Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

How Does Norton Ghost Work?

Feb 19, 2006 12:20AM PST

Does anyone out there really know how Ghost 9.0 does its saves? I ask because of some things I've observed while using it. It just makes me immensely curious.

Observation #1: Ghost's speed.
Ghost certainly isn't doing a regular copy. It works much too quickly to be doing a 'logical' copy of my system's directory structure and files.

Observation #2: Ghost is 'quiet.'
By 'quiet' I mean that there's no rapid-fire, high-speed movement of the disk drive's heads on either the drive being saved, nor on the destination drive. In contrast, with a normal directory/file copy, there's considerable head movement as the disk refers to the FAT, the directory entries, and the files themselves, I presume.

Observation #3: You shouldn't remove Ghost from your System Tray.
Thinking I could improve my system's performance a tad and because I didn't see a reason for Ghost to run in the System Tray at all times, I simply removed the Ghost shortcut from my Startup folder. How much that helped, if at all, I do not know.

If you do prevent Ghost from running at all times, this is what happened to me. When I tried to run Ghost from my Start/Program menu, although the program promptly started, almost all the normal function buttons you'd normally see did not appear. I also got an error message like ''Failure to Connect.'' The only function button that appeared was labeled ''Connect.'' After re-connecting (I don't know what Ghost is 'connecting' to), I was able to use Ghost. However, when I tried to run just an Incremental Backup (just the new/modified files), Ghost did another Baseline Backup instead.

From this last observation, this tells me that Ghost needs to run at all times in order to keep track of which files are changing.

Any thoughts, anyone? Thanks.

Tony

Discussion is locked

- Collapse -
What it is for and what it is not for
Feb 23, 2006 8:58PM PST

In my experience, you should use the Ghost to create a backup copy of a nice, clean install of your configuration just in case Windows dies on you, that way, you will not have to reinstall every piece of software you have, as for failsafing your system, i'd go for a RAID configuration if I were you.

- Collapse -
At least you got it to work
Feb 24, 2006 1:43AM PST

Gosh I really hate to say this but, I have given up on Symantec products. Their online and outsourced technical support was unable to aid me in getting a couple issues solved. One of these was Ghost. I wanted to use Ghost to back up my computer as a restoration point later so I did not have to go through the trouble of reinstalling the OS and all my software. I was trying to use Ghost to backup to CDs. But alas, it would always error out. So while this doesn't answer your question of how it works, I can just say it didn't work at all for me. There are other backup products out there and I would suggest looking at those. I ended up using a cheap one that worked but I can't say its the best. I didn't do a lot of research on this, just needed a quick fix. I used NTI backup now.

- Collapse -
How does Ghost Work?
Feb 24, 2006 3:17AM PST

I don't know how it actually works, only the writers of the program would know that. But Nortons Ghost 10 works well for me. I cloned my computer this week with Ghost 10 onto a Seagate Barracuda 160 Internal (removable) H/D. So far I have programmed it to do an incremental back-up once a week at 8pm on a Friday evening when I am not using the computer. I do notice that it backs up if I download anything other than at the programmed time. Once a month it does a full backup of my entire system, all 56GB. So I can recommend it for cloning your computer, it is user friendly also.

- Collapse -
Info about Norton Ghost
Feb 24, 2006 8:37PM PST

As far as I am aware version 8 does a bit for bit copy of the hard disk. The later versions that can do incremental backups can not work like this.
For info the bit for bit copy works on disk and or partions and at the Dos level it can even run from a floppy disk and is much loved by geeks in this form.
The latest Ghost 10 is a bootable CD and can run an older Dos ghost version which does the same thing as the floppy.

- Collapse -
You are lucky to get it to work
Feb 25, 2006 7:01AM PST

I had so much getting Norton Ghost to work, and stay working, that I got rid of it. Also, Symantec instruction manuals are of little help, but better than their on-line support. I now use Acronis True Image. Acronis is easy to install, has a good instruction manual, and has never failed me. They have a very good reputation for support, but I have never need to use it.

Good luck if you keep Ghost. There are several other better programs and companies out there.

- Collapse -
I've Heard Good Things About Acronis, Too
Feb 26, 2006 8:15PM PST

Nels,

Yes, I've considered Acronis. Although I haven't been disappointed in Ghost yet, I've been tempted to delve into Acronis for quite a while.

Keep in mind that I'm using Ghost version 9. I've heard all kinds of stories about Ghost, but sometimes you have to wonder about the people who are using it. No, I'm not referring to you, Nels; I'm talking about those folks who sometimes try to get ''under the hood'' of their PC, too much. You know, there are folks out there who are trying to teach their PC to make breakfast for them. Well, everyone knows that PCs can't make breakfast; only Macs can do that! (Kidding)

The one thing I tried to fiddle with is removing Ghost from my Startup folder so it wouldn't be in my System Tray all the time; this apparently was not the right thing to do. This didn't permanently break my Ghost installation, but it required me to do a ''reconnect'' when I started it ... just a single mouse click. Additionally, it seems that not allowing it to run in the background (in the System Tray) all the time will prevent you from running an Incremental Backup. I guess that Ghost doesn't refer to the archive bit and it keeps track of new/modified files by another method.

Thanks, Nels. Next time it might be Acronis for me.

Tony

- Collapse -
Ghost 10
Mar 2, 2006 12:39PM PST

I've used PowerQuest for years and felt it was the best thing since sliced bread until Symantec got their hands on it. Tech support is basically someplace between Slim and None (None left town). Tech support seems to have only the most basic knowledge and skills with respect to OS's and the applications they sell.
My advice is to RUN like crazy from anything Symantic produces.
I run a custom computer and repair shop and Norton related problems are a substantial part of my business.

