NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
RN212 all files gone except iCloud
Adding StephenB and Sandshark Hi again, concerning issue with RN212. Had about 4TB stored, all are seemingly gone except a lone iCloud folder under Pictures share. History: 1) 3 NAS boxes have...
On the problem itself - though it's too early to say what the chance of getting the data back is, it doesn't sound good. Anything you write to the NAS will lower the odds. So I would either shut it down, or reboot it in read-only mode.
It sounds you are saying that the NAS suddenly has a healthy but empty volume (apart from that one picture folder) I am wondering
- If you had other shares (not the default ones) before that have now disappeared.
- if the failure might have given you a completely empty volume, with the iClouds photos resynced by ReadyCloud from your phone after the failure occured.
On the logs: One option is to contact the mods ( JohnCM_S and Marc_V ) via PM (private message), and ask them to analyze the logs. Send them a link to this thread and a download link (google drive, icloud, dropbox, etc) link to the log zip file. Don't post the log zip here.
When I'm looking at them, I always look in disk_info.log at the disk health, and mdstat.log to see what disks are currently in the volume RAID array (md12x RAID groups are the ones in the data volume). I generally also check the bottom of volume.log, as that will tell me the OS partition fullness, and the maintenance bit at the bottom can also be useful.
Readynasd.log and status.log will give you a high-level view of what the ReadyNAS application was doing, and that might give you some clues on what else went on around the time you had to reset your ReadyCloud password.
You can delve deeper by looking in system.log, kernel.log and perhaps dmesg.log though there is a lot in there.
Thanks StephenB for the info below. To answer your first question, there are no new shares, just the defaults.
Re: logs, checked the following:
1) disk_info: Health Data on both drives is similar, and looks benign:
Health data
ATA Error Count: 0
Reallocated Sectors: 0
Reallocation Events: 0
Spin Retry Count: 0
Command Timeouts: 0
Current Pending Sector Count: 0
Uncorrectable Sector Count: 0
Temperature: 37
Start/Stop Count: 2
Power-On Hours: 2085
Power Cycle Count: 2
Load Cycle Count: 35104
2) mdstat: Looks normal from what I can see, RAID1 with 2 disks, State="clean", Failed Devices=0, Active Devices=2
md127 : active raid1 sda3[0] sdb3[1]
11714035648 blocks super 1.2 [2/2] [UU]
md1 : active raid1 sda2[0] sdb2[1]
523712 blocks super 1.2 [2/2] [UU]
md0 : active raid1 sda1[0] sdb1[1]
4190208 blocks super 1.2 [2/2] [UU]
3) volume: shows very little data used, ugh
=== df -h ===
Filesystem Size Used Avail Use% Mounted on
udev 10M 4.0K 10M 1% /dev
/dev/md0 3.7G 1.1G 2.5G 30% /
tmpfs 1009M 4.0K 1009M 1% /dev/shm
tmpfs 1009M 560K 1009M 1% /run
tmpfs 505M 1.1M 504M 1% /run/lock
tmpfs 1009M 0 1009M 0% /sys/fs/cgroup
/dev/md127 11T 20G 11T 1% /data
/dev/md127 11T 20G 11T 1% /apps
/dev/md127 11T 20G 11T 1% /home
=== df -i ===
Filesystem Inodes IUsed IFree IUse% Mounted on
udev 187927 228 187699 1% /dev
/dev/md0 1048576 12024 1036552 2% /
tmpfs 188818 2 188816 1% /dev/shm
tmpfs 188818 403 188415 1% /run
tmpfs 188818 25 188793 1% /run/lock
tmpfs 188818 9 188809 1% /sys/fs/cgroup
/dev/md127 0 0 0 - /data
/dev/md127 0 0 0 - /apps
/dev/md127 0 0 0 - /home
=== maintenance history ===
device operation start_time end_time result details
---------- --------- ------------------- ------------------- --------- ----------------------------------------------------------------
data resilver 2020-06-29 20:38:58 2020-07-01 00:09:36 completed
Unfortunately, that does appear that your diagnosis is correct -- your files have vanished. You can try to see if ReclaiME can recover any files that you don't have backed up. You can download a free copy and see if it will do the job before you pay for the actual recovery: https://www.reclaime.com/library/nas-recovery.aspx .
Thanks Sandshark , I have the files saved on the other two NAS's, believe everything is there. Before I try to run a recovery program though, or just copy all the files back onto the NAS, I really want to figure out the HOW... how did these files vanish? Because without root cause, I fear it's going to happen again, either on this one or on the other two, or all three. I've had the RN314 and RN212 for 7 and 5 years, respectively, without ever losing a byte. This year I upgraded both with new drives (you both were very helpful with the data migration). And within a few months I already have one bad NAS. And by the way, it's the NAS with the supposedly bulletproof Ironwolf drives. The other NAS with the more questionable WD Red 4TB's is just fine. Is there any way to look through the log files to determine if there was a purposeful erase?
jimk1963 wrote:
Is there any way to look through the log files to determine if there was a purposeful erase?
There should be some evidence if the RAID array being recreated.
FWIW, you have very unusual symptoms. I've seen many cases where the volume goes inactive - but I've not seen a case of a spontaneous factory reset (or a volume being spontaneously destroyed and recreated) on an OS-6 ReadyNAS.
I am wondering if something else might have gone wrong - a run-away sync program that for some reason decided to delete the files on your NAS??? Does anyone else have access to the NAS?
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
