RAID0 - partial recovery (parameters?)

Discussions on using the professional data recovery program R-STUDIO for RAID re-construction, NAS recovery, and recovery of various disk and volume managers: Windows storage spaces, Apple volumes, and Linux Logical Volume Manager.
Alt
Site Moderator
Posts: 3129
Joined: Tue Nov 11, 2008 2:13 pm
Contact:

Re: RAID0 - partial recovery (parameters?)

Post by Alt » Mon Nov 28, 2016 11:39 am

Madumi wrote:Just a quick follow-up question... The recovery process seems to have gone seamlessly... If no errors are reported, can I be sure all the files have successfully been recovered?
No, unfortunately. If the file records are recoverable but the content of the file is overwritten, R-Studio may report no errors, but in fact the file cannot be recovered.

Madumi
Posts: 6
Joined: Tue Nov 22, 2016 3:00 am

Re: RAID0 - partial recovery (parameters?)

Post by Madumi » Mon Nov 28, 2016 5:37 pm

thanks for your reply.

OK, yes, I understand the problem of overwritten files. I don't know if a broken RAID0 array creates overwritten files. When I did the recovery saw that I could recover deleted files, but I only attempted to recover the directory/files that had not been deleted by me.

I guess if a broken array could delete files, I understand they could be lost without trace. I didn't see evidence that files were missing. If a broken array deleted files, would the evidence be an odd file here or there, or would it be larger scale?

thanks!

Alt
Site Moderator
Posts: 3129
Joined: Tue Nov 11, 2008 2:13 pm
Contact:

Re: RAID0 - partial recovery (parameters?)

Post by Alt » Tue Nov 29, 2016 5:34 am

Madumi wrote:thanks for your reply.

OK, yes, I understand the problem of overwritten files. I don't know if a broken RAID0 array creates overwritten files. When I did the recovery saw that I could recover deleted files, but I only attempted to recover the directory/files that had not been deleted by me.

I guess if a broken array could delete files, I understand they could be lost without trace. I didn't see evidence that files were missing. If a broken array deleted files, would the evidence be an odd file here or there, or would it be larger scale?

thanks!
You see, R-Studio analyses the remnants of the previous file system. When it finds a valid file record it assumes that this is a valid file. But it's impossible to evaluate whether the disk sectors belonging to the file have been overwritten by some other processes.
This article explains file recovery in more detail: File Recovery Basics: How Data Recovery Works.

Madumi
Posts: 6
Joined: Tue Nov 22, 2016 3:00 am

Re: RAID0 - partial recovery (parameters?)

Post by Madumi » Tue Nov 29, 2016 6:29 am

Alt wrote:You see, R-Studio analyses the remnants of the previous file system. When it finds a valid file record it assumes that this is a valid file. But it's impossible to evaluate whether the disk sectors belonging to the file have been overwritten by some other processes.
This article explains file recovery in more detail: File Recovery Basics: How Data Recovery Works.
Aaah, yes, thanks... What I meant to say (sorry for the mis-communication) was that I'm not worried whether the contents of the files are valid. I'm wondering whether if the folder/sub-folder structure seems correct (I can't remember any glitches), whether it's likely to have holes elsewhere in the structure in places that are harder to find (eg. 5 folders deep). i.e. if the structure seems to have overall integrity, whether I can trust that the rest of the tree retains similar integrity (even if the files themselves may have been overwritten).

thanks!

Alt
Site Moderator
Posts: 3129
Joined: Tue Nov 11, 2008 2:13 pm
Contact:

Re: RAID0 - partial recovery (parameters?)

Post by Alt » Wed Nov 30, 2016 9:03 am

Madumi wrote: Aaah, yes, thanks... What I meant to say (sorry for the mis-communication) was that I'm not worried whether the contents of the files are valid. I'm wondering whether if the folder/sub-folder structure seems correct (I can't remember any glitches), whether it's likely to have holes elsewhere in the structure in places that are harder to find (eg. 5 folders deep). i.e. if the structure seems to have overall integrity, whether I can trust that the rest of the tree retains similar integrity (even if the files themselves may have been overwritten).

thanks!
Unfortunately, nothing can be said for sure before actual inspection.

Post Reply