- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - OpenVMS
- >
- Re: INDEXF.SYS corrupted..
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-12-2006 09:20 AM
тАО11-12-2006 09:20 AM
Anyone encounter below error before? Tried the anal/disk/repair, no luck.. Need help..
PMAX01> dir /sec
Directory PMAX01$DKB200:[000000]
000000.DIR;1 file identification number check
BACKUP.SYS;1 file identification number check
BADBLK.SYS;1 file identification number check
BADLOG.SYS;1 file identification number check
BITMAP.SYS;1 file identification number check
CIM0.DIR;1 file identification number check
CIMCOMMON.DIR;1 file identification number check
CONTIN.SYS;1 file identification number check
CORIMG.SYS;1 file identification number check
INDEXF.SYS;1 file identification number check
JSS$V10.DIR;1 file identification number check
SECURITY.SYS;1 file identification number check
SYS0.DIR;1 file identification number check
SYSLOST.DIR;1 file identification number check
VOLSET.SYS;1 file identification number check
Total of 15 files.
PMAX01> anal/disk /repair pmax01$dkb200:
%ANALDISK-F-OPENINDEX, error opening INDEXF.SYS, RVN 1
-SYSTEM-W-FILENUMCHK, file identification number check
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-12-2006 10:48 AM
тАО11-12-2006 10:48 AM
Solution- Since you can still do a dir/sec, I guess it is still mounted. This may help you find some data in in-memory structures, but not too likely.
I would $MOUNT/FOR and DUMP/BLO=COUN=10.
See if you can recognize the data at all.
- Dust of, or quickly aquire a "VMS File System Internals" book by Kirby McCoy ISBN 1-55558-056-4
- Go locate a recent backup, you are likely to need it. If lucky you will not need the actual data, just the basic layout. Restore the backup to a 'spare' disk and dump the first few blocks to see what they should look like.
Cluster 1, almost always starting at LBN 0 of the drive, starts with a boot block and a home block, followed by more homeblocks.
The homeblock (any homeblock copy), in the longword at offset 8 points to an alternate indexf.sys file header. This is potentially a key to volume recovery. You may be able to use that to reconstruct the real header... but I suspect the damage is bigger.
I'm sure there are folks out there who are willign to help you recover the data, for a fee.
Your main assignment now is to figure out how good your backup is, and to get an impression of the extent of the damage.
Good luck!
Hein van den Heuvel
HvdH Performance Consulting.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-13-2006 08:17 PM
тАО11-13-2006 08:17 PM
Re: INDEXF.SYS corrupted..
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-13-2006 08:56 PM
тАО11-13-2006 08:56 PM
Re: INDEXF.SYS corrupted..
http://www.digiater.nl/dfu.html
However I think it may be time to test your recovery strategy,
Purely Personal Opinion
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-13-2006 09:53 PM
тАО11-13-2006 09:53 PM
Re: INDEXF.SYS corrupted..
As has been noted, this can get VERY tricky, VERY VERY fast.
The First Step (and most important rule): DO NOT DO ANYTHING that will write to the disk. And I do mean ANYTHING. Do a SHOW DEV/FULL on the device and save all of the output.
The Second Step: Immediately copy any critically important files BEFORE dismounting the disk.
Third Step: Make a PHYSICAL backup of the drive. From this point on, treat the original drive as if it were evidence in a criminal case: Remove it from active use, and take steps to ensure that it is not accidentilly used.
Then restore the PHYSICAL backup that was taken to a scratch drive, and take a look at what data is in the HOME BLOCK (LBN 1) and the BOOT BLOCK (LBN 0). As I believe Hein mentioned, somebody with LOGIO probably overwrote the disk, it is important to identify how this was done to prevent a recurrence.
Then, it is a matter of recreating enough of the disk structure to attempt recovery of the files, if the data is still intact.
Having done this process during my career, it can be done, but it does take time. If the actual data is intact, and the damage does not extend too far, excellent results are possible, but there are no guarantees.
In terms of recovery, the most important question is: How valuable is the data, as compared to restoring the volume to a new disk from the most recent backup. In any event, I still strongly recommend identifying how this happened to prevent a repeated incident.
- Bob Gezelter, http://www.rlgsc.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-13-2006 10:41 PM
тАО11-13-2006 10:41 PM
Re: INDEXF.SYS corrupted..
I never got the opportunity to try out all the useful steps, the production had put on pressure to receovery everything within few hours. I worked through the night, directly replaced a new disk and restore all the data from the backup tape - at least tested the backup and recovery steps works :)
"Possibly a program with LOGIO priv overwriting the first few blocks of the disk." This is very useful info, the next steps need to find out why this happended and how to present it. Any clue how to investicate this?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-13-2006 10:53 PM
тАО11-13-2006 10:53 PM
Re: INDEXF.SYS corrupted..
without the data from the corrupted disk, which you could look at by dumping the blocks and trying to draw conclusions from the contents to guess about which application might have written that data, it won't be possible to make an educated guess at what might have happened.
You could still dig through .LOG files from the relevant period of time (minutes or hours before the problem has been first detected) to try to spot anything unusual.
Volker.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО11-13-2006 11:29 PM
тАО11-13-2006 11:29 PM
Re: INDEXF.SYS corrupted..
From your followup posting "... directly replaced a new disk and restore all the data from the backup tape - ..."
If there is not a miscommunication here, and you retained the original corrupted disk unaltered, then it may be possible to identify what happened.
Please confirm that the original disk is preserved.
- Bob Gezelter, http://www.rlgsc.com