07-09
06

NTFS documents (2)

Overcast Happy

Authoreric   Category Related Resource   Comments0   Post Time 2007-09-06 22:14:22 -0400

2. Tables Legend
2.1. Overview
The tables in this documentation aren''t completely consistent. Below is a key to the tables showing how various fields are represented?

2.2. Footnotes
Any table fields that have footnote marks, e.g. (a), (e), will have a fuller description immediately below the table.

2.3. Size Fields
In NTFS not all fields are of a fixed size. Some depend on the value of another field; some depend on the contents of the field.
All the numbers in size fields are in decimal format. e.g. 12(twelve), 42 (forty-two).
Table 1.1. Size fields table legend

KeyNameDescription
12FixedThis field is twelve bytes long. Its size is constant.
P8PaddingP8 means pad the field to an 8 byte boundary. The size of this
field could be 0 - 7 bytes. P4 means 4 byte alignment, etc (a)
VVariableThe length of this field depends on its contents. An example is a
SID. To know its length, you must decode the structure.
SX-RefA cross-reference shows that the size is defined elsewhere in the
table. The size can be represented by any letter, except P or V.


 (a) Any padding of a fixed size will be displayed as a fixed size.

2.4. Indexes
Where a table represents an index, the key and data will be shown as below:

Table 1.2. An example for an index table
OffsetSizeDescription
0x002Offset to data
0x022Size of data
0x044KeySID
0x084DataOwner Id
0x0C4DataHash

2.5. Operating System
Note that the fields are not all used in exactly the same way. NT indicates old fields whereas 2K and XP indicate new fields.

Table 1.3. NTFS volume versions for each OS
OSNTFSDescription
blankAllUsed by all versions of Windows
NT1.2Only used in Windows NT
2K3.0Windows 2000 and later
XP3.1New to Windows XP



Repeating groups? Link padding8, padding and other table features to help/tables   consistent use of padding/alignment fields

Trackback URL Trackback: http://blog.easeus.com/action.php?action=tb&id=34

Tags Tags: windows,NTFS,xp,ntfs

Comments List

Post a Comment

  • Name:
  • Email:
  • HomePage:
  • Comment:
  • Question:

Home | Solution | About Company | Contacts | Resource | Blog | Forum | Directory | Links | Sitemap

Copyright © 2005-2008 CHENGDU YIWO Tech Development Co., Ltd. ALL RIGHTS RESERVED.

Privacy Policy | License | Legal Counsel