Notifications
Clear all

Buffalo Terastation

7 Posts
5 Users
0 Likes
4,670 Views
(@sgreene2991)
Posts: 77
Trusted Member
Topic starter
 

What is the best way to image this? I imaged all four drives and pieced them back together with a runtime software, but now I can only see snippets of information. And the image I have doesn't even have a file system, it just says "Unknown Linux Partition". Anyone ever run into this before? How should I go about fixing this?

 
Posted : 26/07/2012 4:33 am
(@joethomas)
Posts: 65
Trusted Member
 

Have you put the RAID together correctly?

 
Posted : 26/07/2012 11:39 am
 Earn
(@earn)
Posts: 146
Estimable Member
 

The Terastation runs a proprietary file system and linux kernel. A tool like Encase will not be able to view this type of file system. A logical image is about the best you can hope for with these. Do a search and you will see this has come up before….

 
Posted : 27/07/2012 12:26 am
(@bithead)
Posts: 1206
Noble Member
 

TeraStations do not use a proprietary file system, they use XFS.

You can use UFS Explorer with the RAID plugin to reassemble the RAID. Works just fine even on broken TeraStations.

See THIS link for a walk through.

 
Posted : 27/07/2012 10:43 am
(@sgreene2991)
Posts: 77
Trusted Member
Topic starter
 

They do use a proprietary file system that is held by Buffalo, and they refuse to distribute it. The RAID was broken to begin with, and it was reassembled by a data recovery expert. I just can't seem to get at any of the data.

 
Posted : 29/08/2012 10:28 pm
(@bithead)
Posts: 1206
Noble Member
 

They do use a proprietary file system that is held by Buffalo, and they refuse to distribute it.

No. Buffalo uses a proprietary version of Linux that uses the SGI XFS file system. The file system is NOT proprietary. There are several companies that make software that can reconstruct a NAS RAID.

The RAID was broken to begin with, and it was reassembled by a data recovery expert. I just can't seem to get at any of the data.

Did you follow the links in my post? What did your so called "data recovery expert" provide you? An image file? A logical dump of the files?

 
Posted : 30/08/2012 12:01 am
binarybod
(@binarybod)
Posts: 272
Reputable Member
 

Try this posting I made a bit back…

http//www.forensicfocus.com/Forums/viewtopic/t=6431/

Paul

 
Posted : 30/08/2012 7:01 pm
Share: