hardlinks errors restoring xp ntfs to vm disk

Post here if you found a bug or something really not expected in the program
m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Tue Jul 20, 2010 1:57 pm

Hi,
i'm experimenting fsa to clone (p2v) phisical machines to virtual ones.

i've booted the source PC with ubuntun 10.04 live CD and then installed version 0.6.8-1ubuntu0.1 from universe repository, as the wiki says (it shoud be pathched with 0.6.9 and 0.6.10 improvements)

and did
#sudo fsarchiver savefs -o -v //fileserver/xptest.fsa /dev/sda1 (xp pro partition)

wich ended like:

Code: Select all

-[00][ 99%][REGFILE ] /WINDOWS/Resources/Themes/Luna.theme
-[00][100%][REGFILE ] /WINDOWS/Resources/Themes/Windows Classic.theme
Statistics for filesystem 0
* files successfully processed:....regfiles=35326, directories=2524, symlinks=0, hardlinks=2, specials=0
* files with errors:...............regfiles=0, directories=0, symlinks=0, hardlinks=0, specials=0
executing [fusermount]...
command [fusermount] returned 1
executing [fusermount -u /tmp/fsa/20100720-133829-00]...
command [fusermount -u /tmp/fsa/20100720-133829-00] returned 0
then i booted a vm (kvm) with the same cd, installed fsa the same way and then
first, created a primary partition with gparted (ntfs)
then
#sudo fssrchiver restfs -v //fileserver/xptest.fsa /dev/vdc1 (third virtio disk)

and this ended like:

Code: Select all

-[00][100%][REGFILEM] /WINDOWS/Resources/styles.css
executing [fusermount]...
command [fusermount] returned 1
executing [fusermount -u /tmp/fsa/20100720-150852-00]...
command [fusermount -u /tmp/fsa/20100720-150852-00] returned 0
Statistics for filesystem 0
* files successfully processed:....regfiles=35326, directories=2524, symlinks=0, hardlinks=0, specials=0
* files with errors:...............regfiles=0, directories=0, symlinks=0, hardlinks=2, specials=0
[edit]
i dumped the whole output to a txt file and tracked those errors.

Code: Select all

-[00][ 71%][HARDLINK] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/ERASER.SYS
[errno=1, Operation not permitted]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/ERASER.SYS,system.ntfs_dos_name) failed
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/ESRDEF.BIN
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/NAVENG.EXP
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/NAVENG.SYS
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/NAVENG.VXD
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/NAVENG32.DLL
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/NAVEX15.EXP
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/NAVEX15.SYS
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/NAVEX15.VXD
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/SCRAUTH.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/TCDEFS.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/TCSCAN7.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/TCSCAN8.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/TCSCAN9.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/TSCAN1.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN.INF
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN1.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN2.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN3.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN4.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN5.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN6.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN7.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN8.DAT
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090115.004/VIRSCAN9.DAT
-[00][ 71%][DIR     ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVEX32A.DLL
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/CCERASER.DLL
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ECMSVR32.DLL
-[00][ 71%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/EECTRL.SYS
-[00][ 71%][HARDLINK] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS
[errno=1, Operation not permitted]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS,system.ntfs_dos_name) failed
SO, they seem not so important to me, but maybe they could happen with some important system files...

what are those hardlinks errors?
how can i solve similar issues?

Thanks, Marco

admin
Site Admin
Posts: 550
Joined: Sat Feb 21, 2004 12:12 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by admin » Tue Jul 27, 2010 11:37 am

Which ntfs-3g version are you using ? Can you please try again with fsarchiver-0.6.10 from SystemRescueCd-1.6.0-beta ? It's just because I don't want to spend time working on a problem with may have been fixed already. So it's important to work on the latest version. The version in Ubuntu has important fixes backports but not all fixes. Can you run this with more details (-vvvv to get details on the screen or -dddd for the same thing in the logfile) ?

m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Wed Jul 28, 2010 2:11 pm

Hi, i used default ubuntu 10.04 ntfs-3g, 1:2010.3.6-1ubuntu1
Now I tried latest systemrescuecd-x86-1.6.0-beta006.iso
and the result is exactly the same, 2 hardlinks restore errors. everything else appears ok.

i have the log file, 20MB, don't know where to upload if needed... or i can extract only some info...

