[Linux-NTFS-Dev] ntfsundelete and files larger than 4 Gb

[Krist P. <kr...@gm...>]

hi guys,

First of all let me thank you for this fantastic program !

I accidentally removed my ghost image files (silly me) but thanks to 
your "ntfsundelete" program i have most of it back, GREAT.

I did notice however that files larger than 4 Gb are not recoverable, 
pity. All off my other files have been recovered fine.

The output from "ntfsundelete -v" on a big (> 4 Gb) file is:

    File has an empty runlist, hence no data.
    File is 0% recoverable
    MFT Record 60359
    Type: File
    Date: 2009-09-26 11:19
    Filename: (2) 2009_0~2.TIB
    File Flags: <none>
    Size alloc: 9235496960
    Size data: 9235495424
    Date C: 2009-09-26 11:01
    Date A: 2009-09-26 11:19
    Date M: 2009-09-26 11:19
    Date R: 2009-09-26 11:19
    Filename: (1) 2009_09_26_temp.tib
    File Flags: <none>
    Size alloc: 9235496960
    Size data: 9235495424
    Date C: 2009-09-26 11:01
    Date A: 2009-09-26 11:19
    Date M: 2009-09-26 11:19
    Date R: 2009-09-26 11:19
    Data Streams:
    Name: <unnamed>
    Flags: None
    Size alloc: 0
    Size data: 0
    Size init: 0
    Size vcn: 0
    Data runs:
        None
    Amount potentially recoverable 0%
    ________________________________________

Just though you might like to know this.
BTW if you have a fix or so i'll be glad to check it out.

Many greetings,

krist.