Re: ntfsd digest: October 23, 2000

-----Original Message-----

Subject: NTFS Logging
From: “Reddy, Cathy C”
>Date: Mon, 23 Oct 2000 13:32:11 -0600
>X-Message-Number: 10
>
>Where are NTFS log entries written to ? Is the boot drive where OS was
>installed or the logical data volumes where the actual reads and writes
take
>place and may not be the same as the boot drive?
>----------------------------------------------------------------------

I don’t actually know, but how/why could it be anything other than the drive
the log refer to? Cross volume transactions (bottlenecked in one per system
log?) would be wonderful, but you have to use something like SQL Server and
a DTC to get that, and it would not mix trivially with rdr/smb/srv/whatever.
Surely the logs are on each volume.

On NT4 you can somewhat see the various special files.
Z:>dir /a $attrdef $mft $mftmirr $badclus $logfile $boot $bitmap $upcase
$volume $quota

www.sysinternals.com’s ntfsinfo reports these names and the file sizes.

- Jay