Snap 2200

markm · 11-21-2008, 08:26 AM

Hi

A customer has just brought us a 2200 that went wrong. they removed the drives and mounted them on windows thinking they could get the data back.

LBA 0 of both drives now contain empty Windows Partition tables. So does anyone know the start position of the Data area on these drives ?

It is configured as RAID 0 as the data is different on the drives.

Mark

blue68f100 · 11-21-2008, 12:20 PM

You best bet would be to contact Douglas with Front Line Recovery service, 1-866-279-2985. Since the HD were in raid 0 you may be SOL. If windows did not overwrite/format the HD he may be able to do it. Since your in the UK, you may need to contact the Snap Dealer and see if they know of anyone that can recover a SnapOS.. The files system is a heavly modified XFS system. Most recovery services do not have the special custom software needed to do the recovery. Douglas use to work for Quanitum (before SnapAppliance) bousght them in the HD dept. He knows these inside out.

Good luck, to bad you were not in RAID 1 Mirror.

markm · 11-22-2008, 07:44 AM

Thanks for the reply ..

I can work at the File system level, if I can find out where the data start is on the drives. I have found where the stripes are using large text blocks and JPG files, but the data breaks do not correspond so what I'm looking at now is if there are different data start offsets. I've still got my head buried in these disks, but if anyone can point me in the right direction it would really help me have a weekend

The last one I looked at was a 4xxx series with RAID 5 and managed to get all data off it. So it could be that the customer has done more than they said.

Thanks again though.

Mark

blue68f100 · 11-22-2008, 08:05 AM

Snap changed the starting blocks on a couple of OS's. If I recall it's determined by drive size. They took the total blocks divided by 7 or 8. I know the block info is stored in the 4-5% of the HD. This is where the drives fail at. Douglas may be able to help if you can reach him.

markm · 11-23-2008, 02:56 AM

I'm actually getting somewhere with this .. For those that are interested. I think the data partition starts with a signature UFSXImg0

So, looks like it is a UNIX (based) partition. It is at this point where the data starts to differ - up to this point the data is mainly mirrored, but with minor differences - could be intentional could be errors in the system.

I'm still working on the offsets and if I can find any obvious XFS partitions.

Mark

11-21-2008, 08:26 AM	#1
markm Cooling Neophyte Join Date: Nov 2008 Location: UK Posts: 3	Snap 2200 Hi A customer has just brought us a 2200 that went wrong. they removed the drives and mounted them on windows thinking they could get the data back. LBA 0 of both drives now contain empty Windows Partition tables. So does anyone know the start position of the Data area on these drives ? It is configured as RAID 0 as the data is different on the drives. Mark

11-21-2008, 12:20 PM	#2
blue68f100 Thermophile Join Date: Jul 2005 Location: Plano, TX Posts: 3,135	Re: Snap 2200 You best bet would be to contact Douglas with Front Line Recovery service, 1-866-279-2985. Since the HD were in raid 0 you may be SOL. If windows did not overwrite/format the HD he may be able to do it. Since your in the UK, you may need to contact the Snap Dealer and see if they know of anyone that can recover a SnapOS.. The files system is a heavly modified XFS system. Most recovery services do not have the special custom software needed to do the recovery. Douglas use to work for Quanitum (before SnapAppliance) bousght them in the HD dept. He knows these inside out. Good luck, to bad you were not in RAID 1 Mirror. __________________ 1 Snap 4500 - 1.0T (4 x 250gig WD2500SB RE), Raid5, 1 Snap 4500 - 1.6T (4 x 400gig Seagates), Raid5, 1 Snap 4200 - 4.0T (4 x 2gig Seagates), Raid5, Using SATA converts from Andy Link to SnapOS FAQ's http://forums.procooling.com/vbb/showthread.php?t=13820

11-22-2008, 07:44 AM	#3
markm Cooling Neophyte Join Date: Nov 2008 Location: UK Posts: 3	Re: Snap 2200 Thanks for the reply .. I can work at the File system level, if I can find out where the data start is on the drives. I have found where the stripes are using large text blocks and JPG files, but the data breaks do not correspond so what I'm looking at now is if there are different data start offsets. I've still got my head buried in these disks, but if anyone can point me in the right direction it would really help me have a weekend The last one I looked at was a 4xxx series with RAID 5 and managed to get all data off it. So it could be that the customer has done more than they said. Thanks again though. Mark

11-22-2008, 08:05 AM	#4
blue68f100 Thermophile Join Date: Jul 2005 Location: Plano, TX Posts: 3,135	Re: Snap 2200 Snap changed the starting blocks on a couple of OS's. If I recall it's determined by drive size. They took the total blocks divided by 7 or 8. I know the block info is stored in the 4-5% of the HD. This is where the drives fail at. Douglas may be able to help if you can reach him. __________________ 1 Snap 4500 - 1.0T (4 x 250gig WD2500SB RE), Raid5, 1 Snap 4500 - 1.6T (4 x 400gig Seagates), Raid5, 1 Snap 4200 - 4.0T (4 x 2gig Seagates), Raid5, Using SATA converts from Andy Link to SnapOS FAQ's http://forums.procooling.com/vbb/showthread.php?t=13820

11-23-2008, 02:56 AM	#5
markm Cooling Neophyte Join Date: Nov 2008 Location: UK Posts: 3	Re: Snap 2200 I'm actually getting somewhere with this .. For those that are interested. I think the data partition starts with a signature UFSXImg0 So, looks like it is a UNIX (based) partition. It is at this point where the data starts to differ - up to this point the data is mainly mirrored, but with minor differences - could be intentional could be errors in the system. I'm still working on the offsets and if I can find any obvious XFS partitions. Mark

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)