[email protected] /root % fsarchiver probe simple
[======DISK======] [=============NAME==============] [====SIZE====] [MAJ] [MIN]
[sda ] [QEMU HARDDISK ] [ 15.00 GB] [ 8] [ 0]

[=====DEVICE=====] [==FILESYS==] [======LABEL======] [====SIZE====] [MAJ] [MIN]
[loop0 ] [squashfs ] [<unknown> ] [ 212.91 MB] [ 7] [ 0]
[sda1 ] [ntfs ] [System ] [ 15.00 GB] [ 8] [ 1]
[email protected] /root % fsarchiver restfs -dddd /mnt/ts809/xptest.fsa id=0,dest=/dev/sda1
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS,system.ntfs_dos_name) failed
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS,system.ntfs_dos_name) failed
Statistics for filesystem 0
* files successfully processed:....regfiles=35642, directories=2551, symlinks=0, hardlinks=0, specials=0
* files with errors:...............regfiles=0, directories=0, symlinks=0, hardlinks=2, specials=0
[email protected] /root % uname -a
Linux sysresccd 2.6.33-std160-i386 #3 SMP Sun Jul 25 23:12:38 UTC 2010 i686 QEMU Virtual CPU version 0.12.4 GenuineIntel GNU/Linux
[email protected] /root %

Marco

admin
Site Admin
Posts: 550
Joined: Sat Feb 21, 2004 12:12 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by admin » Wed Jul 28, 2010 9:27 pm

Can you please post the 20 lines around each error in this topic ? I just need the lines that are about the file that fails so you can just leave messages about one other files around the file that failed so that I know the context. Thanks

m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Thu Jul 29, 2010 8:14 am

ok, here are both:

Code: Select all

-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/CCERASER.DLL
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/CCERASER.DLL, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/CCERASER.DLL, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/CCERASER.DLL, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/CCERASER.DLL, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ECMSVR32.DLL
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ECMSVR32.DLL, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ECMSVR32.DLL, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ECMSVR32.DLL, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ECMSVR32.DLL, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/EECTRL.SYS
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/EECTRL.SYS, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/EECTRL.SYS, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/EECTRL.SYS, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/EECTRL.SYS, system.ntfs_dos_name)=0
-[00][ 73%][HARDLINK] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS, system.ntfs_times)=0
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS,system.ntfs_dos_name) failed
oper_restore.c#463,extractar_restore_obj_hardlink(): cannot restore file attributes for file [/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS]
dico.c#166,dico_get_generic(): case3: not found
-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ESRDEF.BIN
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ESRDEF.BIN, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ESRDEF.BIN, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ESRDEF.BIN, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ESRDEF.BIN, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.EXP
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.EXP, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.EXP, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.EXP, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.EXP, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.SYS
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.SYS, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.SYS, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.SYS, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.SYS, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.VXD
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.VXD, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.VXD, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.VXD, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/NAVENG.VXD, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found


