In fact we acquired a SAN storage device, the HPE MSA 1060. We've been using it for more than a month now and we had no problem until this morning.
We found that the iSCSI disk is unreadable on our Windows Server and presents the disk as a RAW format disk.
I searched the forum but couldn't find anything that helped. I tried what this link suggests but nothing positive.
Here is the link:
viewtopic.php?p=29977&hilit=iscsi+raw#p29977
I followed what is suggested in the last position. That is to say do:
Append --> /dev/sdb --> EFI GPT --> Analyze --> Quit and post the new testdisk.log here:
This is the content of testdisk.log ofter the operation:
Code: Select all
Thu Feb 23 19:08:03 2023
Command line: TestDisk
TestDisk 7.2-WIP, Data Recovery Utility, February 2023
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows Server 2012 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=299966445568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=7159458824192
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=299321554432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=7159439949824
Hard disk list
Disk \\.\PhysicalDrive0 - 299 GB / 279 GiB - CHS 36468 255 63, sector size=512 - HPE LOGICAL VOLUME, S/N:PZXNN0BRHH16OY, FW:5.00
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63, sector size=512 - HPE MSA 1060 iSCSI, S/N:00c0fff6145700007fffa16301000000, FW:I110
Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - HPE MSA 1060 iSCSI
Partition table type: EFI GPT
Analyse Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=13983318015 (expected 13983318015)
hdr_lba_start=34
hdr_lba_end=13983317982
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 32767 32734 [Microsoft reserved partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 32767 32734 [Microsoft reserved partition]
1 P MS Reserved 34 32767 32734 [Microsoft reserved partition]
2 P MS Data 32768 13983313919 13983281152 [Basic data partition]
search_part()
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63
NTFS at 2/10/9
filesystem size 13983281152
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=16777216, part_size=7159439949824, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/10/9
filesystem size 13983281152
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 32768 13983313919 13983281152
NTFS, blocksize=4096, 7159 GB / 6667 GiB
file_win32_pread(544,11,buffer,13983318010(870421/73/47)) read err: read after end of file
file_win32_pread(544,8,buffer,13983318013(870421/73/50)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318004(870421/73/41)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318005(870421/73/42)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318006(870421/73/43)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318007(870421/73/44)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318008(870421/73/45)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318010(870421/73/47)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318012(870421/73/49)) read err: read after end of file
file_win32_pread(544,14,buffer,13983318014(870421/73/51)) read err: read after end of file
Results
P MS Data 32768 13983313919 13983281152
NTFS, blocksize=4096, 7159 GB / 6667 GiB
interface_write()
1 P MS Data 32768 13983313919 13983281152
Thu Feb 23 20:23:39 2023
Command line: TestDisk
TestDisk 7.2-WIP, Data Recovery Utility, February 2023
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows Server 2012 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=299966445568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=7159458824192
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=299321554432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=7159439949824
Hard disk list
Disk \\.\PhysicalDrive0 - 299 GB / 279 GiB - CHS 36468 255 63, sector size=512 - HPE LOGICAL VOLUME, S/N:PZXNN0BRHH16OY, FW:5.00
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63, sector size=512 - HPE MSA 1060 iSCSI, S/N:00c0fff6145700007fffa16301000000, FW:I110
Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - HPE MSA 1060 iSCSI
Partition table type: EFI GPT
Analyse Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=13983318015 (expected 13983318015)
hdr_lba_start=34
hdr_lba_end=13983317982
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P MS Data 32768 13983313919 13983281152
search_part()
Disk \\.\PhysicalDrive1 - 7159 GB / 6667 GiB - CHS 870421 255 63
NTFS at 2/10/9
filesystem size 13983281152
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=16777216, part_size=7159439949824, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/10/9
filesystem size 13983281152
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 32768 13983313919 13983281152
NTFS, blocksize=4096, 7159 GB / 6667 GiB
file_win32_pread(524,11,buffer,13983318010(870421/73/47)) read err: read after end of file
file_win32_pread(524,8,buffer,13983318013(870421/73/50)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318004(870421/73/41)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318005(870421/73/42)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318006(870421/73/43)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318007(870421/73/44)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318008(870421/73/45)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318010(870421/73/47)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318012(870421/73/49)) read err: read after end of file
file_win32_pread(524,14,buffer,13983318014(870421/73/51)) read err: read after end of file
Results
P MS Data 32768 13983313919 13983281152
NTFS, blocksize=4096, 7159 GB / 6667 GiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.