Solved

Data missing from within a .vhd

Posted on 2010-09-15
13
933 Views
Last Modified: 2012-05-10
Our windows 2008 storage server rebooted due to an ntfs error.  When it re-started it went into chkdsk.  This server has TONS of files so it ran for over an hour.  One of its messages was: Inserting an index entry into index $0 of file 25"  After it finished the server seemed fine and I was able to access all the files I tested.  However this server acted as an iscsi datastore for a vmware esx 4.0 server.  I had a 146 gb datastore that contained a vm guest.  When the server restarted the all of the datastores on that server were empty!  So my guests were gone!  I spoke to vmware an all they could come up with was "there was an error on you storage device and we don't know why the files are gone.  Another odd piece is that esx reports the datastore as being a total size of 146 gb and an available size of 94 gb.  the size difference is the size of the missing files.
0
Comment
Question by:jmwp13
  • 4
  • 3
  • 2
  • +3
13 Comments
 
LVL 16

Expert Comment

by:uescomp
ID: 33685846
I have seen some people suggest that you mount the vhd to another VM and run checkdisk on it, but I honestly think that your best bet is to restore the VM from backup.

Also, if you are getting NTFS errors, you need to replace the faulty hard drive or this will happen again, checkdisk is usually only a temporary solution.
0
 
LVL 10

Expert Comment

by:BloodRed
ID: 33685870
Does ESX still detect the iSCSI target as a VMFS datastore or an empty volume with 94GB free?  What software are you using to present the iSCSI storage to the ESX host?
0
 
LVL 22

Expert Comment

by:Luciano Patrão
ID: 33685955
Hi

I had a similar problem a few months ago, all the data was lost because of the chkdsk repair.

Dont now if is the same problem, but never fix a a disk(and large) with chkdsk without a full backup. This will disrupt all the data, the index etc.

Jail
0
 

Author Comment

by:jmwp13
ID: 33685958
I am using Microsoft iscsi software target.  Esx sees the datastore as vmfs, but does not display any files despite it showing 60 + gb's being used.
0
 
LVL 1

Expert Comment

by:avishal19
ID: 33686095
Dear Friend you can use a product call gizmo. You can mount the VHD as logical drive and recover your data. When you use storage make sure that only one windows server access the lun else the problem will re occur
0
 

Author Comment

by:jmwp13
ID: 33686142
I would be willing to try gizmo, but I am able to access vhd with the esx server I am even able to create new folder in the store.  I fear taht the chkdsk messed up mft or some other kind of indexing microsoft does
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 
LVL 1

Expert Comment

by:avishal19
ID: 33686452
ok lets try to boot the the server with acronis disk director you will be able to view the files
0
 

Author Comment

by:jmwp13
ID: 33687040
I am not sure Acronis will work.  I can see the .vhd file on the server.  The problem is vmware does not see any data in the vmfs store, but reports space is being used.
0
 
LVL 22

Accepted Solution

by:
Luciano Patrão earned 500 total points
ID: 33687233
Hi

Like i said before, the Windows chkdsk the disk, but disrupt the data/index of all files. Use the space in the disk, but the index is disrupt, so is not possible to access the data, and even we can access some of the files(in my example was a File Server, and thousands of files) the file is corrupt and cannot be read with success, and many just changed with the $

Many of the files from this file server was word and excel files, the files have the right size, name etc., but when it opens, there is no data inside, only free spaces.

If you do not have a backup from this, sorry but i think it will be very difficult you to get that data with success.

And dont forget this was in the Windows System side, not Linux(VMware) and will be more difficult.

That is my opinion.

Jail
0
 
LVL 28

Expert Comment

by:bgoering
ID: 33687328
0
 
LVL 22

Expert Comment

by:Luciano Patrão
ID: 33687388
Hi bgoering

Yes we can recover a VMFS partition, but like i said in my last message, this was on a Windows System, so i don't think he can recover

But of course, he can do all he can to recover, and test all the solutions. But unfortunately i don't think so

PS: bgoering, I have write that P2V article already, take a look if you have the time. Sorry the spam on the question.

Jail
0
 
LVL 28

Expert Comment

by:bgoering
ID: 33687486
Hi BestWay

I will take a look at your article and I appreciate it and will link to it in the future.

For this question I had read it as if the Windows system was a storage server that presents an iSCSI share to VMware, that in turn creates a partition and formats a VMFS datastore within that partition - so it might work if the partition table on the vhd was damaged by the chkdsk process.
0
 

Author Comment

by:jmwp13
ID: 33687798
I am working with a vmware tech, I will pass this article on to him and see waht he thinks
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now