-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/CCERASER.DLL
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/CCERASER.DLL, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/CCERASER.DLL, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/CCERASER.DLL, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/CCERASER.DLL, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ECMSVR32.DLL
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ECMSVR32.DLL, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ECMSVR32.DLL, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ECMSVR32.DLL, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ECMSVR32.DLL, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 73%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/EECTRL.SYS
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/EECTRL.SYS, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/EECTRL.SYS, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/EECTRL.SYS, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/EECTRL.SYS, system.ntfs_dos_name)=0
-[00][ 73%][HARDLINK] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS, system.ntfs_times)=0
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS,system.ntfs_dos_name) failed
oper_restore.c#463,extractar_restore_obj_hardlink(): cannot restore file attributes for file [/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS]
dico.c#166,dico_get_generic(): case3: not found
-[00][ 74%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ESRDEF.BIN
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ESRDEF.BIN, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ESRDEF.BIN, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ESRDEF.BIN, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ESRDEF.BIN, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 74%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.EXP
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.EXP, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.EXP, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.EXP, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.EXP, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 74%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.SYS
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.SYS, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.SYS, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.SYS, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.SYS, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
-[00][ 74%][REGFILE ] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.VXD
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.VXD, system.ntfs_acl)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.VXD, system.ntfs_attrib)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.VXD, system.ntfs_times)=0
            winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/NAVENG.VXD, system.ntfs_dos_name)=0
dico.c#166,dico_get_generic(): case3: not found
HTH, Marco

admin
Site Admin
Posts: 550
Joined: Sat Feb 21, 2004 12:12 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by admin » Mon Aug 02, 2010 9:19 am

Thanks for these logs. We have to identify the problem on the ERASER.SYS file. It sounds to be unable to restore the short 8.3 version of the filename associated with that file for some reason. It could be ideal if I could reproduce that problem on my machine.

Could you please mount the original ntfs partition with ntfs-3g and run two commands to get more information about that file. The getfattr will tell us what is the short name associated with that file and ntfsinfo can be used to dump all the attributes of that file.

inode number by "ls -li sample-file" then dump the attributes by "ntfsinfo -vi <inode-number>"

1) mkdir -p /mnt/windows
2) mount /dev/sda1 /mnt/windows
3) cd "/mnt/windows/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/"
4) getfattr -h -n system.ntfs_dos_name ERASER.SYS > /var/tmp/fsarchiver-debug-1.log 2>&1
5) get the inode number of that file using "ls -li ERASER.SYS"
6) ntfsinfo -vi <inode-number> > /var/tmp/fsarchiver-debug-2.log 2>&1
7) umount /mnt/windows
8) please post a copy of /var/tmp/fsarchiver-debug-1.log and /var/tmp/fsarchiver-debug-2.log

Many thanks

m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Mon Aug 02, 2010 3:05 pm

ok i will try. I'm not sure to completely understand what you mean after (i understand i have to launch the ntfsinfo command giving the inode but...):
admin wrote:inode number by "ls -li sample-file" then dump the attributes by "ntfsinfo -vi <inode-number>" :
I thought again, and while I am sure that the restfs command was from an updated version (also tried latest sysresccd beta), i'm not sure that the savefs was done with an updated fsarchiver version... Better try that first? maybe it's a savefs problem of an earlier version (although i had 0 hardlinks error during that savefs...)

anyway. i'll try both and post results here...

Marco

admin
Site Admin
Posts: 550
Joined: Sat Feb 21, 2004 12:12 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by admin » Mon Aug 02, 2010 3:44 pm

You should just run an "fsarchiver archinfo <your-archive>" to know which fsarchiver version was used to do the "savefs".

Basically the restfs command fails to restore a ntfs specific attribute on a particular file. This attribute is called "system.ntfs_dos_name" and it's the short name associated with the file. Even if ntfs is a modern filesystem, it still has the ability to store a short filename (like DOS 8.3 names). And fsarchiver just saves all file attributes including that one (ACL/permissions, flags, ...)

the ntfs-3g driver shows all file attributes as linux extrended attributes. So we want to use the "getfattr" command to see what ntfs-3g says when we ask what's the short name associated with that particular file on the original ntfs filesystem.

Also ntfsinfo can give us more details about what attributes are stored on the disk for a particular file. Is needs the inode number of that file, and we get the inode number of a file using "ls -li" on that file.

Then we will see what the short name for that particular file is on the original disk to try to understand what it cannot be successfully restored. Maybe it's special on the original disk, maybe we fail to read it, maybe we fail to restore it, ...

