Raid Reconstruction

[c1pher]

Hey,

I'm trying to reconstruct NAS Raid using the OSForensics tool. It's not detecting the Raid level and details. Is Raid 6 supported? Even the image is not getting generated properly. Please suggest what to do.

Thanks in advance.

[David (PassMark)]

There are two aspects to RAID support. The metadata format and the RAID config.

The metadata formats that should work are,

Metadata Format

Intel Matrix RAID

Linux mdadm RAID

SNIA DDFv1

Highpoint v2 RocketRAID

Highpoint v3 RocketRAID

Adaptec HostRAID

Integrated Technology Express RAID

JMIcron RAID

LSILogic V2 MegaRAID

LSILogic V3 MegaRAID

nVidia MediaShield

Promise FastTrak

Silicon Image Medley RAID

Silicon Integrated Systems RAID

VIA Tech V-RAID

And the RAID configs that should work are.


But there are 100s of permutations and we haven't tested all of them.

For it to work and be able to view the files at the end, there is also a further dependency on the source disk images (E01 in this case) and the final file system (e.g. NTFS, EXT3).

We've never looked at RAID 6, as it wasn't in common use. But I do note that you have only 3 disks in your list, and RAID 6 needs at least 4 drives to work. So I don't think it couldn't ever work like this.