Lacie 2Big NAS–Recovering Data with Good Drives/Bad Device

Today, my faithful Lacie 2Big NAS box which has served me reasonably well for a number of years had a bit of a problem.

The box is a simple device which in my case has 2x500GB hard drives in it and runs them in a mirrored (RAID1) configuration so that if a drive fails you simply take it out, drop in another one and it rebuilds the mirrored set for you.

Actually, that’s the dream. When I did have a drive fail, I found that I had to send the failed drive back to Lacie who then sent me a replacement so it’s still pretty good but not quite as simple as it seems. Following today’s investigations, I suspect that I could now sort that out myself.

The box has a number of status indicators on it and, specifically, at the back it has 2 lights which indicate drive health and a big on on the front which indicates “general health”. There’s a description of these lights on the Lacie website;

http://www.lacie.com/support/faq/faq.htm?faqid=10606

which reads;

The LED indicators above the drive bays and the front LED indicate drive status and activity.

During Startup
  • Front LED – blinks red/blue until both disks are powered on, then turns solid blue.
  • Rear LEDs – blinks red/blue until corresponding disk is powered on, then turns solid blue.

NOTE: If the device is not able to initiate the boot process following disk startup, the front is solid red.

During Bootup
  • Front LED – solid blue
  • Rear LEDs – solid blue

NOTE: If a disk is failing, both the disk’s corresponding rear LED and the front LED will be solid red.

During RAID Synchronization
  • Front LED – solid red
  • Rear LEDs – The LED corresponding to the original disk will be blinking blue and the one being synchronized is blinking red
  • Once both disks are synchronized, their corresponding rear LED and the front LED will be solid blue

Now, my particular problem didn’t seem to be well described by any of these in that my device didn’t seem to be starting up properly but the light indicators were as follows;

  • drive bay 1 – solid blue light
  • drive bay 2 – flashing blue light
  • front LED – off

and nowhere on the Lacie site do you get a description of what that might mean.

I’ve a suspicion that it’s perhaps the power supply that has broken or possibly it’s something inside the NAS device itself and so I sent off for a replacement power supply to see if that fixes the issue.

I suspected that the disks might be ok but I started to worry a little about getting the data off the drives even though I had a fairly recent backup of the data I still didn’t really want to consider the delta between the backup and the actual data on these 2 mirrored drives.

It’s at this point when I started to question whether it’d been wise to stick with this simple Lacie device for all these years as I realised that I had no idea how the data was actually stored on the drives and I began to figure that getting to it might not be as simple as I might hope for.

I stuck the 2 drives into an old desktop PC and took a look at the partitions on them and spotted pretty quickly that each disk looked pretty much identical and seemed to contain a 464MB partition which I suspected contained my data along with a bunch of other partitions.

I hunted around a little for a way of mounting the filesystem from that partition on a Windows box (I tried both this Ext2 installable driver and this Ext2Fsd driver) before coming to the conclusion that while some of the partitions on these drives were either in EXT2/EXT3 the actual data that I was looking for wasn't.

Given that it was a Linux box that stored this data, I gave up trying to use Windows to read it at this point and decided I’d try and use Linux to read it and settled for Ubuntu.

At this point, I struck pure Gold because I found this post;

The Great Lacie 1TB Big Disk Recovery Experiment 

which had almost the exact details of how to go about it albeit with a slightly different device. The particular steps that I followed were;

  1. Took all disks out of my desktop PC.
  2. Installed the 2 disks from my Lacie 2Big NAS into my desktop PC.
  3. Downloaded an ISO installation of the latest Ubuntu version.
  4. Installed that onto a USB key.
  5. Booted my desktop PC from that Ubuntu installation on the USB key (letting Ubuntu run from the USB key rather than actually installing it).

Once I had Ubuntu running, I followed the steps outlined in the original post although I think anyone armed with a little Unix history and man mdadm would be able to figure it out from this point in.

I used the GParted partition editor and managed to locate my 2 disks (/dev/sda and /dev/sdb for me) which contained the 2 partitions that made up the mirrored set. For me, these 2 partitions were called /dev/sda2 and /dev/sdb2 and were easy to identify because they showed up as 464GB partitions (labelled as XFS in the tool).

With those identified I installed mdadm by doing a;

app-get install mdadm

which seemed to work fine and then I did a;

mdadm –-query /dev/sda2

as detailed in the original post which told me that the device I was looking for was /dev/md4 and with that in place I could re-assemble the mirrored pair;

mdadm –A /dev/md4 /dev/sda2 /dev/sdb2

Now, at this point I got puzzled for a while because the original post suggested that this was all I’d need to do to access the filesystem but that turned out not to be the case for me. I still had to mount it. I found that I could check the status of the mirror by doing a quick;

mdadm –detail /dev/md4

and that looked promising because it gave a nice description of the 2 volumes and told me that they were clean and then finally I figured (by trying mount) that the filesystem wasn’t mounted and so did something along the lines of;

mount /dev/md4 /home/ubuntu/lacie

and then I found that I could see my data at /home/ubuntu/lacie and so I just stuck another USB drive into the desktop PC and started copying the data off there.

