Reply
Byte
barney.parker
Posts: 5
Registered: ‎06-09-2010
0

Recover Data from MaxAttach NAS 3000 disks

Hi,

 

I have a MaxAttach NAS-3000 which has been sat on a network for a few years.  The unit has recently given out, and although it attempts to boot, the drives appear to not get any power to them.

 

I have tried powering the drives with another PC's PSU, but i end up getting a solid STATUS light.  I have also tried connecting the pair of disks to an old PC with IDE connectors, but it seems the Windows certainly cannot read the drives.  I tried using an Ubuntu Linux setup, and while it told me a little more, it was still unable to mount the partitions.

 

Both drives are identical (Maxtor 81.9GB 5.4K RPM disks, and are the originals that came with the device.

 

I have read somewhere (possibly unreliably) that the unit runs a copy of FreeBSD, however I haven't got a clue where to start, or even if it would be any use mounting the drives in FreeBSD.

 

So my question is, can the data on the disks be recovered?  I would be amazed if i have to accept 160GB of lost data on disks that happily work, but are formatted strangely!

 

Any information that could point me in the right direction would be extremely welcome!

Gigabyte
EasyUser
Posts: 236
Registered: ‎06-25-2009
0

Re: Recover Data from MaxAttach NAS 3000 disks

Byte
barney.parker
Posts: 5
Registered: ‎06-09-2010
0

Re: Recover Data from MaxAttach NAS 3000 disks

EasyUser: Thanks for your reply, i tried using the knoppix live disk to examine the array with:

 

mdadm --examine --scan

 

but got absolutely nothing returned!

 

using /sbin/sfdisk -l which showed me the disks, each containing three partitions.

 

On one disk, the first and last are marked as type 0xa5 with the middle being 0x5a.  On the second disk all three partitions are 0xa5.  The 0xa5 is listed as FreeBSD, and the 0x5a as unknown.

 

In PCman i can see 4 partitions (not the expected 6). 

 

Each disk is set up similarly, the first two partitions (195.1MB and 43.9MB) appear empty, and the third is not visible.

 

At this point i am a little stuck!

 

I have read elsewhere that the MaxAttach NAS-3000 is the same (almost) as an Intel Storage Station, but again, i haven't found any information on this.

 

I have tried contacting Maxtor directly, but as it's an (very) old unit, and they've since been bought by Seagate, they don't even seem to recognise it as a Maxtor product!!!

 

Any ideas on which way to turn?

 

 

Gigabyte
EasyUser
Posts: 236
Registered: ‎06-25-2009
0

Re: Recover Data from MaxAttach NAS 3000 disks

Sorry, I just realized yours was MaxAttach not MSSII or CA, that thread was for those products.

Byte
barney.parker
Posts: 5
Registered: ‎06-09-2010
0

Re: Recover Data from MaxAttach NAS 3000 disks

EasyUser: No problem, it was certainly worth a try!!!!

 

So does anyone know of a source of information regarding these devices?

 

The problem i am having is that i can't even find out for sure what OS is running!  I'm guessing FreeBSD, so if that is the case, is there any assumtions i can make regarding the disk set up?

 

What i can't seem to work out is, are the disks (2 * 80GB) configured as some kind of raid array, or are they managed by the software to appear to the network as a single drive?  A Raid array seems the simplest way of doing this, but I'm not sure...

 

It seems that 0xa5 partitions were used in 386BSD, but other BSD's use 0xa6.

 

If these are in some kind of raid array, is there any way of telling the type? 

 

I'm kind of clutching at straws now, it just seems amazing that i will loose years of work because of a lack of information.....and my failure to back up of course ;(

Yottabyte
fzabkar
Posts: 4,688
Registered: ‎01-27-2009

Re: Recover Data from MaxAttach NAS 3000 disks

According to the following "List of partition identifiers for PCs", 0xA5 is a BSD/386, 386BSD, NetBSD, FreeBSD partition type. 0xa6 is OpenBSD.

http://www.win.tue.nl/~aeb/partitions/partition_types-1.html

Section 6.6 (page 11 of PDF) of the MaxAttach NAS 3000 Installation Guide states that ...

If your unit has two disk drives, MaxAttach has a default disk management feature in which the unit behaves as One Large Disk (spanned disks). You can leave this default setting or you may select the alternate configurations of:

- Two Individual Disks or
- One Active Disk, One Backup (Mirroring)

http://www.seagate.com/staticfiles/maxtor/en_us/documentation/installation_guides/nas_3000_installat...