- Collapse -
Never a Problem
Mar 8, 2006 6:26AM PST

I have been using Ghost 9 for a year now. I had never had to actually use it until 2 months ago when a system configuration change caused me to use it. Then, I had to use it twice in a week because WinXP system restore failed me. Both times, Ghost worked like a champ. I have the backup set to store on my 160 GB external USB drive. A full backup runs twice a week and incremental backups occur several times a day. All backups are set to no more than 4.5 GB so that I can save them to DVD if need be.

Like many others I had heard the Ghost horror stories, in addition to bad reports about Symantec tech support. Fortunately I have not had to use the tech support. On a side note, I've had bad experiences with Mcafee tech support and will probably never buy anything from them again.

- Collapse -
Learned a Little ?? Quite Interesting
Mar 4, 2006 12:34PM PST

All,

Since posting my original question asking about Ghost 9, a thought crossed my mind.

I've long suspected that Ghost is doing something ''fancy'' when it does its backups. The reasons for my suspicions don't carry a lot of weight, but the main reasons are: (1) Ghost is fast ... much faster that an ordinary copy would be, and (2) your hard disk's heads move minimally during a Ghost backup compared to when you're copying files. This doesn't tell me a lot about how it works, but surely Ghost is doing something other than simple directory/file copies.

For grins, I tried something today.
(1) I used Ghost to perform a Full Baseline Backup.
(2) I defragged my C: drive.
(3) I ran an Incremental Backup.

That Incremental Backup I performed should have contained nearly nothing because after the Full Baseline Backup, except for the defrag, I ran/did nothing; almost no files should have changed. Likewise, you'd expect the Incremental Backup to have very little or nearly nothing in it.

However, to my shock, after running the Incremental Backup, I checked its size. Gosh! This Incremental Backup that should have had almost nothing in it was HALF THE SIZE (15 Gigs) of the Full Baseline Backup (30 Gigs).

If defrags just move files around, then why would Ghost have picked up sssooo much data in the Incremental Backup???

By the way ... I am NOT implying that Ghost has done anything wrong. I'm merely saying that Ghost's methodology is apparently some kind of disk-sector-based affair. More than that I don't know.

Am I making sense? Perhaps no one cares as long as Ghost works properly? Anyway, I just thought I'd share that with the forum readers.

Tony

- Collapse -
Likely explanation...
Mar 5, 2006 12:19AM PST

Norton Ghost uses the byte-by-byte method as opposed to the file-by-file methods used by most other backup software. With file-by-file, the software would compare files based on key points such as file name, the directory they're located in, the creation/modification date, and the size of the file, in order to determine if it has been changed. If so, it would be included in the incremental backup. Whenever copying data, be it a full or incremental backup, it would copy the data file-by-file from the original location to the backup location, just like you would perform a copy-and-paste job.

With byte-by-byte, Ghost handles it quite differently. When backing up data, it would copy each file over one byte at a time. This has three parts. First, when backing up corrupted file, it would backup every byte of the file that's still in tact, preserving the remnants of the file that may be able to be restored/viewed/read at a later time. With a file-by-file backup, that data would simply be skipped as on a file level it is incomplete.

Second, when doing an incremental backup, Ghost compares the hard drive and current byte-by-byte, in order. By defragmenting your hard drive, you changed the order/position of a large number of the bytes that make up your files. Remember, Ghost doesn't look at the file as a whole, which has remained unchanged, or the directory it's in...it looks at the bytes, which have been changed, in a sense. Thus, it backed the data up again.

Lastly, software that goes byte-by-byte is more efficient in some respects. It could care less if the files are heavilly fragmented and scattered all over the hard drive...it's going to go from the begining to end, backing up each byte it comes across until it reaches the end. Software that goes file-by-file, on the other hand, scans the entire hard drive looking for each byte of the file before creating the backup of the file. This takes longer and taxes the hard drive more, but you could say it's defragmenting the backup, in a sense.

Overall, Ghost is good at what it does, backing up your hard drive in its entirity, ensuring every byte is accounted for, and doing it in an efficient manner. The downside is that it cannot backup individual files/folders and when performing incremental backups may backup much more than it needs to.

Hope this helps,
John

- Collapse -
Makes Sense
Mar 5, 2006 1:16AM PST

John,

Yes, your explanation is consistent with what I've been suspecting.

By the way, about backups and Ghost in general, a friend has turned me on to a site that discusses this topic "ad nauseam." They address multiple versions of Ghost, their quirks, advantages, and other backup strategies.

For those needing some tips or who'd just like to read more, plz visit http://ghost.radified.com/ with a downloadable version of the guide at http://radified.com/Files/ghost_rad.zip .

One change I'm likely to adopt is doing my backups from DOS vice from within Windows. I like the certainty of knowing that my system and Windows are quiescent while running my backup. Although Symantec advertises that you can run your backups from Windows, I still worry. There are too many things running and I never felt totally comfortable doing my backups that way.

Thanks a LOT, folks. To be continued.

Tony

- Collapse -
Problem with working of Ghost 8.2
Jun 9, 2010 6:52AM PDT

Hi,

I am using Ghost8.2 since 1 year .....
It worked for me very well.

Now what happened is, i can't find the path to run ghost and restore from the image i have made.

Pls tell me where to run the Ghost ???

- Collapse -
It is located in the path that you installed it...
Jun 10, 2010 10:57PM PDT

The default is generally C:\Program Files, followed by "Norton Ghost," "Norton\Ghost," or something similar, but that's something you were given the option to change during installation. You can search your hard drive for it using Windows Search or reinstall it from CD if you cannot find it yourself.

John