From owner-freebsd-questions@FreeBSD.ORG Mon Jul 21 10:21:57 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1A6FD1065681 for ; Mon, 21 Jul 2008 10:21:57 +0000 (UTC) (envelope-from john@zog.net) Received: from taklamakan.88.net (taklamakan.88.net [80.68.94.209]) by mx1.freebsd.org (Postfix) with ESMTP id C16E58FC20 for ; Mon, 21 Jul 2008 10:21:56 +0000 (UTC) (envelope-from john@zog.net) Received: from localhost (localhost [127.0.0.1]) by taklamakan.88.net (Postfix) with ESMTP id 8CE69C8011 for ; Mon, 21 Jul 2008 10:57:16 +0100 (BST) X-Virus-Scanned: Debian amavisd-new at 88.net Received: from taklamakan.88.net ([127.0.0.1]) by localhost (taklamakan.88.net [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id crV0BfFstuNn for ; Mon, 21 Jul 2008 10:57:10 +0100 (BST) Received: by taklamakan.88.net (Postfix, from userid 33) id 7E72FC800B; Mon, 21 Jul 2008 10:57:09 +0100 (BST) Received: from 82.120.108.188 (SquirrelMail authenticated user john) by www.88.net with HTTP; Mon, 21 Jul 2008 11:57:09 +0200 (CEST) Message-ID: <2385.82.120.108.188.1216634229.squirrel@www.88.net> Date: Mon, 21 Jul 2008 11:57:09 +0200 (CEST) From: "John Morgan Salomon" To: freebsd-questions@freebsd.org User-Agent: SquirrelMail/1.4.9a MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-15 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Subject: Recover Lost Superblocks? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: john@zog.net List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jul 2008 10:21:57 -0000 Hi there, bit of a tricky question: I have an Adaptec RAID-5 array which decided to puke recently -- the controller seems OK, as do the drives, but something appears to have gone wrong and I had to rebuild the array. Long story short, my array went astray and I lost partition and filesystem info for 1.6TB of data. Before you ask, this was the backup server. My primary box had decided to die shortly before. I had no backup backup server. Murphy strikes. The array was formerly my boot device. Layout before the crash was: /dev/aac0s1a / /dev/aac0s1b swap /dev/aac0s1d /usr /dev/aac0s1e /data Using a combination of sleuthkit, autopsy, a bootable IDE drive that I installed, gpart and a bunch of other tools, I was able to recover the partition. I am also able to mount / from the bootable drive (as /dev/aac0s1c) and access everything on it. I do not remember the filesystem layout (sizes, start/end sectors, etc.) Can someone recommend a way to manually scan the entire partition (either aacd0, aacd0s1 or aacd0s1c) for formerly present filesystems? I am 99% sure that all the data is still present, and if I reinstall the superblocks I'll be able to boot the array, mount the filesystems and get the data off before I continue. I don't know whether I've missed any gpart options (I have the impression it only scans for lost partitions, not ufs filesystem signatures.) Any help, tips or pointers would be tremendously appreciated.