NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

jimk1963's avatar
jimk1963
Virtuoso
Sep 24, 2020

RN212 all files gone except iCloud

Adding StephenB  and Sandshark 

 

Hi again, concerning issue with RN212. Had about 4TB stored, all are seemingly gone except a lone iCloud folder under Pictures share. History:

1) 3 NAS boxes have been idling for over a month without access

2) Last week usin gReadyCloud iOS app, attempted to pull a file - couldn't login

3) Selected "reset password", email sent, link followed, password updated, able to access RN212 again

4) But instead of all the files I expected, only a lonely iCloud Photos folder (with data)

5) Default Shares (Documents, Music, Pictures, Videos) are all visible using Windows Explorer and using Chrome Browser (admin page). All are empty now

6) Confirmed firmware is up to date, as is anti-virus scanner

7) Also had a scare on other two NAS's but after rebooting them (in addition to RN212) and rebooting my PC, was able to see all files on RN314 and RN528X. However, RN212 remains blank

8) Downloaded log files, no idea what to look for

 

Please help!

 

13 Replies

Replies have been turned off for this discussion
  • StephenB's avatar
    StephenB
    Guru - Experienced User

    On the problem itself - though it's too early to say what the chance of getting the data back is, it doesn't sound good.  Anything you write to the NAS will lower the odds.  So I would either shut it down, or reboot it in read-only mode.

     

    It sounds you are saying that the NAS suddenly has a healthy but empty volume (apart from that one picture folder)  I am wondering

    • If you had other shares (not the default ones) before that have now disappeared.
    • if the failure might have given you a completely empty volume, with the iClouds photos resynced by ReadyCloud from your phone after the failure occured.

     

    On the logs: One option is to contact the mods ( JohnCM_S and Marc_V ) via PM (private message), and ask them to analyze the logs.  Send them a link to this thread and a download link (google drive, icloud, dropbox, etc) link to the log zip file.  Don't post the log zip here.

     

    When I'm looking at them, I always look in disk_info.log at the disk health, and mdstat.log to see what disks are currently in the volume RAID array (md12x RAID groups are the ones in the data volume).  I generally also check the bottom of volume.log, as that will tell me the OS partition fullness, and the maintenance bit at the bottom can also be useful.  

     

    Readynasd.log and status.log will give you a high-level view of what the ReadyNAS application was doing, and that might give you some clues on what else went on around the time you had to reset your ReadyCloud password.

     

    You can delve deeper by looking in system.log, kernel.log and perhaps dmesg.log though there is a lot in there.

     

     

     

    • Sandshark's avatar
      Sandshark
      Sensei

      Are you using the admin credentials for any/all of these?  If not, do, in case it's just a permissions issue.  I had some folders get the permissions changed without me knowing why, and a few others have reported the same.  Resetting them fixed it.

       

      Are you comfortable with SSH?  That would be the place to absolutely see whether the files are really still there, but have been rendered invisible or inaccessible to you via the other protocols.

       

      Could this be from some sync process going horribly wrong?  Files were removed from the other location, or the other location became inaccessible, and the sync removed them from the NAS?

      • jimk1963's avatar
        jimk1963
        Virtuoso

        Thanks Sandshark  and StephenB .

         

        Haven't ran SSH in a few months, forgot most of it but will try to bring it up again.

         

        Re: admin, I am completely confused on this. Two of the NAS's login using my email address, and one uses "admin". 

         

        The RN212 (with the problem): when I log in, under "Accounts" it just shows "Admin" and then to the right it shows my email under "Secondary Members". 

         

        Is there a simple way to "reset all permissions" as you indicated? 

         

        Sorry for naive questions, I'm really poor at understanding permissions, admin vs. users, etc., especially on this NAS platform.

    • jimk1963's avatar
      jimk1963
      Virtuoso

      Thanks StephenB  for the info below. To answer your first question, there are no new shares, just the defaults.

       

      Re: logs, checked the following:

       

      1) disk_info:  Health Data on both drives is similar, and looks benign:

      Health data
      ATA Error Count: 0
      Reallocated Sectors: 0
      Reallocation Events: 0
      Spin Retry Count: 0
      Command Timeouts: 0
      Current Pending Sector Count: 0
      Uncorrectable Sector Count: 0
      Temperature: 37
      Start/Stop Count: 2
      Power-On Hours: 2085
      Power Cycle Count: 2
      Load Cycle Count: 35104

       

      2) mdstat: Looks normal from what I can see, RAID1 with 2 disks, State="clean", Failed Devices=0, Active Devices=2

       

      md127 : active raid1 sda3[0] sdb3[1]
      11714035648 blocks super 1.2 [2/2] [UU]

      md1 : active raid1 sda2[0] sdb2[1]
      523712 blocks super 1.2 [2/2] [UU]

      md0 : active raid1 sda1[0] sdb1[1]
      4190208 blocks super 1.2 [2/2] [UU]

       

      3) volume: shows very little data used, ugh

       

      === df -h ===
      Filesystem Size Used Avail Use% Mounted on
      udev 10M 4.0K 10M 1% /dev
      /dev/md0 3.7G 1.1G 2.5G 30% /
      tmpfs 1009M 4.0K 1009M 1% /dev/shm
      tmpfs 1009M 560K 1009M 1% /run
      tmpfs 505M 1.1M 504M 1% /run/lock
      tmpfs 1009M 0 1009M 0% /sys/fs/cgroup
      /dev/md127 11T 20G 11T 1% /data
      /dev/md127 11T 20G 11T 1% /apps
      /dev/md127 11T 20G 11T 1% /home
      === df -i ===
      Filesystem Inodes IUsed IFree IUse% Mounted on
      udev 187927 228 187699 1% /dev
      /dev/md0 1048576 12024 1036552 2% /
      tmpfs 188818 2 188816 1% /dev/shm
      tmpfs 188818 403 188415 1% /run
      tmpfs 188818 25 188793 1% /run/lock
      tmpfs 188818 9 188809 1% /sys/fs/cgroup
      /dev/md127 0 0 0 - /data
      /dev/md127 0 0 0 - /apps
      /dev/md127 0 0 0 - /home

      === maintenance history ===
      device operation start_time end_time result details
      ---------- --------- ------------------- ------------------- --------- ----------------------------------------------------------------
      data resilver 2020-06-29 20:38:58 2020-07-01 00:09:36 completed

       

       

      • Sandshark's avatar
        Sandshark
        Sensei

        Unfortunately, that does appear that your diagnosis is correct -- your files have vanished.  You can try to see if ReclaiME can recover any files that you don't have backed up.  You can download a free copy and see if it will do the job before you pay for the actual recovery: https://www.reclaime.com/library/nas-recovery.aspx .

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More