Here is a FFS File System Driver for Windows:
http://ffsdrv.sourceforge.net/
http://ffsdrv.sourceforge.net/downloads.php

"It enables you to read BSD(FreeBSD, NetBSD, OpenBSD) FFS partitions on Windows 2000/XP/2003."

Byte
barney.parker
Posts: 5
Registered: ‎06-09-2010
0

Re: Recover Data from MaxAttach NAS 3000 disks

fzabkar: Amazing!  It's not yet a complete solution, but you've got me further than ever!!!

 

It seems that the first couple of partitions mount.  From that i have found /etc/fstab and managed to get the following:

 

Device         Mount Point    FSType    Options    Dump    Pass

/dev/wd0s1b    none           swap      sw         0       0

/dev/wd0s2a    /              ufs       rw         1       1

/dev/wd0s2e    /jfs           jfs       rw         2       2

proc           /proc          procfs    rw         0       0

/dev/wd0s3e    /mnt/vol1      jfs       rw         2       2

/dev/wd0s2e    /mnt/vol2      jfs       rw         2       2

So it would seem that the larger partitions are in fact JFS.  The FFS driver BSOD when i try to mount them, but they're not supported by that driver, so thats pretty much normal....

 

Next i tried booting to Ubuntu (10.04).  It won't let me mount /dev/sda3 or /dev/sdb3 as jfs, and gives me the message:

 

Mount: wrong fs type, bad option, bad superblock on /dev/sda3,

       missing codepage or helper program, or other error

       In some cases useful info is found in syslog - try

       dmesg | tail  or so

So i dmesg | tail'ed and got...

 

JFS: nTxBlock = 8192, nTxLock = 65536

I also attempted an fsck.jfs just in case a filesystem check would help, and got.....

 

The Superblock does nto describe a correct jfs filesystem.

If device /dev/sda3 is valid and contains a jfs file system,

then both the primary and secondary blocks are corrupt

and cannot be repaired, and fsck cannot continue.

So i'm back to being stuck!!!! 

 

Free BSD uses slices as opposed to partitions.  i'm not sure how that works, or if it makes a great deal of difference (just terminology?)

 

The unit originally showed itself to be ~160GB, so the unit must be in it's default state of two individual disks in a spanning arrangement, not the active/backup that would have been available.

 

 

I also notice that in the link to partition types, 0x5a is not even listed!  I guess thats not a good sign!

 

So, does anyone have any further suggestions?

 

Yottabyte
fzabkar
Posts: 4,688
Registered: ‎01-27-2009
0

Re: Recover Data from MaxAttach NAS 3000 disks

I'm already out my depth, but FWIW I notice that 0xA5 is the one's complement (binary inverse) of 0x5A (0xA5 + 0x5A = 0xFF). Perhaps it would be worth comparing the second partitions of each drive with a hex editor. You could use dd to copy each partition to an IMG file on a backup drive. It might also be worth comparing the first partitions.

I'm wondering whether the JFS file system appears broken because it spans two drives.

If all else fails, perhaps you could upload detailed photos of the electronic innards to a file sharing service. Maybe repairing the hardware will be easier than reverse engineering the file system.

Byte
barney.parker
Posts: 5
Registered: ‎06-09-2010
0

Re: Recover Data from MaxAttach NAS 3000 disks

I think you're right that the jfs is broken due to the spanning.

 

I have been wondering if it would be possible to follow the BSD config files, and try to duplicate what they did to create the span.

 

It seems to me that the mount point /mnt/vol1 and /mnt/vol1 must be the general mount points of each part of the span, which once joined (i assume) are mounted at /jfs

 

It seems to me that if i could remount the two halfs, then hopefully i should be able to reinitate the jfs mount.  It seems this is a software span, but i'm not sure where to look in the config (/etc)

 

I think an image file of each disk may be in order, just to make sure i don't damage anything in the process of trying to repair the problem.

 

As far as repairing the hardware goes, we do some pretty low level electronics here.  I got one of the engineers to take a look at the board, and he says he doubts he could get it up and runnig again, so i think thats out...

 

So, the new question is, does anyone know how JFS works?  I am fairly sure i could get the partitions remounted in a BSD installation, but how to bring up the JFS mount is another matter....