|
From: Richard R. <fl...@fl...> - 2001-03-26 15:54:53
|
On 26 Mar 2001 20:12:53 +0700, Michael N. Filippov wrote:
> not sure which mailing list is more populated.
I recently asked Anton the same question. Tiger has about 550 people
and SourceForge about 10 people.
> Why not merge them?
Hmm... Good question. Martin? Anton?
> 2. I installed Windows Whistler Server (XP) to look at NTFS 3.1
> (as written in its $Volume file).
Interesting.
> The first change i see is
> that in file record record_header->update_sequence_header.offset is
0x30
> instead of typical 0x2A. These 6 bytes for every file/directory on
> disk (i copied one directory without system/hidden etc files) have
such
> layout: first 4 bytes - mft_index, 2 bytes - zero. It means that only
32
> bits are reserved instead of 48. Any guesses ?
It sounds like a file reference. The first 6 bytes are the MFT record
number
(effectively the inode number) and the last 2 bytes are a sequence
number.
NTFS uses 64 bit numbers, but only allows 2^48 files.
If you have more information, Michael, let us know.
Cheers,
FlatCap (Rich).
nt...@fl...
|
