with dd.

--superblock

Prints information about the filesystem from the superblock.

--journal --superblock

Prints information about the journal from the journal's superblock.

--inode #

Prints the information from the inode number of the filesystem given, such as "--inode 2".

--block #

Prints the contents of the block, called as "--block 9652".

--restore-file path/to/deleted/file

Attemps to restore the file which was deleted at the given filename, called as "--restore-file dirname/filename".

--restore-inode #

Used to restore inodes by number, called as "--restore-inode 2569". Also accepts a list of inodes separated by only commas, such as "--restore-inode 2569,5692,6925".

--restore-files filename

Restores a list of files. First, construct a list of files in the same style as would be used in the --restore-file option, and save it to the file "filename". Then, this option may be used to attempt to restore those files with a single call to extundelete. This form also reduces redundancy from multiple calls parsing the journal multiple times.

--restore-all

Restores all files possible to undelete to their names before deletion, when possible. Other files are restored to a filename like "file.NNNN".

--restore-directory path/of/directory

Restores all files possible to link to specified directory to their names before deletion, when possible.

-j journal_dev

Specifies the device that is the external journal of the file system.

-b block_number

Specifies the block number of the backup superblock to be used when opening the file system.

-B block_size

Specifies the block size of the partition to be used when opening the file system.

--before date

Only restore files deleted before the date specified, which should be in the form of the number of seconds since the UNIX epoch. Use a shell command like
$ date -d "Aug 1 9:02" +%s
to convert a human-readable date to the proper format. The conversion from the number of seconds to a readable format may be found by using either of the following:
$ date -d@1234567890
$ perl -le "print scalar localtime 1234567890"

--after date

Only restore files deleted after the date specified, which should be in the form of the number of seconds since the UNIX epoch. See the notes for the --before option for more information.