ReclaiMe Data Recovery Training

Filesystem Recovery Course - VMFS Recovery Test

What parts are there in an inode?

metadata and payload
metadata, parent pointers, and payload
metadata, segment numbers, and payload

What does payload contain?

up to 1024 pointers or file content
256 pointers or file content
any file related data
512 pointers to large clusters

Check what inode payload can store

128 pointers to large clusters and 128 pointers to small clusters
128 pointers to small clusters and 128 indirect block pointers
up to 256 pointers to small clusters
up to 256 pointers to large clusters
file content for files less than 1 KB
up to 256 indirect block pointers

What is the payload size?

2KB
512B
1KB
8KB

How are large clusters numbered?

sequentially from the beginning of the volume
arbitrarily

Where are small clusters stored?

in inodes
inside a special file
arbitrarily on the volume

What happens when a file is deleted?

an entire inode is overwritten with zeros
metadata in the corresponding inode is overwritten with zeros
payload in the corresponding inode is overwritten with zeros

Where are the numbers of the first and the last segments stored?

in the volume header
in the extent header

What is the recommended data recovery approach for a multi-disk VMFS volume?

first reassemble the volume from extents and then do filesystem recovery
do RAID0 recovery first and then do filesystem recovery
do filesystem recovery on each disk separately

VMFS uses only contiguous areas on a disk to store files

true, files cannot be fragmented
false, files can be fragmented

We have a mailing list in which we talk about interesting cases we encounter and share some tips and tricks.