And with that all done – I think I’ve got my data back Smile For me, I’m going to have a think about whether I trust this device to manage my files in the future given that it’s storing data in a fairly opaque way which can make it a little tricky to retrieve if something goes wrong. It’s also quite an old device so maybe it’s time for a rethink.

I hope if you come across this post via a web search then it’s useful to you and that you also get your data back too Smile

Thanks for Visiting–Come Back Again Soon :-)

A bit embarrassing but a while ago one of my former managers encouraged me to use Google Analytics to measure the traffic that’s hitting this site. To be fair, it works pretty well and I’ve now got a few years’ worth of data so that I can do comparisons from year to year.

I’ve recently reviewed what that looks like and it tells me that traffic increased in the period May 2010 to May 2011 versus the period May 2009 to May 2010 so I thought I’d share. Here’s what Google Analytics tells me;

30th April 2009 to 1st May 2010

image

30th April 2010 to 1st May 2011

image

and so generally across the year the traffic to the site has gone up by around 20%-30% and so just a big “thank you” to folks who continue to hit this site and subscribe in your RSS readers and read and watch what goes on here.

Subscriptions have also gone up a little. Feedburner (woops, that’s also Google Confused smile) tells me that subscriptions have gone from an average of 3899 to an average of 4546 so that’s also great to see.

Thanks for visiting – come back again soon! Winking smile

“Hello! Hello!”–Fake Microsoft Virus Phone Calls (logmein123.com)

While working at home today I was “lucky” enough to get a call from one of those scammers who rings your house and offers you technical assistance with your PC.

There’s a decent write-up over here on the Guardian’s website of the sort of scam we’re talking about and there are some examples over here of actual conversations where people have been much better than me in that they managed to record the call.

The call ran something like this;

  1. There was an awful lot of “Hello! Hello!” which seemed to go on for quite a while – if you’re going to telephone scam people I recommend investing in a decent headset.
  2. The initial “engineer” told me that he was ringing about the problems that I had with my computer and then remembered to check whether I had a computer and whether I had any problems with it. I said that I did. I’ve got lots of computers and they all have their problems Winking smile I guessed where we might be heading.
  3. He also mentioned “Microsoft” quite a lot and talked about how it’s likely that the warranty on my computer’s software (?) might have “expired” thereby “opening it up to lots of viruses and problems being downloaded from the internet”.
  4. He then led me on a course of diagnostics which involved me finding the CTRL key on my keyboard ( “I want you to look at the keyboard and press the key in the bottom left corner” ) and, from there, to the Windows key and used the R shortcut to get a Run dialog.
  5. He then ran the event viewer.
  6. Once in the event viewer he encouraged me to scroll up and down and count up how many “little yellow triangles” and “little red circles” I could see. I reported that I could see “hundreds”.
  7. He explained that the triangles and circles represented viruses and that they “multiply every twenty four hours” which I found a little bit frightening although I did wonder why they waited so long and what they were doing for the rest of each day Smile
  8. Once “the problem” was clearly demonstrated he handed me over to his supervisor who was a “Microsoft Registered Technician”.
  9. The registered technician checked that I had understood the nature of the problem and then proceeded to get me to run up a browser and go to http://logmein123.com and he wanted me to type in a passcode up there ( 843718 ). Note – I haven’t tried to login on that website and I’ve no idea what kind of malware lurks behind it. You have been warned.

At this point, I decided that I didn’t want to log in to the site so I stalled for a while and then started to ask the supervisor whether it was risky to log in to this site and I mentioned that it didn’t look like a Microsoft site and couldn’t they have spent a little more money on the branding of it?

This opened up the general question of budgets at Microsoft and I could tell that he was starting to get wise as I asked him if he could give me his address and phone number “just in case it goes wrong” and the call ended quickly when I added that I worked for Microsoft and so was curious about a few of the things that he’d just been telling me.

I wasn’t perhaps the ideal candidate for this kind of phone scam and it’s easy to have a laugh at the scammers expense but I can see how it would be very easy to fall for if you’re having some kind of computer trouble and the phone happens to ring at the same time with someone who says “Microsoft” a lot and offers to “help” Sad smile

With that in mind, here’s a “message from our sponsor” providing a legitimate place to go to look for computer security issues for the home user;

image