Page 1 of 2

Something very bad has happened

PostPosted: Tue Jan 28, 2014 10:33 pm
by hardy74
Today suddenly all my 700 GB of data is gone from both of my main shares. Totally empty, from hundreds of thousands of files.

With SSH and some looking around, all folders in /share/1000/Media have today's date, and the shares are empty. df shows that only 247 GB of space is on the drive, even though it's a 1 TB drive. There are 5 filesystems: /dev/root, /dev/sda1, /dev/sda5, tmpfs, /dev/root. Instead of 998 GB as before, Windows shows both drives (=shares) to having 242 GB of space, all available. It is possible to write on the drives from Windows.

What could cause the device to wipe out all of the data? It has been working fine with fvdw-sl since 11.0. Failing HD? An automatic update gone wrong? Any way to recover the data?

Luckily I have backups of some of the data, but not most of the media files.

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 10:41 pm
by Jocko
Hi hardy74,

Either you have lost partition mounts or there is a problem with the partition table.

Please post the output
Code: Select all
fdisk /dev/sda
to see what is the issue

Note: if the partition table is corrupted Mijzelf has a large knowledge about it to restore the partition table without losing data and would be able to help you

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 11:03 pm
by hardy74
I suppose what you meant was the output of p(print) from fdisk?

Command (m for help): p

Disk /dev/sda: 1000.2 GB, 1000204886016 bytes
255 heads, 63 sectors/track, 121601 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Device Boot Start End Blocks Id System
/dev/sda1 1 64 513056 83 Linux
/dev/sda2 65 128 514080 83 Linux
/dev/sda3 129 192 514080 82 Linux swap
/dev/sda4 193 121601 975217792+ 5 Extended
/dev/sda5 193 292 802226 83 Linux
/dev/sda6 293 293 7008+ 83 Linux
/dev/sda7 294 357 513056 83 Linux
/dev/sda8 358 121601 973891406 83 Linux

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 11:07 pm
by Jocko
So your partition table seems ok.

now try to see if your data are still on /dev/sda8
Create a temp mount point on sda5
Code: Select all
mkdir -pm 777 /rw_fs/tmp/sda8

and mount sda8
Code: Select all
mount /dev/sda8 /rw_fs/tmp/sda8


and make some ls commands to see if your data are still here

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 11:13 pm
by hardy74
root@lacie:/ # mkdir -pm 777 /rw_fs/tmp/sda8
root@lacie:/ # mount /dev/sda8 /rw_fs/tmp/sda8
mount: wrong fs type, bad option, bad superblock on /dev/sda8,
missing codepage or helper program, or other error
In some cases useful info is found in syslog - try
dmesg | tail or so

/rw_fs/tmp/sda8 obviously empty, something wrong with the commands. Unfortunately I've forgotten most of my former Linux skills from the 90's.

dmesg | tail has something maybe interesting: EXT3-fs (sda8): error loading journal

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 11:21 pm
by fvdw
think you must check the partition run this

Code: Select all
e2fsck /dev/sda8

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 11:26 pm
by Jocko
and to find alternative superblocks (after doing e2fsk)
Code: Select all
 dumpe2fs /dev/sda8 | grep -i superblock

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 11:28 pm
by hardy74
root@lacie:/rw_fs/tmp/sda8 # e2fsck /dev/sda8
e2fsck 1.41.14 (22-Dec-2010)
/dev/sda8: recovering journal
Error reading block 121717257 (Attempt to read block from filesystem resulted in short read). Ignore error<y>? yes

Force rewrite<y>? yes

/dev/sda8: clean, 96181/60874752 files, 168085702/243472851 blocks

-------------

Data is back. BIIIIG thanks.

So what caused this? I already have an Asustor AS-302T in the Amazon UK basket, should I press "quick checkout"? :) Or still trust the old but until today reliable Lacie.

I didn't do the dumpe2fs. Maybe it's not necessary at this point?

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 11:33 pm
by fvdw
this can happen if you powered done the nas while the disk was writing , for instance as result of power cut.

How old is this lacie nwsp2 you use ?

ps its always good to have a backup of your important files, every hard disk will fail some time..

the dumpe2fs is not required at this moment to my opinion

Re: Something very bad has happened

PostPosted: Tue Jan 28, 2014 11:36 pm
by hardy74
fvdw wrote:this can happen if you powered done the nas while the disk was writing , for instance as result of power cut.

How old is this lacie nwsp2 you use ?

ps its always good to have a backup of your important files, every hard disk will fail some time..


Hmm... not power cut, it was shut down normally.

The Lacie is probably at least 5 years old. I'm not sure though. But I think I will go for the Asustor soon. Those have HDMI out + remotes, which is very cool.