Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Feb 2003 12:29:26 +0200
From:      mika ruohotie <bsdhack@aeon.st>
To:        hackers@freebsd.org
Subject:   lost filesystems, recovery
Message-ID:  <20030218122926.A84494@rigel.grass.st>

next in thread | raw e-mail | index | archive | help

hello,

recently my current system lost it's filesystems complitely while [1]
running the daily thru the disk. well, current and current, it was
5.0-current, but not recent one, had soft-updates.

disklabel is fine, and if i dd the partitions into a file, and then
read that with "stings", it seems as if most or even all of the
stuff supposed to be there, actually still _is_ there.

fsck [2] doesnt seem to think anything is wrong (on the first run it
cleared few files, assuming those which were open while the damage
was happening) and fssrecov doesnt like my dd-images [3]. i got few
of the /var logs out with it.

suggestions other than ibas? (was a personal machine, not production
and i doubt my insurance covers their costs... :> )

i've seen something similar once several years ago when my other ide
drive (western digital) decided it wants to sleep while i did a
find thru the system. then fixit fsck resulted everything got put
into lost&found, this time tho nothing there either. this time the
drive was ibm deathstar, ide.

i assume there could be something more to do, since as i said, the
data seems to be there still. it'd be annoying to read thru those
dd-images and cut&paste all the text out.


mickey

[1] i read /var image and timestamps there suggested the damage
    happened around the same time daily ran it's find, i was able to
    pinpoint the damage into a 5 minute window.

[2] fixit or another system, ofcourse, since _nothing_ is left on
    that 10GB drive, except the mbr and disklabel. (and the stuff
    i still can see from the dd images, ofcourse)

[3] mmap issues with above 2GB or alike, splitting images didnt help,
    should i have used some additional dd flags, other than just if/of?

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030218122926.A84494>