On Linux machine with ext4 filesystem the important file was accidentally removed, size 1-2 Gb. After that, filesystem was used a short time, but the data of file still remains on disk.
The file is modular and is basically a sequence of text pieces, and of particular interest in recovery are the latest pieces of the file.
I have an different version of the file on another computer, I gave taken a snippet of it and
I searched it with binary search (using dd |grep -ova) and found that the interested pieces of the file all are still there. So I have the inode number for my data on a disk.
Simple recovery procedures using several utilities did not succeed.
When reviewed containing directory with debug2fs it turns out that the directory entry is absent and that is why the 'undelete' command in debug2fs was not successful.
So the all interested data is still there, but it is unavailable.
What I'm looking for, is a software that will
- take as entry inode number
- find a specific chain of data to which the specific inode belongs to.
- dump data of a whole found chain of inodes, to which my specified inode(s) belongs to
Are there any ready software utility for that?