Notifications
Clear all

raid5 recovery

8 Posts
6 Users
0 Likes
464 Views
(@krishna)
Posts: 45
Eminent Member
Topic starter
 

hai members

i have small issue with reference to recovery of data from the failed raid 5 server. the server consists of 4 hard disks of same capacity. the server is not booting stating the file system corrupted. the OS running was windows 2003 server. i took the physical image of all the 4 hard disks, subjected to Reclaime Raid recovery software. Reclaime rebuilt the raid, and asked to use recovery software. i used the reclaime recovery software for recovering the data. the problem is most of the files recovered shows the size as 0, few of them not opening, and few files which show some size are opened but the data is not complete. all the files recovered are audio files.

i wanted to know what could be the reason for these anomalies? how do i justify the recovery. pl help me what further can be done in this case.

 
Posted : 08/07/2015 12:43 am
(@mscotgrove)
Posts: 938
Prominent Member
 

Lots of possible reasons

1) The RAID was very corrupted
2) The disk order is wrong
3) The reconstruction has the wrong RAID pattern or stripe size, or starting point.

Can the software produce a flat disk image file, and you can see if the RAID reconstruction is correct.

For NTFS disk, the $MFT is very good point to examine. It is long, and largely sequential, with an easy pattern to follow by hand. You will need a good Hex sector viewer to help.

 
Posted : 08/07/2015 3:19 am
nightworker
(@nightworker)
Posts: 134
Estimable Member
 

learn your raid card standart parameter and reconstruct your disks
r-studio i prefer but the best softcenter raid recovery

 
Posted : 08/07/2015 1:46 pm
(@krishna)
Posts: 45
Eminent Member
Topic starter
 

Lots of possible reasons

1) The RAID was very corrupted
2) The disk order is wrong
3) The reconstruction has the wrong RAID pattern or stripe size, or starting point.

Can the software produce a flat disk image file, and you can see if the RAID reconstruction is correct.

For NTFS disk, the $MFT is very good point to examine. It is long, and largely sequential, with an easy pattern to follow by hand. You will need a good Hex sector viewer to help.

thanks for the response, i wanted to clarify that,
the disk order is correct, and the software produced flat disk image file. i run the relcaime data recovery tool on the flat disk image file only, but the results are not encouraging as i stated earlier i.e zero size files, show some size but does not play, some play with lot of interruptions as these are audio files.

regards,
krishna m

 
Posted : 08/07/2015 11:29 pm
(@mscotgrove)
Posts: 938
Prominent Member
 

If you do some data carving on the flat image, do you get good files, eg good JPEGs.

It is most likely the 'flat' image is not actually correct.

This is why I suggest you look at the $MFT (often found at sector 0x60003f or 0x600800) to see if it a sequential file. Each entry has a reference number and I would expect this to increase with most 0x400 byte entry.

ie Look at your raw data at every stage rather than just the end result.

 
Posted : 09/07/2015 1:04 am
(@reclaime)
Posts: 5
Active Member
 

You may want to file a support request with us, with more details, like RAID parameter set XML as it was recovered, and we'll take a look.

 
Posted : 12/07/2015 6:08 pm
(@einstein9)
Posts: 50
Trusted Member
 

hai members

i have small issue with reference to recovery of data from the failed raid 5 server. the server consists of 4 hard disks of same capacity. the server is not booting stating the file system corrupted. the OS running was windows 2003 server. i took the physical image of all the 4 hard disks, subjected to Reclaime Raid recovery software. Reclaime rebuilt the raid, and asked to use recovery software. i used the reclaime recovery software for recovering the data. the problem is most of the files recovered shows the size as 0, few of them not opening, and few files which show some size are opened but the data is not complete. all the files recovered are audio files.

i wanted to know what could be the reason for these anomalies? how do i justify the recovery. pl help me what further can be done in this case.

What is the Server Model?

I can have a quick look @ it if you want via TV (teamviewer)

 
Posted : 20/07/2015 9:55 pm
(@dmitri)
Posts: 12
Active Member
 

the server is not booting stating the file system corrupted. the OS running was windows 2003 server.

Description is rather general, so I'd start from checking these two things

1) Full RAID dump / reassembly is incorrect. As a basic test you can analyze contents of a large JPEG or .txt file.

2) Are you sure you didn't miss automatic chkdsk launch, which could have "fixed" the file system for you?

 
Posted : 16/08/2015 4:46 am
Share: