HP3000 STORE/RESTORE dates
Andrew Lammiman
does it convert the date and time into bytes?
Andrew
Andrew Lammiman
00 03 2A B1 37 8D 10 6B
"Andrew Lammiman" <alam...@emaglink.com> wrote in message
news:3ffe904a$0$15354$afc3...@news.easynet.co.uk...
Keven Miller
Such that today would be
(hex) D0 0A 06 14 00 00 SAT, JAN 10, 2004, 6:20 AM
[calendar 2 bytes] [clock 4 bytes]
But I don't see this type of pattern in the data you provided.
> 00 03 2A B1 37 8D 10 6B
>
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
Andrew Lammiman
for anyone who can spot the modify/creation dates etc.
And explain how they are encoded;
0000 05 5C 00 01 3E 03 80 60 00 2F F4 BE 43 82 08 D5 \ > ?` /C, ﾕ
0016 11 D8 5D FD 00 00 00 00 00 00 21 80 00 00 00 00 ﾘ] !?
0032 00 00 21 80 01 00 00 05 01 01 00 00 00 00 01 E0 !? � 0048 00 00 02 20 00 00 00 00 00 00 00 00 00 00 00 00
0064 00 00 00 00 44 49 53 43 20 20 20 20 20 20 20 20 DISC
0080 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
0096 20 20 20 20 20 31 00 00 41 42 4F 52 54 52 54 20 1 ABORTRT
0112 20 20 20 20 20 20 20 20 43 4F 50 59 4C 49 42 20 COPYLIB
0128 20 20 20 20 20 20 20 20 00 00 00 00 4F 52 44 45 ORDE
0144 52 53 20 20 20 20 20 20 20 20 20 20 00 00 00 00 RS
0160 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
0176 4D 47 52 20 20 20 20 20 20 20 20 20 20 20 20 20 MGR
0192 00 00 00 00 FC 00 00 00 04 5C 00 01 3E 03 80 60 � \ > ?`
0208 00 01 04 05 00 00 00 00 00 00 03 00 00 02 D8 15 ﾘ
0224 5B 62 67 F5 00 02 D8 15 5B 62 67 F5 00 03 2A A1 [bg� ﾘ [bg� *｡
0240 E7 2C FF 0F 00 02 D8 15 5B 63 AF 2A 00 00 21 80 � ﾘ [cｯ* !?
0256 00 00 00 30 00 00 00 68 00 00 00 68 00 00 00 22 0 h h "
0272 00 00 00 00 00 00 00 00 00 00 21 80 01 00 01 00 !?
0288 00 00 01 00 00 00 01 00 00 00 00 50 00 00 00 F0 P � 0304 00 03 00 00 00 25 00 01 00 25 04 1C 20 20 00 00 % %
0320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0336 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0352 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0368 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0384 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0416 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0432 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0448 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0464 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0496 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0512 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0528 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0544 00 01 00 00 00 00 21 80 00 00 00 00 00 00 21 80 !? !?
0560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0576 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0592 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
"Keven Miller" <kev...@exegesys.com> wrote in message
news:MdmdneIoqPM...@fidnet.com...
Andrew Lammiman
I believe the date is stored as microseconds since 1970. A bit over accurate
in my opinion! Can anyone confirm this?
"Andrew Lammiman" <alam...@emaglink.com> wrote in message
news:40028002$0$128$afc3...@news.easynet.co.uk...
Tracy Pierce
Reporting-MTA: dns;emag09.emaglink.com
Received-From-MTA: dns;mail17.messagelabs.com
Arrival-Date: Mon, 12 Jan 2004 10:51:45 -0500
Final-Recipient: rfc822;alam...@emaglink.com
Action: failed
Status: 5.1.1
2) give us a hint? when was this tape created? (and if you don't know, why
not try creating one with a known date & time, and look at that?)
