NETAPP fas2240-4 stores how to recover data after several months of mis-Deleting a folder

Server Data recovery background:
A company in Beijing has a server NetApp storage because mistakenly delete the folder requires data recovery operations, a total of 24 disks in the server, the administrator in the work of mistakenly deleted a key folder in the storage, Three months later, the administrator realized the serious consequences of this operation and tried to find a Beijing data recovery company to perform server data recovery services.

Server storage Initial Check results:
Because the customer's server equipment is in Beijing, so we sent engineers from Beijing headquarters to the customer site for the initial inspection of the server, although the data was deleted for several months, but due to the characteristics of the filesystem in NetApp, WAFL is "Write Anywhere file Layout", namely " Arbitrary location write file layout "feature, so there is little likelihood of data coverage, data recovery success rate is high, you can make data recovery attempt.

Data Recovery steps:
1, because different models of WAFL file system versions are different and the gap between the larger, first we need to base on the structure of the node to determine the data block node pointer, which is the server storage data recovery of the first step. After the server engineers analyzed the data structure of NetApp storage, the file system version in this case was WAFL7.3.4 and the data block pointer was 8 bytes.

NetApp fas2240-4 Storage deduplication folder Data recovery case one:
``
2, the second step of data recovery is to analyze the sector, through the analysis of the engineer that the file system used by the blocksize for the 8+1 sector, where the first 4 sectors are data blocks, the latter sector is the block flag. (Some versions compress the last sector to the last of the last sector of the data sector in order to conserve disk space)

NETAPP fas2240-4 Storage deduplication folder Data Recovery two: block check sector
``

3, the important step of server data recovery is to analyze the directory structure, which stores the meta-information of files, folders and the file system itself. The structure holds the node of the file, which is unique, the node of the parent folder, and is consistent with the information in the data node.

NETAPP fas2240-4 Storage Deleted folder Data recovery case three directories
`
4, when all the important information necessary for data recovery is completed by manual analysis, the storage can be scanned comprehensively, and the node information and directory information needed in subsequent data recovery are scanned and stored in the database for subsequent work.
5, the last step of data recovery is to find the client's folder according to the customer's description in the database, build the directory tree we need, understand the algorithm and write the corresponding program according to the requirement, after providing the root directory, we can extract the data that the user needs by the program we write.

Data Recovery conclusion:
This time the server data recovery work takes 2.5 business days, the data recovery success rate 100%

NETAPP fas2240-4 stores how to recover data after several months of mis-Deleting a folder