HPE MSA 1060 Volume showing RAW format on Windows Server 2012

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
sservais01
Posts: 1
Joined: 23 Feb 2023, 21:59

HPE MSA 1060 Volume showing RAW format on Windows Server 2012

#1 Post by sservais01 »

Hello everyone, I need your help to solve my problem.
In fact we acquired a SAN storage device, the HPE MSA 1060. We've been using it for more than a month now and we had no problem until this morning.
We found that the iSCSI disk is unreadable on our Windows Server and presents the disk as a RAW format disk.

I searched the forum but couldn't find anything that helped. I tried what this link suggests but nothing positive.
Here is the link:
viewtopic.php?p=29977&hilit=iscsi+raw#p29977

I followed what is suggested in the last position. That is to say do:
Append --> /dev/sdb --> EFI GPT --> Analyze --> Quit and post the new testdisk.log here:

This is the content of testdisk.log ofter the operation:


Code: Select all

Thu Feb 23 19:08:03 2023
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, February 2023
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows Server 2012 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=299966445568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=7159458824192
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=299321554432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=7159439949824
Hard disk list
Disk \\.\PhysicalDrive0 - 299 GB / 279 GiB - CHS 36468 255 63, sector size=512 - HPE LOGICAL VOLUME, S/N:PZXNN0BRHH16OY, FW:5.00
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63, sector size=512 - HPE MSA 1060 iSCSI, S/N:00c0fff6145700007fffa16301000000, FW:I110

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - HPE MSA 1060 iSCSI
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=13983318015 (expected 13983318015)
hdr_lba_start=34
hdr_lba_end=13983317982
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 2 P MS Data                    32768 13983313919 13983281152 [Basic data partition]

search_part()
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63
NTFS at 2/10/9
filesystem size           13983281152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=16777216, part_size=7159439949824, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/10/9
filesystem size           13983281152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 13983313919 13983281152
     NTFS, blocksize=4096, 7159 GB / 6667 GiB
file_win32_pread(544,11,buffer,13983318010(870421/73/47)) read err: read after end of file
file_win32_pread(544,8,buffer,13983318013(870421/73/50)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318004(870421/73/41)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318005(870421/73/42)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318006(870421/73/43)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318007(870421/73/44)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318008(870421/73/45)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318010(870421/73/47)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318012(870421/73/49)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318014(870421/73/51)) read err: read after end of file

Results
   P MS Data                    32768 13983313919 13983281152
     NTFS, blocksize=4096, 7159 GB / 6667 GiB

interface_write()
 1 P MS Data                    32768 13983313919 13983281152



Thu Feb 23 20:23:39 2023
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, February 2023
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows Server 2012 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=299966445568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=7159458824192
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=299321554432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=7159439949824
Hard disk list
Disk \\.\PhysicalDrive0 - 299 GB / 279 GiB - CHS 36468 255 63, sector size=512 - HPE LOGICAL VOLUME, S/N:PZXNN0BRHH16OY, FW:5.00
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63, sector size=512 - HPE MSA 1060 iSCSI, S/N:00c0fff6145700007fffa16301000000, FW:I110

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - HPE MSA 1060 iSCSI
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=13983318015 (expected 13983318015)
hdr_lba_start=34
hdr_lba_end=13983317982
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P MS Data                    32768 13983313919 13983281152

search_part()
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63
NTFS at 2/10/9
filesystem size           13983281152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=16777216, part_size=7159439949824, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/10/9
filesystem size           13983281152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 13983313919 13983281152
     NTFS, blocksize=4096, 7159 GB / 6667 GiB
file_win32_pread(524,11,buffer,13983318010(870421/73/47)) read err: read after end of file
file_win32_pread(524,8,buffer,13983318013(870421/73/50)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318004(870421/73/41)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318005(870421/73/42)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318006(870421/73/43)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318007(870421/73/44)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318008(870421/73/45)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318010(870421/73/47)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318012(870421/73/49)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318014(870421/73/51)) read err: read after end of file

Results
   P MS Data                    32768 13983313919 13983281152
     NTFS, blocksize=4096, 7159 GB / 6667 GiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
User avatar
cgrenier
Site Admin
Posts: 5441
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: HPE MSA 1060 Volume showing RAW format on Windows Server 2012

#2 Post by cgrenier »

You can try
- "chkdsk /f d:" (Replace d: by the correct drive letter).
- testdisk, Advanced, List
If it doesn't work, it's probably best to restore from backup
Locked