Tracy Pierce
> -----Original Message-----
> From: Andrew Lammiman [mailto:alam...@EMAGLINK.COM]
> Sent: Monday, January 12, 2004 3:18 AM
> To: HP30...@RAVEN.UTC.EDU
> Subject: Re: HP3000 STORE/RESTORE dates
>
>
> Ok here is the entire header from a file created by STORE. A
> bottle of pop
> for anyone who can spot the modify/creation dates etc.
>
> And explain how they are encoded;
>
> 0000 05 5C 00 01 3E 03 80 60 00 2F F4 BE 43 82 08 D5 \
> > ?` /ô¾C, Õ
> 0016 11 D8 5D FD 00 00 00 00 00 00 21 80 00 00 00 00 Ø]ý !?
> 0032 00 00 21 80 01 00 00 05 01 01 00 00 00 00 01 E0
> !? à
> 0048 00 00 02 20 00 00 00 00 00 00 00 00 00 00 00 00
> 0064 00 00 00 00 44 49 53 43 20 20 20 20 20 20 20 20 DISC
> 0080 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
> 0096 20 20 20 20 20 31 00 00 41 42 4F 52 54 52 54 20
> 1 ABORTRT
> 0112 20 20 20 20 20 20 20 20 43 4F 50 59 4C 49 42 20
> COPYLIB
> 0128 20 20 20 20 20 20 20 20 00 00 00 00 4F 52 44 45
> ORDE
> 0144 52 53 20 20 20 20 20 20 20 20 20 20 00 00 00 00 RS
> 0160 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
> 0176 4D 47 52 20 20 20 20 20 20 20 20 20 20 20 20 20 MGR
> 0192 00 00 00 00 FC 00 00 00 04 5C 00 01 3E 03 80 60
> ü \ > ?`
> 0208 00 01 04 05 00 00 00 00 00 00 03 00 00 02 D8 15
> Ø
> 0224 5B 62 67 F5 00 02 D8 15 5B 62 67 F5 00 03 2A A1
> [bgõ Ø [bgõ *¡
> 0240 E7 2C FF 0F 00 02 D8 15 5B 63 AF 2A 00 00 21 80 ç,ÿ
> Ø [c¯* !?
> 0256 00 00 00 30 00 00 00 68 00 00 00 68 00 00 00 22
> 0 h h "
> 0272 00 00 00 00 00 00 00 00 00 00 21 80 01 00 01 00 !?
> 0288 00 00 01 00 00 00 01 00 00 00 00 50 00 00 00 F0
> P ð
Andrew Lammiman
2) Not entirely sure when it was created but I'm guessing late 90's due to
some dates I've found in some files.
3) Unable to create another tape as I don't have an HP3000.
This one should keep you busy for a while :)
Another question which you might be able to help with is the type of dates
stored. I think there are 4. Creation, Modify, Access and Change State. Does
this sound about right?
Andrew
"Tracy Pierce" <TPi...@goldengate.org> wrote in message
news:YtKdnZTlXa5...@fidnet.com...
Mark Wonsil
> Ok here is the entire header from a file created by STORE. A bottle
> of pop for anyone who can spot the modify/creation dates etc.
>
Is that data in user labels and not the file label?
Keven Miller
/:L c1s,-3
MON, JAN 12, 2004, 9:12 AM
********************
FILE: C1S.KEVEN.NMTOOLS
FILE CODE : 0 FOPTIONS: ASCII,FIXED,NOCCTL,STD
BLK FACTOR: 16 CREATOR : KEVEN.NMTOOLS
REC SIZE: 80(BYTES) LOCKWORD:
BLK SIZE: 1280(BYTES) SECURITY--READ : ANY
EXT SIZE: 2000(SECT) WRITE : ANY
NUM REC: 120 APPEND : ANY
NUM SEC: 48 LOCK : ANY
NUM EXT: 1 EXECUTE : ANY
MAX REC: 204313 **SECURITY IS ON
MAX EXT: 32 FLAGS : NO ACCESSORS
NUM LABELS: 0 CREATED : TUE, NOV 18, 2003, 10:10 AM
MAX LABELS: 0 MODIFIED: TUE, NOV 18, 2003, 10:12 AM
DISC DEV #: 15 ACCESSED: SAT, JAN 10, 2004, 10:15 PM
SEC OFFSET: 0 LABEL ADDR: $000000E9.$00571E20
VOLCLASS : DEV_TL:DISC
/:l c1s,-1
MON, JAN 12, 2004, 9:12 AM
F = C1S
00000000 44495343 20202020 20202020 20202020 20202020 ....DISC
20202020 20202020 20202020 20310000 43315320 20202020 1..C1S
20202020 20202020 4B455645 4E202020 20202020 20202020 KEVEN
00000000 4E4D544F 4F4C5320 20202020 20202020 00000000 ....NMTOOLS ....