BTW, which windows xp edition are you using ? (Home/Pro, Service pack, language) ?

Any information that can help to reproduce the bug on my system is welcome.

Hope it makes more sense.

m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Tue Aug 03, 2010 9:13 am

well,
1) the partition is win xp pro
2) getfattr log file is just

Code: Select all

# file: ERASER.SYS
system.ntfs_dos_name="ERASER.SYS"

3) ls - li ERASER.SYS returned

Code: Select all

19725 -rwxrwxrwx 2 root root 102448 2009-09-28 15:15 ERASER.SYS
4) so i guess 19725 is the inode number BUT (triple checked)
ntfsinfo -vi 19725 returns

Code: Select all

You must specify exactly one device.

Usage: ntfsinfo [options] device
    -i, --inode NUM  Display information about this inode
    -F, --file FILE  Display information about this file (absolute path)
    -m, --mft        Dump information about the volume
    -t, --notime     Don't report timestamps

    -f, --force      Use less caution
    -q, --quiet      Less output
    -v, --verbose    More output
    -V, --version    Display version information
    -h, --help       Display this help

Developers' email address: [email protected]
Linux NTFS homepage: http://www.linux-ntfs.org

Failed to parse command line options
so, it is an "invalid" inode? i can't tell more...

5) this is the output of archinfo

Code: Select all

====================== archive information ======================
Archive type: 			filesystems
Filesystems count: 		1
Archive id: 			4c498b5b
Archive file format: 		FsArCh_002
Archive created with: 		0.6.8
Archive creation date: 		2010-07-22_12-28-00
Archive label: 			<none>
Minimum fsarchiver version:	0.6.4.0
Compression level: 		3 (gzip level 6)
Encryption algorithm: 		none

===================== filesystem information ====================
Filesystem id in archive: 	0
Filesystem format: 		ntfs
Filesystem label: 		System
Filesystem uuid: 		26AC3F75AC3F3E9D
Original device: 		/dev/sda1
Original filesystem size: 	40.16 GB (43116879872 bytes)
Space used in filesystem: 	12.78 GB (13720018944 bytes)

HTH Marco

admin
Site Admin
Posts: 550
Joined: Sat Feb 21, 2004 12:12 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by admin » Tue Aug 03, 2010 9:31 am

Thanks for that. The archive has been created using fsarchiver-0.6.8. In the past I have seen a very similar problem which was a problem in ntfs-3g. But the error code is a bit different ("Input/output error" instead of "Invalid argument")

It would be worth trying to recreate the archive using fsarchiver-0.6.10 and a recent ntfs-3g version as recent ntfs-3g versions comes with bug fixes. Could you please recreate the archive from SystemRescueCd-1.6.0-beta ? It comes with very up to date fsarchiver and ntfs-3g (advanced release).

You are correct, the inode number is 19725. Can you then run the following command:
ntfsinfo -vi 19725 /dev/sda1

Many thanks.

m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Tue Aug 03, 2010 9:38 am

i see only now that ntfsinfo syntax needs a device specified...
i tried, but:

Code: Select all

[email protected]:/mnt/windows/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002$ ntfsinfo -vi 19725 /dev/sda1 
Access is denied because the NTFS volume is already exclusively opened.
The volume may be already mounted, or another software may use it which
could be identified for example by the help of the 'fuser' command.
You can use force option to avoid this check, but this is not recommended
and may lead to data corruption.
Failed to open '/dev/sda1'.
but /dev/sda1 is still mounted in /mnt/windows
if i umount it:

Code: Select all

[email protected]:/$ ntfsinfo -vi 19725 /dev/sda1
Error opening partition device: Permission denied.
Failed to startup volume: Permission denied.
Failed to mount '/dev/sda1': Permission denied.
Failed to open '/dev/sda1'.
see mount output

