AW: Re: FSCTL_GET_NTFS_VOLUME_DATA and FSCTL_GET_NTFS_FILE_RECORD

NTFSD
1

I have seen the header files but do you know what the structure members mean

typedef struct {

LARGE_INTEGER FileReferenceNumber;

} NTFS_FILE_RECORD_INPUT_BUFFER, *PNTFS_FILE_RECORD_INPUT_BUFFER;

typedef struct {

LARGE_INTEGER FileReferenceNumber;
DWORD FileRecordLength;
BYTE FileRecordBuffer[1];

} NTFS_FILE_RECORD_OUTPUT_BUFFER, *PNTFS_FILE_RECORD_OUTPUT_BUFFER;

some of the NTFS_VOLUME_DATA_BUFFER structure are easy to understand but
some are a little bit unclear.

Do you have a link to sysinternals where to found this.?

Reiner

-----Ursprüngliche Nachricht-----
Von: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]Im Auftrag von Harish Arora
Gesendet: Dienstag, 3. Oktober 2000 06:08
An: File Systems Developers
Betreff: [ntfsd] Re: FSCTL_GET_NTFS_VOLUME_DATA and
FSCTL_GET_NTFS_FILE_RECORD

refer to winioctl.h in msvc6 and also sysinternals.com for details about the
structure of NTFS File records.
Harish
----- Original Message -----
From:
To: File Systems Developers
Sent: Monday, October 02, 2000 2:28 PM
Subject: [ntfsd] FSCTL_GET_NTFS_VOLUME_DATA and FSCTL_GET_NTFS_FILE_RECORD

> Have anyone detailed informations about the following control commands
>
> FSCTL_GET_NTFS_VOLUME_DATA
> FSCTL_GET_NTFS_FILE_RECORD
>
> under Windows 2000
>
> Reiner
>
> —
> You are currently subscribed to ntfsd as: xxxxx@legato.com
> To unsubscribe send a blank email to $subst(‘Email.Unsub’)
>

—
You are currently subscribed to ntfsd as: xxxxx@gmx.net
To unsubscribe send a blank email to $subst(‘Email.Unsub’)

2

This documentation is also available at
http://www.via.ecp.fr/~regis/ntfs.tar.bz2.
FileReferenceNumber is like inode number on unix.
NTFS_FILE_RECORD_OUTPUT_BUFFER contains 1k Mft record which describes the
file’s attributes.

----- Original Message -----
From: Reiner
To: File Systems Developers
Sent: Tuesday, October 03, 2000 3:31 PM
Subject: [ntfsd] AW: Re: FSCTL_GET_NTFS_VOLUME_DATA and
FSCTL_GET_NTFS_FILE_RECORD

> I have seen the header files but do you know what the structure members
mean
>
> typedef struct {
>
> LARGE_INTEGER FileReferenceNumber;
>
> } NTFS_FILE_RECORD_INPUT_BUFFER, *PNTFS_FILE_RECORD_INPUT_BUFFER;
>
> typedef struct {
>
> LARGE_INTEGER FileReferenceNumber;
> DWORD FileRecordLength;
> BYTE FileRecordBuffer[1];
>
> } NTFS_FILE_RECORD_OUTPUT_BUFFER, *PNTFS_FILE_RECORD_OUTPUT_BUFFER;
>
> some of the NTFS_VOLUME_DATA_BUFFER structure are easy to understand but
> some are a little bit unclear.
>
> Do you have a link to sysinternals where to found this.?
>
> Reiner
>
>
> -----Urspr?ngliche Nachricht-----
> Von: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com]Im Auftrag von Harish Arora
> Gesendet: Dienstag, 3. Oktober 2000 06:08
> An: File Systems Developers
> Betreff: [ntfsd] Re: FSCTL_GET_NTFS_VOLUME_DATA and
> FSCTL_GET_NTFS_FILE_RECORD
>
>
> refer to winioctl.h in msvc6 and also sysinternals.com for details about
the
> structure of NTFS File records.
> Harish
> ----- Original Message -----
> From:
> To: File Systems Developers
> Sent: Monday, October 02, 2000 2:28 PM
> Subject: [ntfsd] FSCTL_GET_NTFS_VOLUME_DATA and FSCTL_GET_NTFS_FILE_RECORD
>
>
> > Have anyone detailed informations about the following control commands
> >
> > FSCTL_GET_NTFS_VOLUME_DATA
> > FSCTL_GET_NTFS_FILE_RECORD
> >
> > under Windows 2000
> >
> > Reiner
> >
> > —
> > You are currently subscribed to ntfsd as: xxxxx@legato.com
> > To unsubscribe send a blank email to $subst(‘Email.Unsub’)
> >
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@gmx.net
> To unsubscribe send a blank email to $subst(‘Email.Unsub’)
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@legato.com
> To unsubscribe send a blank email to $subst(‘Email.Unsub’)
>