Shulou(Shulou.com)06/02 Report--

Server data recovery case Overview:

A company in Shanxi Province has a server netAPP storage that needs data recovery operation because it mistakenly deletes a folder. There are a total of 24 disks in the storage. The administrator mistakenly deleted an important folder in the storage during his work. It took three months for the administrator to realize the serious consequences of this operation and tried to find a Beijing data recovery company to provide server data recovery service.

Server failure Analysis:

The data recovery company arranges engineers to go to the customer site for initial inspection of storage. Although the data has been deleted for several months, due to the characteristics of the file system in NetApp, WAFL is "Write Anywhere File Layout", that is, "write file layout anywhere", so there is little possibility of data coverage and a high success rate of data recovery, so you can try to recover data.

Data recovery steps:

1. Because the versions of different WAFL file systems are different and different from each other, we first need to judge the data block node pointer according to the structure of the node, which is the first step for the server to store data. After analyzing the data structure stored in netAPP by the server engineers, it is concluded that the file system version in this case is WAFL7.3.4 and the block pointer is 16 bytes.

2. The second step of data recovery is to analyze the sector. through the analysis of the engineer, we know that the blocksize used in the file system is 16.2 sectors, in which the first eight sectors are data blocks and the last two sectors are block marks. (in some versions, in order to save disk capacity, the contents of the last two sectors are compressed to the last two sectors of the data sector.)

Block check sector

3. An important step in the recovery of storage data is to analyze the directory structure, which stores the meta-information of files, folders and the file system itself. This structure stores the node of the file, which is unique, the node of the parent folder, and is consistent with the information in the data node.

Catalogue

4. After all the important information necessary for data recovery is completed through manual analysis, the storage can be scanned completely, and the node information and directory information needed in the subsequent data recovery can be scanned out. Store it in the database for follow-up work.

5, the last step of data recovery is to find the folder that the customer needs according to the customer's description in the database, establish the directory tree we need, understand the algorithm and write the corresponding program according to the demand. after providing the root directory, we can rely on the program we write to extract the data that the user needs.

The server data recovery takes 2.5 working days, and the success rate of data recovery is 100%.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.