| 摘要 |
A method, article of manufacture, and apparatus for protecting data. This might include identifying a file modification, modifying a previous file entry, wherein the previous file entry is stored in a key value database, and creating a new file entry in the key value database. Modifying the previous file entry might include modifying the end version of the entry. |
| 主权项 |
1. A method for protecting data, the method comprising:
parsing a virtual machine snapshot to identify a virtual machine master file table (“MFT”); parsing the MFT into file information; saving the file information in a database comprising keys and metadata records, wherein a metadata record includes a file name, a start version, an end version, a timestamp, and a snapshot file taken at the timestamp; using a directory to identify keys in the database, wherein the keys comprise directories from virtual machine snapshot and the metadata records in the database comprise both directories and the snapshot files from the virtual file system; walking through each identified key to identify metadata records; identifying, by a processor, a file modification since being previously backed UP based on the walk through, wherein the identifying of the file modification comprises:
in the event that a file has been determined to be modified since being previously backed up:
modifying the start version and the end version of the metadata record associated with an earlier modified file to have the same value, the earlier modified file having been previously backed up, the timestamp of the metadata record associated with the earlier modified file having a time corresponding to a previous backup time; andadding a new metadata record associated with a latest modified file, the new metadata record including the timestamp corresponding to a most recent backup time and a new snapshot file of the latest modified file taken at the timestamp corresponding to the most recent backup time, the start version of the new metadata record being different from the end version of the new metadata record; andin the event that a file has been determined not to be modified since being previously backed up:
omitting adding a new metadata record associated with a latest modified file; and restoring a first file having a plurality of versions from a backup, comprising:
in the event that the latest version of the first file is to be retrieved from the backup:
locating a first metadata record associated with the first file, the metadata record having the timestamp including a most recent time, and the end version being different from the start version; andrestoring the snapshot file associated with the first metadata record; andin the event that an earlier version of the first file is to be retrieved from the backup:
locating a second metadata record associated with the first file, the metadata record having the start version same as the end version; andrestoring the snapshot file associated with the second metadata record. |
