NAS Imaging questio...
 
Notifications
Clear all

NAS Imaging question

12 Posts
10 Users
0 Reactions
1,743 Views
mgilhespy
(@mgilhespy)
Estimable Member
Joined: 16 years ago
Posts: 102
 

mhallman, I'm one of those engineers David is being so kind about. PM me if you still require assistance with this.

-Mike


   
ReplyQuote
(@douglasbrush)
Prominent Member
Joined: 16 years ago
Posts: 812
 

Even if it was as simple as acquiring physical drives or grabbing an image remotely, I think we are missing the bigger point here - having an image won't do us much good if nothing we have will interpret the filesystem. WAFL is an entirely different animal, especially when you throw deduplication into the mix. If you have disk images, you'll have to tackle sewing the RAID-6 back together first.

I don't have the info you'll need to get the job done, but I didn't want you to get the idea that you'd be able to grab some disk images and all would be good.

Good luck and be sure to share what you find out!

Been working on with one today from the approach of a file system analysis. Found this as a good little brief of how the NetApp file system works particularly in a Win AD environment with CIFS.

http//www.wafl.co.uk/qtree/

and if you like reading patent applications
http//www.google.com/patents?id=JuTOAAAAEBAJ&lpg=PA18&zoom=4&ots=pEYWQtFsfE&dq=qtree%20%22f-response%22&pg=PA5#v=onepage&q&f=false

Would be an interesting research area in addition to general enterprise storage file system forensics.


   
ReplyQuote
Page 2 / 2
Share: