当前位置:网站首页>Mysql database recovery case sharing
Mysql database recovery case sharing
2022-06-24 07:41:00 【North Asia data security and rescue】
The case shared this time is about the recovery of stored data , On storage RAID The crash caused the storage to fail to start . Store internal common 6 More than virtual machines , among LINUX virtual machine 3 Important data for customers . The engineer preliminarily analyzed that the storage structure is that all physical disks are in one storage pool , The storage pool is divided into several LUN,LUN1 yes vmfs volume , Three stations LINUX The virtual machine is also in this . 1、 restructuring RAID During the reorganization process, Ben RAID5 defect 2 Block plate ( The hot spare disk replaces the first drop disk after the drop , After that, another disk dropped to make RAID5 In a degraded state . Finally, the disc was scratched when the third disc was dropped RAID collapse ), The data of the lost disk cannot be obtained directly through verification , Therefore, you can only use full disks of the same size 0 Reorganize the image ( This method can only be used in emergency situations , Because it depends on empty images RAID The file system structure will be seriously damaged , It is equivalent to that each strip will be missing two blocks of data ). 2、 extract LUN Analyze the storage structure , Gets the of the storage partition MAP block . Find MAP After the block is parsed, each LUN Data block pointer for , Write a data extraction program to extract LUN debris . After extraction, the fragments are spliced , Complete composition LUN. export LUN All virtual machines in the , Try to start . After exporting the virtual machine, try to start , Same as expected , The operating system is damaged and the virtual machine cannot be started . 3、 Extract the files in the virtual machine When the virtual machine fails to start, you can only take the second place , Extract the files in the virtual machine . Test after taking out the file , Found that most of the files were corrupted , Only a few small files can be opened . After communicating with the customer, I learned that there are... In the virtual machine MYSQL database , Because of the particularity of the underlying storage of the database , Data can be extracted by scanning data pages . After this virtual machine is found, the virtual machine is found to enable snapshot , When both the parent disk and the snapshot file are damaged, the normal merge operation cannot be completed , Using independent research and development of North Asia VMFS The snapshot merging program performs snapshot merging . 4、 obtain MYSQL Data page and analyze according to MYSQL Data page features scan and export data pages (innodb The engine can use this scheme ,myisam Because no “ Data pages ” The concept is therefore not available ), Analyze the system table to obtain the information of each user table , According to the... Of each table ID Split the data page . 5、 Extract table structure Because the database has been used for a long time , The table structure has also changed many times , In addition, some data is lost after the system table is damaged , There is a lot of resistance in the record extraction process . First, get the table structure of each table in the original version of the database : The parent disk before the snapshot was merged because it was written earlier , Use the first drop disk for verification to obtain the complete data of this file , Then extract the table structure of each table in the database , After that, the client provided the latest version of the database table creation script . Extract record : Two groups of different table structures are used to extract data records and import them into the recovery environment MYSQL In the database , Then eliminate the garbled data caused by the change of table structure in each table , Finally, the two sets of data are exported as .sql file . 6、 Data recovery results Because the database table structures of the two versions are different , So I contacted the application engineer of the client for debugging . Import the platform after debugging , verified , The data can be recovered successfully .
边栏推荐
- [wustctf2020] climb
- 后疫情时代下,家庭服务机器人行业才刚启航
- [WUSTCTF2020]爬
- Étalonnage de la caméra (objectif et principe d'étalonnage)
- 2.1.1 QML grammar foundation I
- [Proteus] Arduino uno + ds1307+lcd1602 time display
- Commandes de console communes UE
- 【MySQL 使用秘籍】克隆数据表、保存查询数据至数据表以及创建临时表
- [pointnet] matlab simulation of 3D point cloud target classification and recognition based on pointnet
- [TS] function type
猜你喜欢

6000多万铲屎官,捧得出一个国产主粮的春天吗?
![[image fusion] image fusion based on NSST and PCNN with matlab code](/img/b4/61a5adde0d0bfc5a339ef8ab948d43.png)
[image fusion] image fusion based on NSST and PCNN with matlab code

The fund management of London gold is more important than others

Only two lines are displayed, and the excess part is displayed with Ellipsis

bjdctf_2020_babystack

Buuctf misc grab from the doll
![[GUET-CTF2019]zips](/img/79/22ff5d4a3cdc3fa9e0957ccc9bad4b.png)
[GUET-CTF2019]zips

RDD basic knowledge points
![(cve-2020-11978) command injection vulnerability recurrence in airflow DAG [vulhub range]](/img/33/d601a6f92b1b73798dceb027263223.png)
(cve-2020-11978) command injection vulnerability recurrence in airflow DAG [vulhub range]

Alibaba cloud full link data governance
随机推荐
UTC、GMT、CST
Global and Chinese market of basketball uniforms 2022-2028: Research Report on technology, participants, trends, market size and share
(CVE-2020-11978)Airflow dag中的命令注入漏洞复现【vulhub靶场】
Common coding and encryption in penetration testing
[WordPress website] 5 Set code highlight
[equalizer] bit error rate performance comparison simulation of LS equalizer, def equalizer and LMMSE equalizer
Commandes de console communes UE
Win11 points how to divide disks? How to divide disks in win11 system?
[DDCTF2018](╯°□°)╯︵ ┻━┻
Tidb operator source code reading (IV) control cycle of components
使用SystemParametersInfo访问用户界面设置
Shader 常用函数
Deploy L2TP in VPN (Part 2)
[TS] function type
[Lua language from bronze to king] Part 2: development environment construction +3 editor usage examples
[WUSTCTF2020]alison_ likes_ jojo
Global and Chinese market of inline drip irrigation 2022-2028: Research Report on technology, participants, trends, market size and share
How to turn on win11 notebook power saving mode? How to open win11 computer power saving mode
Obtain the package name, application name, icon, etc. of the uninstalled APK through packagemanager. There is a small message
第三方软件测试公司如何选择?2022国内软件测试机构排名