Tyring to recover Store Centre 150D

[brand1068]

Hi all,

I'm trying to recover data from an Iomega Store center 150d

4 x 250 GB disk on Raid 5

Currently i'm scanning the 4 drives in UFS Explorer having created a Softraid Partition.

Scanning using 4kb stripe - just scanning the 230GB partions on each drive - does that sound about right or should I scan the full disks ?

Chris

[dmarques]

I really don't think it will use a 4Kb stripe size, but it could be of course.

You have to check what is the file system. Then find the header (if exists), then find order and stripe size.
Are you sure it's a software RAID instead of hardware?

[brand1068]

Whats the best way of doing that ? I assumed that the order was the same as they came out of the unit ?

Chris

[dmarques]

Probably is.

What tools are you using? Do you know how to check file system?

[ici_lemmy]

Probably is... But you have to check because in the case I handled, it was not always true.
As dmarques said, you have to know a little about FS to find order and stip size.

[hddguy]

Look at sector 8225280 on each disk in a hex editor. What do you see there?

I have seen these configured as RAID0 with 4KB stripe size. Also, some of these units do not have 'direct' partitions, so even if configured right you may need to scan for the start of the partition.

I guess is XFS system, write what you see at the sector I said.

[CraigL]

Is it the Iomega NAS units that sometimes provide a disk ID in some of the early sectors? Seem to remember this, tho havent seen one for a while...

[hddguy]

Iomega stores such info (I believe) more to the end of the disk.

Unless you mean the small '.conf' file that can be accessed from the EXT volumes, I think this is the Falconstor NAS units..

[brand1068]

I'm finding files now - but some of them appeared fragmented.

sounds like the disks in the wrong order ?

Chris

[dmarques]

What do you exacly mean by fragmented? Can you read just a part of them, like in a JPG file? Are you checking RAW files or files with filenames?

[networks]

The raid set may have had a bad drive and re-synced the hot spare if one was used. When I see data but the files say corrupted its either the stripe size is off or the data has been shifted due to a re-sync that got interrupted before it completed for various reasons. lots of work to resolve that type of problem. I normally image the drives to get the hardware out of the picture and also lets me know the health of each drive ie sectors that don't read other errors.