Switch to full style
Anything related to computer forensics (new section!)
Post a reply

Help with NAS disaster

December 24th, 2015, 14:34

Hello,

We are very worried about a very probably data lost. We have a NAS emc celerra NS20 (old). The NAS is configured with 6 raid 5 groups. One of this raid arrays become faulted and some folders cant be read now.
This raid 5 array has 2 disks faulted (very bad, i know). One of these was faulted since 2013, the other since yesterday. So, i think the only way to bring data back is recovering the data of this last faulted disk. Is this right?
We bring this disk to a recovery data service and said us that surface is scratched and data is unrecoverable. I'll attach an image of the surface in 5 minutes so you can give me your opinion.
I know that 100% of data is impossible to recover, but maybe we can get an image with bad sectors included, mount this image in a good condition disk and recover the array (with errors and corrupted data of course).
The problem is i dont understand completely the data structure over this array. I know that two luns was assigned to this raid and are offline. dont know if we can bring this luns online with errors, or maybe one of two. i really appreciate some light with this.

Thanks.

Re: Help with NAS disaster

December 24th, 2015, 14:36

Last disk faulted surface.
Attachments
IMG-20151224-WA0006.jpg

Re: Help with NAS disaster

December 28th, 2015, 10:37

Platter has some decent damage in there, how much were you willing to spend on that recovery process ?

Re: Help with NAS disaster

December 29th, 2015, 5:21

DRUG wrote:Platter has some decent damage in there, how much were you willing to spend on that recovery process ?


The data stored in there is quite important. First of all i would like to know if its possible to recover some data. Some expert said me that all data is unrecoverable because head will be damaged when try to read damaged surface. Is that true?

Thanks.

Re: Help with NAS disaster

December 29th, 2015, 5:35

borjacc wrote:
DRUG wrote:Platter has some decent damage in there, how much were you willing to spend on that recovery process ?


The data stored in there is quite important. First of all i would like to know if its possible to recover some data. Some expert said me that all data is unrecoverable because head will be damaged when try to read damaged surface. Is that true?

Thanks.


yes, this is true every time head hit the damage area it will be gone.

Re: Help with EMC NAS recovery

December 29th, 2015, 8:11

borjacc wrote:We have a NAS emc celerra NS20 (old)...
We bring this disk to a recovery data service and said us that surface is scratched and data is unrecoverable.

What's the drive model?
To me it looks like FC or SAS. If so, then chances are slim to none.

If necessary, I can help with remote recovery from this EMC NAS using the image of the drive failed in 2013, but you can guess the quality of results.

Re: Help with EMC NAS recovery

December 29th, 2015, 10:00

Dmitri wrote:
borjacc wrote:We have a NAS emc celerra NS20 (old)...
We bring this disk to a recovery data service and said us that surface is scratched and data is unrecoverable.

What's the drive model?
To me it looks like FC or SAS. If so, then chances are slim to none.

If necessary, I can help with remote recovery from this EMC NAS using the image of the drive failed in 2013, but you can guess the quality of results.


The drive is Seagate cheetah fc from 2008 with sca 40 pins.
Do you have experience with emc nas?

Re: Help with EMC NAS recovery

December 30th, 2015, 12:45

borjacc wrote:The drive is Seagate cheetah fc from 2008 with sca 40 pins.
Then it's a death sentence, unfortunately.
Also, if other drives were purchased at the same time with this one, I'd recommend to consider them unreliable. There's a non-zero chance they may fail the same way, as the drive on photo.

borjacc wrote:Do you have experience with emc nas?
Yes, and quite extensive one, despite all the acquisitions EMC made previously.
Please check your PM.

Re: Help with EMC NAS recovery

December 31st, 2015, 14:30

borjacc wrote:
Dmitri wrote:
borjacc wrote:We have a NAS emc celerra NS20 (old)...
We bring this disk to a recovery data service and said us that surface is scratched and data is unrecoverable.

What's the drive model?
To me it looks like FC or SAS. If so, then chances are slim to none.

If necessary, I can help with remote recovery from this EMC NAS using the image of the drive failed in 2013, but you can guess the quality of results.


The drive is Seagate cheetah fc from 2008 with sca 40 pins.
Do you have experience with emc nas?


Sir ,
You Are Talking About One Of the Best RAID/NAs Experts in The World

Re: Help with NAS disaster

December 31st, 2015, 14:32

borjacc wrote:Last disk faulted surface.


Well,
0 to 5 Heads Can Definately Be Imaged Leaving The Last Top Head [ Assuming its The Only One Defective ] .But It Would Be a Task To Clean Wipe All Other Platters due to Top Platter Debris Scattered All Across .

Re: Help with NAS disaster

December 31st, 2015, 18:18

Amarbir wrote:
borjacc wrote:Last disk faulted surface.


Well,
0 to 5 Heads Can Definately Be Imaged Leaving The Last Top Head [ Assuming its The Only One Defective ] .But It Would Be a Task To Clean Wipe All Other Platters due to Top Platter Debris Scattered All Across .



I don't agree with this at all! and FC with media damage and do selective cloning?!?!?! it's no going to happen, if the top surface has that damage, for sure the other surfaces are fubar IMHO

Re: Help with NAS disaster

January 5th, 2016, 6:58

hdd_sand wrote:
Amarbir wrote:
borjacc wrote:Last disk faulted surface.


Well,
0 to 5 Heads Can Definately Be Imaged Leaving The Last Top Head [ Assuming its The Only One Defective ] .But It Would Be a Task To Clean Wipe All Other Platters due to Top Platter Debris Scattered All Across .



I don't agree with this at all! and FC with media damage and do selective cloning?!?!?! it's no going to happen, if the top surface has that damage, for sure the other surfaces are fubar IMHO


I also agree that I don't agree with this. Sorry Amarbir.
Post a reply