Re: [Burp-users] restore interrupted backup and VSS question

[Graham K. <gr...@gr...>]

On Thu, Sep 29, 2016 at 02:27:13PM +0200, alb...@la... wrote:
> Hello, 
> 
> Thanks for your answer 
> 
> for the VSS problem, I updated both client and server with 2.0.46 
> 
> unfortunately, I didn't manage to make "vss_drives = 0" work 
> 
> here's results : 
> 
> 
> server side : 
> 
> burp monitor 2.0.46 2016-09-29 13:54:16 
> 
> Client: my_computer_22 
> Status: c crashed 
> Backup: 0000001 2016-09-29 13:27:04 
> Browse: Backup log 
> * 2016-09-29 13:27:04: burp[1932] Client version: 2.0.46 
> 2016-09-29 13:27:04: burp[1932] Protocol: 1 
> 2016-09-29 13:27:04: burp[1932] Client is Windows 
> 2016-09-29 13:27:04: burp[1932] Begin phase1 (file system scan) 
> 2016-09-29 13:27:04: burp[1932] main socket: Peer closed SSL session 
> 2016-09-29 13:27:04: burp[1932] error in async_read 
> 2016-09-29 13:27:04: burp[1932] error in phase 1 
> 
> 
> 
> client side : 
> 
> (cmd in administrator mode) 
> c:\Program Files\Burp\bin>burp -a b 
> 
> 2016-09-29 11:09:47: burp[2412] auth ok 
> 2016-09-29 11:09:47: burp[2412] Server version: 2.0.46 
> 2016-09-29 11:09:47: burp[2412] nocsr ok 
> 2016-09-29 11:09:47: burp[2412] SSL is using cipher: DHE-RSA-AES256-GCM-SHA384 T 
> LSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD 
> 2016-09-29 11:09:47: burp[2412] extra_comms_begin ok:autoupgrade:incexc:orig_cli 
> ent:uname:sincexc:msg:forceproto=1:rshash=blake2: 
> 2016-09-29 11:09:47: burp[2412] Server is setting includes/excludes. 
> 2016-09-29 11:09:47: burp[2412] Client accepts. 
> 2016-09-29 11:09:47: burp[2412] Server is forcing protocol 1 
> 2016-09-29 11:09:47: burp[2412] Server is overriding the configuration 
> 2016-09-29 11:09:47: burp[2412] with the following settings: 
> 2016-09-29 11:09:47: burp[2412] include = C:/Users 
> 2016-09-29 11:09:47: burp[2412] cross_all_filesystems = 0 
> 2016-09-29 11:09:47: burp[2412] read_all_fifos = 0 
> 2016-09-29 11:09:47: burp[2412] read_all_blockdevs = 0 
> 2016-09-29 11:09:47: burp[2412] min_file_size = 0 
> 2016-09-29 11:09:47: burp[2412] max_file_size = 0 
> 2016-09-29 11:09:47: burp[2412] split_vss = 0 
> 2016-09-29 11:09:47: burp[2412] strip_vss = 0 
> 2016-09-29 11:09:47: burp[2412] vss_drives = 0 
> 2016-09-29 11:09:47: burp[2412] acl = 1 
> 2016-09-29 11:09:47: burp[2412] xattr = 1 
> 2016-09-29 11:09:47: burp[2412] atime = 0 
> 2016-09-29 11:09:47: burp[2412] scan_problem_raises_error = 0 
> 2016-09-29 11:09:47: burp[2412] overwrite = 0 
> 2016-09-29 11:09:47: burp[2412] strip = 0 
> 2016-09-29 11:09:48: burp[2412] Compression level: 9 
> 2016-09-29 11:09:48: burp[2412] do backup client 
> 2016-09-29 11:09:48: burp[2412] Using librsync hash blake2 
> 2016-09-29 11:09:48: burp[2412] Control handler registered. 
> lnitialize: CoInitializeSecurity returned 0x80010119 
> 2016-09-29 11:09:48: burp[2412] VSS was not initialized properly. 
> 2016-09-29 11:09:48: burp[2412] VSS support is disabled. ERR=Tentative de refere 
> nce a un jeton qui n existe pas 
> 
> 
> 
> I understand the problem appears because my computer has a problem with initializing VSS (which I don't know how to solve without a full reinstallation, but if someone here knows about this, your advices are welcome, of course I've tried all MSDN stuff, restarting service, some registry hints, restore points) 
> 
> but I don't manage to tell Burp to backup without VSS 
> 
> can someone confirm he manages to backup a C: folder with the "vss_drives = 0" option, with the VSS service desactivated ? 
> 
> Thanks for your advices :) 

Hello,

I think that extra work needs to be done on burp to make this work properly.

I see the code tries to run g_pVSSClient->InitializeForBackup() before checking
the drive letters to snapshot, so in your case, setting the drive letters
doesn't help. The code is in src/client/cvss.c.

You could try bypassing that code completely and rebuilding the Windows client
to see if you can get further.
Or you could ask me to do the change, test it, and put it in a future version,
but I probably won't get around to it for a while.
See this page for a more detailed explanation:
http://burp.grke.org/requests.html