9 Mar
2024
9 Mar
'24
10:27 a.m.
On Fri, Mar 8, 2024 at 8:59 PM segaloco via TUHS <tuhs(a)tuhs.org> wrote:
Hello everyone, I reach out in my time of need regarding a potential source of DMERT
materials. I've recently come into possession of a hard disk unit from a 5ESS
switch, presumably the 5ESS-2000 variant, part UN 375G:
https://i.imgur.com/yQzY5Hs.jpeg
The actual disk itself appears to be a Ultra320 SCSI disk, which I unfortunately do not
have the tools to do anything with myself. After looking into various solutions, I'm
not getting the warm fuzzies about finding the necessary hardware on my first shot, these
sorts of hardware specifics are not my strong suit. The story I got is it is from a
working system, so could possibly have artifacts, but at the same time, I've already
sunk a little over $1,000 into getting this, I'm hesitant to drop more on hardware
I'm not 100% confident is correct for the job.
The later SCSI specs are pretty forgiving as far as backwards
compatibility goes, a U320 drive will run fine on basically anything
with 68-pins other than HVD which you aren't likely to encounter.
U160 and up are alwasy LVD. There are some U320 PCIe cards but they
seem to be pricey these days (on the order of $100). If you have a
system with PCI (or PCI-X) you can pick up a capable card for $10. An
internal cable with a built in terminator is about $15 and that is the
only other thing you need.
Typically you can just do a 'dd' of the drive to get a raw image from
any fair modern UNIX. Then you can try 'binwalk' to see what the disk
structure is like.. hard to say where to go from there without seeing
the output of this.
Does anyone have any recommendations, whether a service, hardware, anything, that I could
use to try and get at what is on this disk? Even if it's just sending it off to
someone along with enough storage for them to make me a dd image of the thing, I just feel
so close yet so far on finally figuring out if I've managed to land a copy of DMERT.
If you really need to outsource it, I have the requisite equipment.
Might take me a couple weeks to turn around due to work pressures.
Thanks in advance for any advice, I'm really hoping that the end of this story is I
find DMERT artifacts to get archived and preserved, that would be such a satisfying
conclusion to all this 3B20/5ESS study as of late. I wish I had the resources to see the
rest through myself but this is getting into an area I have quite a bit of trepidation
regarding. What I don't want to do is inadvertently damage something by getting it
wrong.
- Matt G.