File: restart.html

package info (click to toggle)
ntfs 971218-4
  • links: PTS
  • area: main
  • in suites: hamm, slink
  • size: 692 kB
  • ctags: 670
  • sloc: ansic: 7,774; sh: 1,509; makefile: 232
file content (14 lines) | stat: -rw-r--r-- 562 bytes parent folder | download 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
 
<title>Log file restart area</title>
Each copy of the restart area is 4KB in size, and has the following structure:
<pre>
Offset(length)         Description
0(4)                   Magic number 'RSTR'
1E(12)                 Fixup
30(4)                  LSNa
58(4)                  LSNb
60(4)                  LSNc (==LSNa?)
6C(1)                  Volume clear flag
78(8)                  Unicode string 'NTFS'
</pre>
</i>The purpose of the various LSNs is unclear. It appears that the data
around offset 3C deal with the clear/dirty state of the volume, too.</i>