Code: Select all

[email protected]:/$ mount
aufs on / type aufs (rw)
none on /proc type proc (rw,noexec,nosuid,nodev)
none on /sys type sysfs (rw,noexec,nosuid,nodev)
none on /dev type devtmpfs (rw,mode=0755)
none on /dev/pts type devpts (rw,noexec,nosuid,gid=5,mode=0620)
/dev/sr0 on /cdrom type iso9660 (ro,noatime)
/dev/loop0 on /rofs type squashfs (ro,noatime)
none on /sys/fs/fuse/connections type fusectl (rw)
none on /sys/kernel/debug type debugfs (rw)
none on /sys/kernel/security type securityfs (rw)
none on /dev/shm type tmpfs (rw,nosuid,nodev)
tmpfs on /tmp type tmpfs (rw,nosuid,nodev)
none on /var/run type tmpfs (rw,nosuid,mode=0755)
none on /var/lock type tmpfs (rw,noexec,nosuid,nodev)
none on /lib/init/rw type tmpfs (rw,nosuid,mode=0755)
binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw,noexec,nosuid,nodev)
gvfs-fuse-daemon on /home/ubuntu/.gvfs type fuse.gvfs-fuse-daemon (rw,nosuid,nodev,user=ubuntu)
//ts809.local/backup_vm on /mnt/ts809 type cifs (rw,mand)
where //ts809.local/backup_vm on /mnt/ts809 type cifs (rw,mand)
is my NAS storage (it holds my .fsa files)

HTH more, Marco

m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Tue Aug 03, 2010 9:41 am

admin wrote:Thanks for that. The archive has been created using fsarchiver-0.6.8. In the past I have seen a very similar problem which was a problem in ntfs-3g. But the error code is a bit different ("Input/output error" instead of "Invalid argument")

It would be worth trying to recreate the archive using fsarchiver-0.6.10 and a recent ntfs-3g version as recent ntfs-3g versions comes with bug fixes. Could you please recreate the archive from SystemRescueCd-1.6.0-beta ? It comes with very up to date fsarchiver and ntfs-3g (advanced release).
Ok, i will try that. I have systemrescuecd-x86-1.6.0-beta006.iso, just have to burn the beta CD and then try

Will report later, or tomorrow...

Bye, Marco

m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Tue Aug 03, 2010 12:07 pm

Hi, i just ended the new test.

1) i repeated savefs with systemrescuecd-x86-1.6.0-beta006.iso
2) saved to xptest2.fsa, 0 errors...

Code: Select all

Statistics for filesystem 0
* files successfully processed:....regfiles=35642, directories=2551, symlinks=0, hardlinks=2, specials=0
* files with errors:...............regfiles=0, directories=0, symlinks=0, hardlinks=0, specials=0
executing [fusermount]...
command [fusermount] returned 1
executing [fusermount -u /tmp/fsa/20100803-130025-00]...
command [fusermount -u /tmp/fsa/20100803-130025-00] returned 0
archinfo output

Code: Select all

[email protected] /root % fsarchiver archinfo /mnt/ts809/xptest2.fsa
====================== archive information ======================
Archive type:                   filesystems
Filesystems count:              1
Archive id:                     4c5df46a
Archive file format:            FsArCh_002
Archive created with:           0.6.10
Archive creation date:          2010-08-03_13-00-25
Archive label:                  <none>
Minimum fsarchiver version:     0.6.4.0
Compression level:              3 (gzip level 6)
Encryption algorithm:           none

===================== filesystem information ====================
Filesystem id in archive:       0
Filesystem format:              ntfs
Filesystem label:               System
Filesystem uuid:                26AC3F75AC3F3E9D
Original device:                /dev/sda1
Original filesystem size:       40.16 GB (43116879872 bytes)
Space used in filesystem:       12.78 GB (13720018944 bytes)
3) Then, restored on the vm, booting with the same sysresccd iso, and unfortunately got again those 2 hardlinks errors

