media vault m2010 data recovery

[pcpete]

We are working on a data recovery from a HP media vault mv210. We are early on in our procedure, so our information for you guys may be lacking.

here is what we have done or observations we have made

• we tested the single hard drive from the unit, it passed perfectly
• we made two clones of it
• according to Linux, no partitions are on the drive
• on one of the clones we ran teskdisk, it found a reserfs file system and created a partition, but we are unable to mount it in linux
• using the demo version of CnW recovery on the drive which we ran testdisk we are able to see the file structure with all of the clients files(this is new news just happened while posting this, the full version is only $39)

ideally I would like to use linux instead of paying for this program. Any other suggestions? Do you guys think the lack of a partition table is a normal proprietary hp thing or damage to the partition table? Any thoughts or insight would be appreciated.

 

[pcpete]

they offer a one use licence for $19 (30 days). We got that and are using it. It appears like all will go well(it is finishing a scan).

(that may or may not be for commercial use. I need to research that for the future)

 

[Mainstay]

interesting software:

Full Licence inc RAID with dongle $74.99 sounds like a pretty inexpensive option.

You could easily recoup that on the first successful recovery, and then it is all profit from there out.

Let us know how you make out.

 

[Markverhyden]

Have you looked here?

https://www.technibble.com/forums/resources/how-to-triage-a-hard-drive.17/

You started in the wrong order. You should have imaged/cloned, set the drive aside, and worked on the image. All you do when you test a drive is wear it down further possibly decreasing you chances of recovery. Also R-Studio allows you to run a full scan on a drive in demo mode. If you like it you can then pay for the license, apply the product key, then recover the files.

 

[pcpete]

Best practices, you(mark) are correct in most cases

I was curious if the issue was with the NAS or the drive, so I actually just opened the drive in gsmartcontrol and looked at the attributes(were perfect) and did a short scan. Then I grabbed a bit by bit image. I do typically always get a complete image first, but in some cases, that may not be best. An example: say the computer has failing heads, and the client needs only one excel file, it may be more prudent just to mount the drive in Linux and grab that one file instead of imaging the whole drive and killing the heads while getting a full disk image.

We do have a full licence for rstudio, and I forgot to add, we did scan the drive with it found nothing. Rstudio does not support xfx and reiserfs as far as I know

Thanks for the link. Look forward to reading it.

 

[Markverhyden]

You are right re: snagging a few files. If that is all they want and it mounts in Linux, I've done the same thing. While that is not a best practice many users do not want to spend even $200-300 for a few files. Thanks for the tip on CnW. I've never had to work on an HP Media vault's before so I was not aware they used reiserfs. But it looks like they offer a lot of other options for other storage media, file systems, and file types. As mentioned the price is right.

 

[pcpete]

This turned out to be rewarding. We recovered about 200gb of pictures and videos. A nice way to start off Monday.

 

[pcpete]

This program also offer looks like it might be good to try
http://www.ufsexplorer.com/

 

[lcoughey]

Let's hope that the drive you chose to recover from is current. Did you check the RAID meta data to confirm that both drives were in sync? Or, at the very least, make sure the dates of the files in the recovery are current?

 

[pcpete]

Sorry if my post was unclear. it had only a single drive. I made two clones, one to alter(experiment) with testdisk and a second to try and read without any alterations.

Do you know if it is normal for the hp media vaults to appear to linux as not having any valid partition table or do your think that was damage?

 

[lcoughey]

It probably is an LVM which usually doesn't mount without without assistance.

 

[Markverhyden]

I'm under the impression that ReiserFS is no longer supported by mainstream kernels. After the developer was charged with murdering his wife everyone seems to have dropped it. So current distro's would not be able to mount it unless it's been added after the fact. Try creating a volume on your machine and see what FS options are offered. Just checked on my CentoOS 7 Box as well as an old openSUSE 11.3 and neither have ReiserFS as an option.

 

[pcpete]

I'm under the impression that ReiserFS is no longer supported by mainstream kernels. After the developer was charged with murdering his wife everyone seems to have dropped it. So current distro's would not be able to mount it unless it's been added after the fact. Try creating a volume on your machine and see what FS options are offered. Just checked on my CentoOS 7 Box as well as an old openSUSE 11.3 and neither have ReiserFS as an option.

Even though it may not be offered as an option in the gui, that does not mean full support has been removed from the kernel. There are to many systems that use it, I think it would cause way to much breakage just to quit including it. I just did a quick search and one of the most popular, Ubuntu, still had support as of 14.01

See if you can manually load the module using the command

modprobe reiserfs

If it loads without error, you have support for it.

 

[pcpete]

We just had success with that program a second time on a "simpleshare" "simpletech" nas. When you looked at the first sector on the drive with a hex editor it said "broadcom version 1.1" (doing this from memory, I may be off a bit). It seemed to be a proprietary reiserfs file system.

This program is invaluable.