[Linux-NTFS-Dev] Finding MFT Records with NTFS 3.1

[ed e. <edd...@ya...>]

Hi,
 
First of all let me say that I am not actually writing for the linux tools but I thought I would post here as there are some people here who know alot about NTFS and I hopped you could help / take pity on me ;).
 
I am trying ot find specific records in the MFT so I thought I could find it by getting the file record at:
 
MFT_Start + (RecordNumber * RecordSize)
 
but I am finding that some records are not in the right place, the records created with 3.1 have a MFT Record number so I can scan through every record in the mft checking the number but is there a more efficient way to find a specific record?
 
thanks, any insights into this would be appreciated because I am sure I am missing something silly.
 
 
Ed
 
 

		
---------------------------------
 ALL-NEW Yahoo! Messenger - all new features - even more fun!