NTFS Documents (16)

Make your life easy!

Search:

07-09
27

eric Related Resource 0 2007-09-27 21:24:35 -0400

7. Attribute - $VOLUME_NAME (0x60)
7.1. Overview
This attribute simply contains the names of the volume. As defined in $AttrDef, this attribute has a minimum size of 2 bytes and a maximum of 256 bytes. This equates to a maximum volume name length of 127 Unicode characters.

7.2. Layout of the Attribute
Table 2.19. Layout of the $VOLUME_NAME (0x60) attribute

Offset	Size	Description
~	~	Standard AttributeHeader
0x00		Unicode name

7.3. Notes
The Volume Name is not terminated with a Unicode NULL. Its name's length is the size of the attributes stored in the header.

A Volume's Serial Number is stored in $Boot.

The $Volume_name attribute looks like not very palled on. But it describes the properties of the volume in detail. However, it's very easy to understand this attribute. We won't describe it in detail any more.

8. Attribute -$VOLUME_INFORMATION (0x70)
8.1. Overview
Indicate the version and the state of the volume. As defined in $AttrDef, this attribute has a minimum and a maximum size of 12 bytes.

8.2. Layout of the Attribute
Table 2.20. Layout of the $VOLUME_INFORMATION (0x70) attribute

Offset	Size	Description
~	~	Standard AttributeHeader
0x00	8	Not always zero, but in usual
0x08	1	Major version number
0x09	1	Minor version number
0x0A	2	Flags
0x0C	4	Not always zero, but in usual

8.2.1. Flags
Table 2.21. Volume Flags

Value	Description
0x0001	Dirty Flag
0x0002	Resize LogFile
0x0004	Upgrade on Mount
0x0008	Mounted on NT4
0x0010	Delete USN underway
0x0020	Repair Object Ids
0x8000	Modified by chkdsk

8.3. Notes
8.3.1. Dirty Flag
When the Dirty Flag is set, Windows NT must perform the chkdsk/F command on the volume when it next boots.

8.3.2. Version numbers
Table 2.22. Volume Version Numbers

Operating System	Version
Windows NT	1.2
Windows 2000	3.0
Windows XP	3.1

8.3.3. Other Information
A Volume's Serial Number is stored in $Boot. These data steams are identified for some especially purpose in usual. When the user creates the files will not use these properties. Hence, we won't particularize it any more.