In-depth technology research: finding new ways to recover data, accessing firmware, writing programs, reading bits off the platter, recovering data from dust.

Forum rules

Please do not post questions about data recovery cases here (use this forum instead). This forum is for topics on finding new ways to recover data. Accessing firmware, writing programs, reading bits off the platter, recovering data from dust...
Post a reply

Re: RAID Data Recovery - Anyone Beat This?

November 15th, 2008, 6:35

Can you get the settings from the unit or controller, like stripe size? Probably uses backwards parity as it is adaptec. Use only the 2 good disks, add a missing disk place, and work through the orders using the stripe size (if available) from the controller. This should leave you with as little as 6 combinations, build with UFS and perform RAW scan, it can be stopped at around 5 or 10%, then check integrity of data from RAW scan above stripe size. You should be able to tell which order is right by the integrity, then create an image of this order.


Akk this assuming the data has not been overwritten or modified.

Good Luck :D

Re: RAID Data Recovery - Anyone Beat This?

November 15th, 2008, 8:14

Now we have one good, synced disk, one failed with hw problems + off-sync, and one wich is 0-45% equal with the first disk, and 45-100% are the good second disk.

The raid have ext3.

Anyway, i can recover aproximately 70-95%, but now, it depends on the customer.... ;)
(i am waiting for agree the price)

Regards,
Janos

Re: RAID Data Recovery - Anyone Beat This?

November 15th, 2008, 12:03

Let us know how you get off with this :)

Re: RAID Data Recovery - Anyone Beat This?

November 15th, 2008, 20:03

First i need to determine the perfect disk wich is in sync and not overwritten by the other.
Next, i need to determine the strip size, and try to figure out the disk order
(For this of course i need to image the hw failed good content but off-sync hdd.)
If i have the stripe size, the good drive, the halfly off-sync drive, and the overwritten drive, i can assemble the raid, and check the order on the 45-100% part.
If the raid looks good, i can drop the off-sync drive, and copy the image out from 45% to the end.
This part is 55% good raw area. ;)

After this, i will add the off-sync hdd again, and drop the overwrtten one, and copy the 0-45% to the previus saved another area.
This 2 part will make one 55 - ? % good image.
Here comes the FS reconstruction from EXT3.
This is good, because the EXT3 have a lot of superblock, and some in the end of the drive. ;)
If i think, i will end about 70-95% success, of course depend on the off-syncness of the 3rd. hdd....
;)

...and of course on the customer first.
This is not too easy and not cheap process.... :mrgreen:

PS:
I always say, any raid is almost all the cases recoverable!
Usually more than 95% the chance for the successfully dr from raids....

Regars,
Janos
Post a reply