Gentlemen,
Regarding the non-availability of “dir /ah $MFT ****” on NTFS 2k, I would
like to add some more interesting things.
I’ve come across some 4.0 volumes also which don’t show MFT files. When I
had come across this I tried hard to fing out why it was happening. But
unfortunately couldn’t come across any concrete reasoning. On some NTFS
voulmes it just wouldn’t work, and quite arbitrarily. Equally arbitrarily it
would work on the a few others. Fortunately the no. latter was much
higher.??!!
----- Original Message -----
From: Jay Krell
To: File Systems Developers
Cc: ;
Sent: Saturday, March 18, 2000 7:27 AM
Subject: [ntfsd] Re: Open $Mft
> >From: “Mayank Kulshreshtha”
> >Could u kindly elaborate the exact procedure to open $MFT.
> –
> >From: “Maxim S. Shatskih”
> >
> >>I’ve found a message from Max, which says that I can open the $Mft file.
> >
> >dir /ah $Mft works. From this I conclude that it is possible to open
$Mft.
>
>
> There are others
> cd > dir /ah $mft $mftmirr $logfile $volume $attrdef $bitmap $boot $badclus
> $quota $upcase
>
> This list is from the sysinternals utility ntfsinfo.
>
> I don’t believe any of these (“dir /ah”) work on Windows 2000 though, I
> think I tried once and they didn’t. See the book “Windows NT/2000 Native
> API Reference” by Gary Nebbet, Macmillan Technical Publishing" for
> information on problems opening these files, ways that possibly work, and
> apparently enough information to read them “directly” instead of via the
> file system.
>
> Tread very carefully, this is dangerous territory…
>
> That book should be interesting to many on this list.
>
> - Jay
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@legato.com
> To unsubscribe send a blank email to $subst(‘Email.Unsub’)