Code: Select all

executing [fusermount]...
command [fusermount] returned 1
executing [fusermount -u /tmp/fsa/20100803-112854-00]...
command [fusermount -u /tmp/fsa/20100803-112854-00] returned 0
Statistics for filesystem 0
* files successfully processed:....regfiles=35642, directories=2551, symlinks=0, hardlinks=0, specials=0
* files with errors:...............regfiles=0, directories=0, symlinks=0, hardlinks=2, specials=0
digged through the log file (sorry, forgot to do -dddd, just -d)

Code: Select all

-[00][ 73%][HARDLINK] /Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20090927.002/ERASER.SYS,system.ntfs_dos_name) failed

-[00][ 73%][HARDLINK] /Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Programmi/File comuni/Symantec Shared/VirusDefs/20100721.002/ERASER.SYS,system.ntfs_dos_name) failed
4) then, some difference! i mounted the /dev/sda1, and tried getfattr but

Code: Select all

#getfattr -h -n system.ntfs_dos_name ERASER.SYS > /var/tmp/fsarchiver-debug-1b.log
ERASER.SYS: system.ntfs_dos_name: Operation not supported
!? not supported, now?

5) then got new inode

Code: Select all

#ls -li ERASER.SYS
15176 -r-------- 2 root root 102448 2009-09-28 15:15 ERASER.SYS
then umounted /dev/sda1 and tried ntfsinfo and got a log, finally, which is posted here:

Code: Select all

Dumping Inode 15176 (0x3b48)
Upd. Seq. Array Off.:	 48 (0x30)
Upd. Seq. Array Count:	 3 (0x3)
Upd. Seq. Number:	 65 (0x41)
LogFile Seq. Number:	 0x0
MFT Record Seq. Numb.:	 1 (0x1)
Number of Hard Links:	 2 (0x2)
Attribute Offset:	 56 (0x38)
MFT Record Flags:	 IN_USE 
Bytes Used:		 480 (0x1e0) bytes
Bytes Allocated:	 1024 (0x400) bytes
Next Attribute Instance: 5 (0x5)
MFT Padding:	00 00 
Dumping attribute $STANDARD_INFORMATION (0x10) from mft record 15176 (0x3b48)
	Attribute length:	 96 (0x60)
	Resident: 		 Yes
	Name length:		 0 (0x0)
	Name offset:		 0 (0x0)
	Attribute flags:	 0x0000
	Attribute instance:	 0 (0x0)
	Data size:		 72 (0x48)
	Data offset:		 24 (0x18)
	Resident flags:		 0x00
	ReservedR:		 0 (0x0)
	File Creation Time:	 Mon Sep 28 15:16:14 2009
	File Altered Time:	 Mon Sep 28 15:15:46 2009
	MFT Changed Time:	 Tue Aug  3 11:39:07 2010
	Last Accessed Time:	 Thu Jul 22 10:07:20 2010
	File attributes:	 ARCHIVE (0x00000000)
	Maximum versions:	 0 
	Version number:		 0 
	Class ID:		 0 
	User ID:		 0 (0x0)
	Security ID:		 275 (0x113)
	Quota charged:		 0 (0x0)
	Update Sequence Number:	 0 (0x0)
Dumping attribute $FILE_NAME (0x30) from mft record 15176 (0x3b48)
	Attribute length:	 136 (0x88)
	Resident: 		 Yes
	Name length:		 0 (0x0)
	Name offset:		 0 (0x0)
	Attribute flags:	 0x0000
	Attribute instance:	 3 (0x3)
	Data size:		 112 (0x70)
	Data offset:		 24 (0x18)
	Resident flags:		 0x01
	ReservedR:		 0 (0x0)
	Parent directory:	 15173 (0x3b45)
	File Creation Time:	 Mon Sep 28 15:16:14 2009
	File Altered Time:	 Mon Sep 28 15:15:46 2009
	MFT Changed Time:	 Tue Aug  3 11:39:07 2010
	Last Accessed Time:	 Thu Jul 22 10:07:20 2010
	Allocated Size:		 0 (0x0)
	Data Size:		 0 (0x0)
	Filename Length:	 23 (0x17)
	File attributes:	 ARCHIVE (0x00000000)
	Namespace:		 POSIX
	Filename:		 'EraserUtilRebootDrv.sys'
Dumping attribute $FILE_NAME (0x30) from mft record 15176 (0x3b48)
	Attribute length:	 112 (0x70)
	Resident: 		 Yes
	Name length:		 0 (0x0)
	Name offset:		 0 (0x0)
	Attribute flags:	 0x0000
	Attribute instance:	 4 (0x4)
	Data size:		 86 (0x56)
	Data offset:		 24 (0x18)
	Resident flags:		 0x01
	ReservedR:		 0 (0x0)
	Parent directory:	 15267 (0x3ba3)
	File Creation Time:	 Mon Sep 28 15:16:14 2009
	File Altered Time:	 Mon Sep 28 15:15:46 2009
	MFT Changed Time:	 Tue Aug  3 11:39:07 2010
	Last Accessed Time:	 Thu Jul 22 10:07:20 2010
	Allocated Size:		 106496 (0x1a000)
	Data Size:		 102448 (0x19030)
	Filename Length:	 10 (0xa)
	File attributes:	 ARCHIVE (0x00000000)
	Namespace:		 Win32 & DOS
	Filename:		 'ERASER.SYS'
Dumping attribute $DATA (0x80) from mft record 15176 (0x3b48)
	Attribute length:	 72 (0x48)
	Resident: 		 No
	Name length:		 0 (0x0)
	Name offset:		 64 (0x40)
	Attribute flags:	 0x0000
	Attribute instance:	 2 (0x2)
	Lowest VCN		 0 (0x0)
	Highest VCN:		 25 (0x19)
	Mapping pairs offset:	 64 (0x40)
	Compression unit:	 0 (0x0)
	Data size:		 102448 (0x19030)
	Allocated size:		 106496 (0x1a000)
	Initialized size:	 102448 (0x19030)
	Runlist:	VCN		LCN		Length
			0x0		0x2c54b4		0x1a
End of inode reached
Well, if you didnt't felt asleep reading :-) now it's up to you understand what happens here, or ask for other tests...
I'm willing to help, because fsarchiver is great and really helped me a lot

