mhallman, I'm one of those engineers David is being so kind about. PM me if you still require assistance with this.
-Mike
Even if it was as simple as acquiring physical drives or grabbing an image remotely, I think we are missing the bigger point here - having an image won't do us much good if nothing we have will interpret the filesystem. WAFL is an entirely different animal, especially when you throw deduplication into the mix. If you have disk images, you'll have to tackle sewing the RAID-6 back together first.
I don't have the info you'll need to get the job done, but I didn't want you to get the idea that you'd be able to grab some disk images and all would be good.
Good luck and be sure to share what you find out!
Been working on with one today from the approach of a file system analysis. Found this as a good little brief of how the NetApp file system works particularly in a Win AD environment with CIFS.
http//
and if you like reading patent applications
http//
Would be an interesting research area in addition to general enterprise storage file system forensics.