Join Us!

Notifications
Clear all

Buffalo Terastation  

  RSS
sgreene2991
(@sgreene2991)
Member

What is the best way to image this? I imaged all four drives and pieced them back together with a runtime software, but now I can only see snippets of information. And the image I have doesn't even have a file system, it just says "Unknown Linux Partition". Anyone ever run into this before? How should I go about fixing this?

Quote
Posted : 26/07/2012 5:33 am
joethomas
(@joethomas)
Member

Have you put the RAID together correctly?

ReplyQuote
Posted : 26/07/2012 12:39 pm
Earn
 Earn
(@earn)
Active Member

The Terastation runs a proprietary file system and linux kernel. A tool like Encase will not be able to view this type of file system. A logical image is about the best you can hope for with these. Do a search and you will see this has come up before….

ReplyQuote
Posted : 27/07/2012 1:26 am
BitHead
(@bithead)
Community Legend

TeraStations do not use a proprietary file system, they use XFS.

You can use UFS Explorer with the RAID plugin to reassemble the RAID. Works just fine even on broken TeraStations.

See THIS link for a walk through.

ReplyQuote
Posted : 27/07/2012 11:43 am
sgreene2991
(@sgreene2991)
Member

They do use a proprietary file system that is held by Buffalo, and they refuse to distribute it. The RAID was broken to begin with, and it was reassembled by a data recovery expert. I just can't seem to get at any of the data.

ReplyQuote
Posted : 29/08/2012 11:28 pm
BitHead
(@bithead)
Community Legend

They do use a proprietary file system that is held by Buffalo, and they refuse to distribute it.

No. Buffalo uses a proprietary version of Linux that uses the SGI XFS file system. The file system is NOT proprietary. There are several companies that make software that can reconstruct a NAS RAID.

The RAID was broken to begin with, and it was reassembled by a data recovery expert. I just can't seem to get at any of the data.

Did you follow the links in my post? What did your so called "data recovery expert" provide you? An image file? A logical dump of the files?

ReplyQuote
Posted : 30/08/2012 1:01 am
binarybod
(@binarybod)
Active Member

Try this posting I made a bit back…

http//www.forensicfocus.com/Forums/viewtopic/t=6431/

Paul

ReplyQuote
Posted : 30/08/2012 8:01 pm
Share: