MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 21 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: RAID recovery - can see folder structure but files corrupted
PostPosted: June 11th, 2010, 2:00 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
Hi

The win 2003 server got power trip and after that unable to start. It has three SCSI hard disks each 36.4GB.

I checked the disks are all physically ok. I managed to image all three hard disks using R-Studio

The user not sure about RAID level, Block Size and order. He remembers that the total capacity of the server was 67.8GB. So it may be either RAID 5 or RAID 0 with one spare hard disk.

I am currently trying to recover data from the image. Without the block size and order parameters, I tried few possible combinations

I tried RAID 0 on R-studio, it did not return any data.

If I create RAID 5 volume with 64 bytes block size and Right Synchronous order I am able to see th folder structure, but when I open the xls, doc, jpeg files it is all corrupted.

When I just scan single DISK 0 image I can also see the folder structure but again all files are corrupted.

What is best way to recover files from these three disk images ?

Any help will be valuable

Cheers
-Jag


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 11th, 2010, 2:58 
Offline

Joined: July 18th, 2006, 3:05
Posts: 7476
Location: ITALY
Get the SERVER and do a ... ehm.... "reverse engineering of the array" (you know what I mean). Then you'll know where to start from and maybe what you need.


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 11th, 2010, 3:13 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
BlackST wrote:
Get the SERVER and do a ... ehm.... "reverse engineering of the array" (you know what I mean). Then you'll know where to start from and maybe what you need.


The server is not able to power on and no more available. Is there anyway to recover without the original server

Cheers
-Jag


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 11th, 2010, 3:38 
Offline

Joined: July 18th, 2006, 3:05
Posts: 7476
Location: ITALY
Ouch...

Then you have only these options :

1) trial and error with different combinations
2) if you are lucky enough and you can determine the original configuration on an identical server, hoping they didn't change it (default) try that parameters
3) manually determine by analysing the file system (need a lot of comparison) and known good file (i.e. one known OS file) what you want.

RAID reconstruction is rarely simple - this is why it is expensive.... :(


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 11th, 2010, 4:13 
Offline

Joined: March 7th, 2009, 12:43
Posts: 1091
Location: Angel Data Recovery
Please check your PM :wink:

_________________
Angel Data Recovery


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 11th, 2010, 10:13 
Offline

Joined: August 14th, 2008, 10:39
Posts: 257
Location: Morris Plains, New Jersey
Try RAID Reconstructor from www.runtime.org This may help find the proper parameters for the RAID (most likely RAID 5, not RAID 0 with spare).


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 11th, 2010, 10:50 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2575
Location: Ontario, Canada
Is the RAID a software RAID using Windows dynamic disks or is it a hardware RAID using a SCSI RAID controller? If it is a hardware RAID, what brand and model is the RAID controller?

Outside of trial and error, the best way to figure out a RAID configuration on three drive array is to us WinHex and simply compare the three drives. You should be able to determine the parity order and the block size from what you see.

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 12th, 2010, 3:07 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
msurgeon wrote:
Try RAID Reconstructor from www.runtime.org This may help find the proper parameters for the RAID (most likely RAID 5, not RAID 0 with spare).


I tried RAID reconstructor, but the search result was insignificant


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 12th, 2010, 3:17 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
lcoughey wrote:
Is the RAID a software RAID using Windows dynamic disks or is it a hardware RAID using a SCSI RAID controller? If it is a hardware RAID, what brand and model is the RAID controller?

Outside of trial and error, the best way to figure out a RAID configuration on three drive array is to us WinHex and simply compare the three drives. You should be able to determine the parity order and the block size from what you see.


Using hardware raid card, HP Smartarray 64X controller. (attached picture). It is a SCSI RAID card.

I will check with Winhex. Do you have any indication on what to look for when I open in Winhex?

Thanks for your help

Cheers
-Jag


Attachments:
snapshot-1276325935.539485.jpg
snapshot-1276325935.539485.jpg [ 1.23 MiB | Viewed 13585 times ]
Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 12th, 2010, 3:28 
Offline
User avatar

Joined: April 7th, 2009, 21:36
Posts: 487
jag17 wrote:
lcoughey wrote:
Do you have any indication on what to look for when I open in Winhex?

-Jag


Drive order, block size, parity order.

Exactly what blackst said.

_________________
Zero Alpha: zeroalpha.com.au
Find Cheap Donor Drives App: https://www.zeroalpha.com.au/donor-drive-app Updated February 2026


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 12th, 2010, 3:49 
Offline

Joined: October 4th, 2007, 6:20
Posts: 59
Location: Germany
you do have the controller and all three disks are ok. why not use it to check configuration? you could also image the array and check for partition/file system problems. is 64bit pci a problem?


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 12th, 2010, 4:20 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
Zero Alpha wrote:
jag17 wrote:
lcoughey wrote:
Do you have any indication on what to look for when I open in Winhex?

-Jag


Drive order, block size, parity order.

Exactly what blackst said.


