I have a a huge amount of data (all of /home) that was deleted, but most of it is in only four files, and I don’t need these four huge files. Whose names I know. I only need all the little files. Whose names I do not know.
With extundelete, I can only recover the whole directory. Unfortunately I have no way of storing the whole directory. (In my case, all I have is a LiveDVD. No other removable media. Nothing. I am currently forced to use sshfs, but the connection can only do 100kB/s, and is disconnected every 24h. Which, when inluding those four huge files, is not even close to enough.
This means that after 24h, I have to reconnect sshfs (actually twice) and restart extundelete. Which means it will start from the beginning. And hence I will already know that the same thing will happen again.
I tried separating by date. But they were nearly all originally copied in the span of about 2 minutes. So that unless it hit it to a few seconds, there is no way to separate it in a way that is useful. Since I can’t find out the original date of those huge files, I can’t do it.
You see, it’s a mess.
And an exclude function, like in rsync (but in any case allowing one to specify more than one file), would make this an easy and quick thing. Such a function would also generally be very useful.
So… can you add such a function? That would be awesome.