Solved

How to recover data overwritten on HP LTO-5 tape media with Symantec Backup Exec

Posted on 2014-02-06
7
1,705 Views
Last Modified: 2014-07-23
Hello All,

I have accidentally overwritten data for a couple of months on an  LTO 5 Ultrium tape media using Symantec Backup Exec. I accidentally run a backup job with a media set that overwrites data that is 3 weeks old on a tape that was originally supposed to store data indefinitely.

Is there any tool, method, or procedure that I can use to get access to the earlier jobs written on the tape before the last job that wrote?

My setup is:
HP Ultrium LT05 Tape Drive
Symantec Backup Exec 2010 R3
Server 2008R2.
0
Comment
Question by:it_gsr
  • 3
  • 3
7 Comments
 
LVL 6

Expert Comment

by:alexgreen312
ID: 39838453
No there isn't, unfortunately you can't scrape a tape to recover old data, couple that with the fact you've already over written it the data is lost and unrecoverable.

Sorry :(
0
 

Author Comment

by:it_gsr
ID: 39838582
Hi alexgreen312,

What is your opinion of data recovery services like Krollontrack.com who promise recovery of overwitten data on tape media? Do they actually work?
0
 
LVL 6

Accepted Solution

by:
alexgreen312 earned 500 total points
ID: 39838591
I would suspect the data would be incomplete, because of the way magnetic tape media works it would be extremely hard to get the data back in a consistent state. This also depends on how many times the tapes have been overwritten.

Cost would also be a big factor here, I had to send a hard drive to a recovery company and that cost £1200 for 40GB
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 

Author Comment

by:it_gsr
ID: 39838774
Thanks for sharing the experience alexgreen312.

I will explore that option as a last resort. In the meantime, I will take a look at a couple of tape imaging software (e.g. Kernel for Tape Recovery) to see if there would be any luck.

I will report back with the outcome/s.
0
 

Author Comment

by:it_gsr
ID: 39839798
No luck, the tape imaging apps don't even detect the tape drives attached to the media servers.
0
 
LVL 6

Expert Comment

by:alexgreen312
ID: 39841427
:-(

Sorry, the only option is sending it away and they will quote you depending on how much data they can recover, as I said previously it's not a cheap option by any means.
0
 
LVL 27

Expert Comment

by:Steve
ID: 39923132
It's true. you are very unlikely to get anything back.

From a pure physics point of view, it is theoretically possible to work out what data may have been stored on magnetic media after it has been overwritten due to various clever factors involved in the magnetic heads/voltages/magical pixies etc.

it is VERY expensive and while it is possible to identify specific 0s & 1s that may have existed in the past, but the chances of finding enough of them in a continuous block to recreate an entire file is very unlikely.

Most data recovery companies rely on the fact that 'overwritten' usually means that only parts of a given file may be missing. This is due to the random nature of how hard drives store data and may leave large portions of old files in place for months/years after it has been 'deleted'.

tapes are not random however, and using the tape again has almost certainly gone over the old data sequentially.

If your budget allows it, send them away and give it a go, but I doubt you would get much back for your money.


a few references for you to have a look at:

http://www.google.co.uk/url?sa=t&rct=j&q=&esrc=s&source=web&cd=11&cad=rja&uact=8&ved=0CEUQFjAAOAo&url=http%3A%2F%2Fprivazer.com%2Foverwriting_hard_drive_data.The_great_controversy.pdf&ei=F0EgU-GiFcGI7AaysoGABg&usg=AFQjCNG3-6QQaLJodmVMIqpCiyxC5Y6a1A

http://www.makeuseof.com/tag/impossible-recover-data-overwritten-hard-drive-technology-explained/
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Finding original email is quite difficult due to their duplicates. From this article, you will come to know why multiple duplicates of same emails appear and how to delete duplicate emails from Outlook securely and instantly while vital emails remai…
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now