20202020 20202020 20202020 20202020 4B455645 4E202020 KEVEN
4E4D544F 4F4C5320 00000000 FC000000 04650001 294E9CC2 NMTOOLS .... ....e..)N.ô
00010005 00000000 00000300 0003CC62 EDE4B833 0003CC62 ..............äbÚð¡3..äb
EDE4B833 0003D097 3D6AC186 0003CC62 F5D492EF 00002580 Úð¡3..Å.=jê...äb¾å.ÿ..%.
00000030 00031E19 00000078 00000007 00000000 00000000 ...0.......x............
00F967D0 00000000 00000000 00000000 00000050 00000500 .ªgÅ...............P....
00100000 07D00020 07D00000 20200000 .....Å. .Å.. ..
assuming we have 4 dates, Create, Allocated, Accessed, Modified,
I believe these values are the dates
3CC62 EDE4B833
3CC62 EDE4B833
3D097 3D6AC186
3CC62 F5D492EF
I haven't figured how to decode yet.
For your label
02D815 5B6267F5
02D815 5B6267F5
03@AA1 E72CFF0F
02D815 5B63AF2A
___________________________________________________________________
Keven Miller mailto:kev...@exegesys.com http://www.exegesys.com
Andrew Lammiman
tapes.
All help appreciated.
"Mark Wonsil" <won...@4m-ent.com> wrote in message
news:Qcmdne-xj9T...@fidnet.com...
JON OSE
Creation Timestamp (REC) Put: Yes; Verify: Yes; Release 3.0Returns or modifies the number of microseconds from January 1, 1970 to the time that the file was created.Record type: longint_type (Refer to appendix B.)
5005
Last Access Timestamp (REC) Put: Yes; Verify: Yes; Release 3.0Returns or modifies the number of microseconds from January 1, 1970 to the time that the file was last accessed.Record type: longint_type (Refer to appendix B.)
5006
Last Modify Timestamp (REC) Put: Yes; Verify: Yes; Release 3.0Returns or modifies the number of microseconds from January 1, 1970 to the time that the file was last modified.Record type: longint_type (Refer to appendix B.)
5007
File Allocation Timestamp (REC) Put: Yes; Verify: Yes; Release 3.0Returns or modifies the number of microseconds from January 1, 1970 to the time that the file was allocated.Record type: longint_type (Refer to appendix B.)
Keven Miller <Kev...@exegesys.com> wrote: From my own file LISTF,-3 and LISTF,-1
********************
FILE: C1S.KEVEN.NMTOOLS
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
---------------------------------
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
Andrew Lammiman
:)
Andrew
Tracy Pierce
format. Keep this going until you really get your answer, please! Stan?
Tracy Pierce
> -----Original Message-----
> From: Andrew Lammiman [mailto:alam...@EMAGLINK.COM]
> Sent: Monday, January 12, 2004 6:33 AM
> To: HP30...@RAVEN.UTC.EDU
> Subject: Re: HP3000 STORE/RESTORE dates
>
>
> Well incase anyone is interested (and it doesn't look like
> many of you are)
> I believe the date is stored as microseconds since 1970. A
> bit over accurate
> in my opinion! Can anyone confirm this?