I have opened using Winhex and copied few lines from each hard disk. I know the drive order. I am not sure how to look for block size and parity order. Please help

Cheers
-Jag


Attachments:
1_WINHEX-RAID.zip [5.62 KiB]
Downloaded 457 times
Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 12th, 2010, 4:25 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
swersig wrote:
you do have the controller and all three disks are ok. why not use it to check configuration? you could also image the array and check for partition/file system problems. is 64bit pci a problem?


I have the working controller and working hard disks, but the server is not working due to power supply failure. The server is not starting and gives a blank screen on display. I don't have spare server or spare power supply.

I have also imaged the hard disks successfully using R-Studio.

I have the following information

HP Proliant ML350 G3 Server
HP SmartArray 64x Controller
3x SCSI HDD each 36.4 GB
Suspected RAID 5 array
I know driver order
Not sure about block size and parity order
Successfully imaged hard disk using R-Studio


Cheers
-Jag


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 12th, 2010, 5:44 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
[Update]
The SCSI card is HP SmartArray 641 Controller. It is 64bit/100Mhz PCI-X type card. Does anyone know default block size and block order for this card?

QuickSpecs here
http://h18000.www1.hp.com/products/quic ... 67_div.pdf

Cheers
-Jag


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 12th, 2010, 6:19 
Offline

Joined: March 7th, 2009, 12:43
Posts: 1091
Location: Angel Data Recovery
jag17 wrote:
[Update]
The SCSI card is HP SmartArray 641 Controller. It is 64bit/100Mhz PCI-X type card. Does anyone know default block size and block order for this card?

QuickSpecs here
http://h18000.www1.hp.com/products/quic ... 67_div.pdf

Cheers
-Jag


Block order: Backward Delay parity
Block size : 128 s
Number of delays : 4 or 8

_________________
Angel Data Recovery


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 13th, 2010, 22:23 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
DR-Kiev wrote:
jag17 wrote:
[Update]
The SCSI card is HP SmartArray 641 Controller. It is 64bit/100Mhz PCI-X type card. Does anyone know default block size and block order for this card?

QuickSpecs here
http://h18000.www1.hp.com/products/quic ... 67_div.pdf

Cheers
-Jag


Block order: Backward Delay parity
Block size : 128 s
Number of delays : 4 or 8


I tried the above settings on WinHex and tried to rebuild the raid, but not successful. In fact I tried all possible combinations in UFS explorer no chance also. Any help?


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 15th, 2010, 3:39 
Offline

Joined: May 19th, 2009, 5:05
Posts: 97
Location: Singapore
Finally solved and recovered data.

My thanks to all those who helped in this forum. My special thanks to microsoftengineer and DR-Kiev who took time to troubleshoot it remotely.

The initial problem was due to R-Studio image. The image was compressed and that created some problems in identifying parts of the image using winhex. DR-Kiev did a wonderful job. He immediately spotted issues and we did a re-image using winhex. Then opened the image using winhex and found out block size, order and delays (this where DR-Kiev experience comes into play, he is really a RAID expert) and used it to build RAID volume on winhex

The server was using HP smartarray 641 and the settings as found out are
Block Size: 32Kb
Block Order: 0,1,2
Delays: 16
Start of sector: 1088

Putting these values RAID array was build in winhex and then cloned to a physical hard disk and read out using R-studio from the physical disk.

All looked very easy when doing with DR-Kiev, but it is his experience that made it possible.

Thanks again for DR-Kiev great help and critical time.

Cheers
-Jag


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 15th, 2010, 8:30 
Offline

Joined: August 12th, 2008, 13:11
Posts: 3235
Location: USA
Wow, I hope you sent him some $$$

_________________
You don't have to backup all of your files, just the ones you want to keep.


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 15th, 2010, 12:24 
Offline

Joined: May 16th, 2009, 9:32
Posts: 325
Location: UNited Kingdom
What does it mean by "Delays" in this context ?

Block size, Block Order and Starting sector are self explanitory
(athough may need to experiment to confirm the correct settings)

For this 3 drive Raid-5 system, would expect the data and parity blocks to be in the order

B0 B1 P01
B2 P23 B3
P34 B4 B5
B6 B7 P67
etc
or similar

all in block sized chunks

sounds like something to do with overriding the 'delay' / position of the parity block

Update: Presumably controls the placing of the parity block and what drive it is on and how it moves on subsequent stripes, especially for RAID5 units with more physical drives where there is more possibilitys of where to put it


Start sector of 1088 also sounds strange

Thanks for any enlightenment


Top
 Profile  
 
 Post subject: Re: RAID recovery - can see folder structure but files corrupted
PostPosted: June 16th, 2010, 6:12 
Offline

Joined: March 7th, 2009, 12:43
Posts: 1091
Location: Angel Data Recovery
jag17,

Thanks for the nice feedback :wink:

xsoliman,

Do you ever work with HP servers?


Attachments:
delayd.JPG
delayd.JPG [ 24.49 KiB | Viewed 13428 times ]
raidConfigDelay.JPG
raidConfigDelay.JPG [ 128.18 KiB | Viewed 13428 times ]

_________________
Angel Data Recovery
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 21 posts ]  Go to page 1, 2  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 79 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group