File: indexallocation.html

package info (click to toggle)
ntfs 971218-4
  • links: PTS
  • area: main
  • in suites: hamm, slink
  • size: 692 kB
  • ctags: 670
  • sloc: ansic: 7,774; sh: 1,509; makefile: 232
file content (21 lines) | stat: -rw-r--r-- 897 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
<title>Index allocation</title>
The index allocation attribute is the sequence of index buffers. Each index
buffer is 800 bytes (2K). The structure of an index buffer is
<pre>
offset(length)         Description
0(4)                   Magic number 'INDX'
4(2)                   Offset to fixup (usually 28)
6(2)                   Number of fixups including first word
10(8)                  VCN of buffer
18(2)                  Header size
1C(4)                  in-use length of buffer
20(4)                  total length of buffer
28(A)                  Fixup
18+header size         Entry list
</pre>
The entry list is just a sequence of <a href=direntry.html>index entries</a>.
The fixup works just as it does for <a href=mft.html>MFT records</a>. 
Because the record size is larger, there are four numbers to check and
modify.
<p><i>What is in the index header, other than the fixup data?</i>