[sleuthkit-developers] [ sleuthkit-Bugs-2734458 ] NTFS file listing is slow

[SourceForge.net <no...@so...>]

Bugs item #2734458, was opened at 2009-04-05 09:33
Message generated for change (Settings changed) made by carrier
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2734458&group_id=55685

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: File System Tools
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Private: No
Submitted By: Brian Carrier (carrier)
Assigned to: Nobody/Anonymous (nobody)
Summary: NTFS file listing is slow

Initial Comment:
With TSK 3+, TSK is searching the MFT for every directory being listed to find unallocated entries that point to that directory as its parent.  This turns out to be very slow for large file systems. The results should be cached so that each time a directory is listed, it does not need to rescan the MFT.

Reported by Eamonn Saunders. 

----------------------------------------------------------------------

>Comment By: Brian Carrier (carrier)
Date: 2009-04-10 23:42

Message:
Fixed in trunk. 
Sending        CHANGES.txt
Sending        tsk3/fs/ntfs.c
Sending        tsk3/fs/ntfs_dent.c
Sending        tsk3/fs/tsk_ntfs.h
Transmitting file data ....
Committed revision 71.

Added a cache map so that inode_walk is done only once. 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=477889&aid=2734458&group_id=55685