>
> "Andrew Lammiman" <alam...@emaglink.com> wrote in message
> news:40028002$0$128$afc3...@news.easynet.co.uk...
> > Ok here is the entire header from a file created by STORE.
> A bottle of pop
> > for anyone who can spot the modify/creation dates etc.
> >
Stan Sieler
> I think LOTS of people are quite interested in knowing the STORE tape
> format. Keep this going until you really get your answer, please! Stan?
Over the years, we've put in a *lot* of effort to understand the
STORE/RESTORE format. :)
Despite that, we've encourgaged/asked HP several times to publish the
layout ... with no success. :(
In the case of file timestamps, IIRC, they're found in the tape copy
of the disk file label for each file. The layout for that is "FLAB_T",
the field is "TIME_STAMPS", and the timetamps are indeed 64 bit integer
number of microseconds since 1970-01-01.
:debug
symopen symos.osc75.telesup
ft "flab_t" m
c
<plug>
Much of that effort is coming out as part of our Rosetta STORE product,
which will allow users to restore files from MPE STORE tapes (and
ORBiT backup tapes) onto HP-UX, Linux, and Windows systems.
Rosetta can do neat things like restore IMAGE databases into Eloquence
databases.
</plug>
--
Stan Sieler sie...@allegro.com
www.allegro.com/sieler/wanted/index.html www.sieler.com
Ed Sharpe
pc easily here....
ed sharpe
G?tz Neumann
> No idea I'm afraid I'm not an HP3000 user. My job is to recover data from
> tapes.
So from /www.emaglink.com/ it appears Data Recovery is part
of your business. I think usually Netiquette would have
meant that you volunteered that background on your first
posting, since you are AFAIK not a regular around here (so we do
not know you or your company) and there maybe a commercial interest
of yours (which might conflict with similar interests of others
in this group).
Just my 2 Eurocents,
Goetz
Tracy Pierce
including his background would have helped answer his question a bit;
including a working email address would have helped too. But including it
would probably have raised raised hp's (and this list's) paranoid
security-minded pipple, too. "What, you have your hands on a STORE tape?
NOOO! You could steal all of MPE from that!" Well, of course that's BS,
but it seems to be hp's position re publishing the STORE format. hp care to
chime in here?
Go figger, when it comes to extracting peoples' names addresses & SSNs from
that tape (live people with valuable identities, as opposed to MPE which
can't get thrown away fast enough), no one would ask - you'd just go look
for the data you want. Possession of the tape == possession of the data,
down to the level you know how to decrypt. Can you say degauss?
Tracy Pierce
wait: netiquette? .02 eurocents worth of reply to that - it was even
ON-TOPIC!
> -----Original Message-----
> From: G?tz Neumann [mailto:goe...@T-ONLINE.DE]
> Sent: Tuesday, January 13, 2004 8:48 AM
> To: HP30...@RAVEN.UTC.EDU
> Subject: Re: HP3000 STORE/RESTORE dates
>
>
Stan Sieler
> I believe the date is stored as microseconds since 1970. A bit over accurate
> in my opinion! Can anyone confirm this?
Well, I can't confirm the "A bit over accurate" statement :)
They are in microseconds, "system time" (not GMT), since 1970.
MPE/iX is much more advanced than many operating systems in this area.
Most Unix's, for example, have:
(a) fewer timestamps (e.g., usually just "accessed" and
"modified", compared to MPE/iX's "accessed", "modified",
"allocated", "created" (which can differ if a file was RESTOREd),
and "state change").
and
(b) they're in units of 32-bit signed seconds since 1970 ...
something that runs out of time in January, 2038)
MPE/iX's won't run out until about 2103-01-10,
and it provides greater resolution (microsecond), which is
useful now that computers can create more than one file a second.
OTOH, the Unix decision to keep file timestamps in GMT is much better
than MPE's use of "system time" to keep file timestamps.
("system time" might have been somewhat acceptable on a STORE tape if
the STORE tape header had recorded the "system time" - GMT offset.)