Hi,
[I am CC ing ntfs-dev]
Your answer is that you need to read our docs more carefully. In
particular you will find your mft record contains an $ATTRIBUTE_LIST
attribute which tells you where you can find further $MFT/$DATA attribute
extents and those will tell you where your mft records are located.
Anton
On Fri, 25 Apr 2003, Kallol Mallick wrote:
> Hi mblasha,
>
> I posted a similar message to the ntfs linux mailing
> list, but withnoreply.
> I was reading mft on various Win2k/XP systems to
> analyze the structure. I am following the sourceforge
> specs in linux-ntfs - that's the best I could get:).
>
> Now in one XP machine, the MFT looks peculiar. In that
> machine, the delete form windows explorer is very slow
> (takes 1 min. to delete). Windows chkdsk does not show
> any error. MF starts form cluster 16. the attached
> binary file is a dump of first 16 entries in MFT
> itself.
>
> If you look at the first entry - at offset 1b8 in the
> file starts the $DATA attribute, which supposed to
> have the data run for the MFT itself. The data run
> starts from offset 1f8 in the file, and it goes like
> 11 04 10 00...
> That means, it has a single data run of 4 clusters
> starting form LCN 16(0x10). So that says that the MFT
> has only 16 records (1K MFT record size, 4K cluster
> size). Where did the rest go? Is there something I am
> missing? FIXUPs are also not affecting this, I think.
> The XP partition is a freshly formatted one with quite
> a few files in it. The partition is working fine in
> XP, with reading, creating new file etc. The only
> problem is very slow deletion.
>
> Please help. I am stuck here !
>
> Thanks
> -Kallol
>
> __________________________________
> Do you Yahoo!?
> The New Yahoo! Search - Faster. Easier. Bingo.
> http://search.yahoo.com
Best regards,
Anton
--
Anton Altaparmakov <aia21 at cam.ac.uk> (replace at with @)
Unix Support, Computing Service, University of Cambridge, CB2 3QH, UK
Linux NTFS maintainer / IRC: #ntfs on irc.freenode.net
WWW: http://linux-ntfs.sf.net/ & http://www-stu.christs.cam.ac.uk/~aia21/
|