Marco

admin
Site Admin
Posts: 550
Joined: Sat Feb 21, 2004 12:12 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by admin » Tue Aug 03, 2010 1:00 pm

Many thanks for these new tests. I really appreciate your efforts, I hope we will find a solution.

1) What's the exact name of the symantec product you are using (name, version) ? Is there a free demo version that I could try to install to see if I have the same problem ?

2) It sounds this file has two file names associated with it: "EraserUtilRebootDrv.sys" and "ERASER.SYS". But I would expect the long file name to be the default filename seen by fsarchiver or by "ls" and it sounds the default filename is "ERASER.SYS". Can you compare with few other files of the same disk to see if you can also see two names like that when you use ntfsinfo on that other file ? It would be interesting to see if we can identify something special about that file that make either ntfs-3g or fsarchiver fail.

3) If you copy that file to another ntfs partition / disk, do you still have the same problem ? If you have some space on your disk, can you create a minimal ntfs partition (eg 20 MB partition) and put that file on it and run another test on that small partition. If it still fails you could send me a DD of this small partition and then I could work on it. You will probably have to copy the file from windows in order to preserve all its attributes, and then to preserve the problem. If the copy looks good, another option to preserve all attributes is to try to archive it / extract it with WinRAR. It has the ability to preserve things such as ntfs streams, permissions, ... but we may have to select the right options.

