|
From: Anton A. <ai...@ca...> - 2004-03-24 14:48:13
|
On Wed, 2004-03-24 at 14:03, Szakacsits Szabolcs wrote: > On Mon, 1 Mar 2004, Szakacsits Szabolcs wrote: > > > Might pagefile.sys has data used between reboots, as sometimes Linux swap? > > Veteran Microsoft engineer writes to his blog at > > http://blogs.msdn.com/larryosterman/archive/2004/03/18/92010.aspx > > Nowadays, NT doesn't always write the entire contents of memory out - > it's controlled by a setting in the Startup and Recovery settings dialog > on the Advanced tab of the system control panel applet - there are 4 > choices - None, a small "minidump", a Kernel memory dump and a full > memory dump. Only the full memory dump will write all of RAM, the others > limit the amount of memory that's written out. But it still goes to the > paging file. > > Of course I believe when I checked it out, although I suspected this. > And since there is this often used thus robust feature then perhaps > it's also used in other cases ... Possible. Certainly, now we know that we really should always copy the pagefile in ntfsclone, too... > This also lead again to a very important question: how do we know if > Windows crashed and NTFS is dirty? Really, the only way is to scan $LogFile to determine the state. If the log is fully check pointed and no uncommitted transactions are remaining it means the volume is clean. And otherwise it means it is dirty. I have been planning to implement this in ntfsprogs (and in the kernel for that matter) but haven't had time as it is rather a lot of work. > I thought the VOLUME_IS_DIRTY flag is supposed to mark this. I checked it > out and it doesn't. After a crash it isn't set. Apparently it isn't even > set when NTFS is mounted. I think it does but I think it is only set while data is being actively written to disk (I may well be wrong though). Best regards, Anton -- Anton Altaparmakov <aia21 at cam.ac.uk> (replace at with @) Unix Support, Computing Service, University of Cambridge, CB2 3QH, UK Linux NTFS maintainer / IRC: #ntfs on irc.freenode.net WWW: http://linux-ntfs.sf.net/ & http://www-stu.christs.cam.ac.uk/~aia21/ |