Thanks for your help

m.ardito
Posts: 17
Joined: Tue Jul 20, 2010 1:30 pm

Re: hardlinks errors restoring xp ntfs to vm disk

Post by m.ardito » Tue Aug 03, 2010 2:05 pm

I'll boot the real xp and try what you suggested

For now i've found another ERASER.SYS on the partition, which does not have the problem.

it's in
/mnt/windows/Programmi/File comuni/Symantec Shared/VirusDefs/BinHub
and has:
- only 1 hardlink (reported by ntfsinfo)
- no long name (no POSIX namespace)

dont' know if this means nothing, just noted.

ntfsinfo shows:

Code: Select all

Dumping Inode 28773 (0x7065)
Upd. Seq. Array Off.:    48 (0x30)
Upd. Seq. Array Count:   3 (0x3)
Upd. Seq. Number:        5 (0x5)
LogFile Seq. Number:     0x8e3482e
MFT Record Seq. Numb.:   1 (0x1)
Number of Hard Links:    1 (0x1)
Attribute Offset:        56 (0x38)
MFT Record Flags:        IN_USE
Bytes Used:              344 (0x158) bytes
Bytes Allocated:         1024 (0x400) bytes
Next Attribute Instance: 4 (0x4)
MFT Padding:    00 00
Dumping attribute $STANDARD_INFORMATION (0x10) from mft record 28773 (0x7065)
        Attribute length:        96 (0x60)
        Resident:                Yes
        Name length:             0 (0x0)
        Name offset:             0 (0x0)
        Attribute flags:         0x0000
        Attribute instance:      0 (0x0)
        Data size:               72 (0x48)
        Data offset:             24 (0x18)
        Resident flags:          0x00
        ReservedR:               0 (0x0)
        File Creation Time:      Mon Nov  5 16:34:02 2007
        File Altered Time:       Wed Feb 15 00:00:00 2006
        MFT Changed Time:        Mon Nov  5 16:33:59 2007
        Last Accessed Time:      Thu Nov 15 12:04:28 2007
        File attributes:         ARCHIVE (0x00000000)
        Maximum versions:        0
        Version number:          0
        Class ID:                0
        User ID:                 0 (0x0)
        Security ID:             307 (0x133)
        Quota charged:           0 (0x0)
        Update Sequence Number:  0 (0x0)
Dumping attribute $FILE_NAME (0x30) from mft record 28773 (0x7065)
        Attribute length:        112 (0x70)
        Resident:                Yes
        Name length:             0 (0x0)
        Name offset:             0 (0x0)
        Attribute flags:         0x0000
        Attribute instance:      2 (0x2)
        Data size:               86 (0x56)
        Data offset:             24 (0x18)
        Resident flags:          0x01
        ReservedR:               0 (0x0)
        Parent directory:        28643 (0x6fe3)
        File Creation Time:      Mon Nov  5 16:34:02 2007
        File Altered Time:       Mon Nov  5 16:34:02 2007
        MFT Changed Time:        Mon Nov  5 16:34:02 2007
        Last Accessed Time:      Mon Nov  5 16:34:02 2007
        Allocated Size:          0 (0x0)
        Data Size:               0 (0x0)
        Filename Length:         10 (0xa)
        File attributes:         ARCHIVE (0x00000000)
        Namespace:               Win32 & DOS
        Filename:                'ERASER.sys'
Dumping attribute $DATA (0x80) from mft record 28773 (0x7065)
        Attribute length:        72 (0x48)
        Resident:                No
        Name length:             0 (0x0)
        Name offset:             0 (0x0)
        Attribute flags:         0x0000
        Attribute instance:      3 (0x3)
        Lowest VCN               0 (0x0)
        Highest VCN:             11 (0xb)
        Mapping pairs offset:    64 (0x40)
        Compression unit:        0 (0x0)
        Data size:               47760 (0xba90)
        Allocated size:          49152 (0xc000)
        Initialized size:        47760 (0xba90)
        Runlist:        VCN             LCN             Length
                        0x0             0xa41ff         0xc
End of inode reached

Post Reply