Re: [Comm] ntfs recovery

[Sergey Vlasov <vsu@altlinux.ru>]

[-- Attachment #1: Type: text/plain, Size: 1197 bytes --]

On Mon, Jan 30, 2006 at 04:21:40AM +0300, Maksim Otstavnov wrote:
> Вопрос был, собственно, в том, нет ли в ntfs доступной копии sb, как в
> современных файловых системах.

http://www.linux-ntfs.org/content/view/108/47#file_boot

Написано, что есть:

For crash recovery purposes Windows NT 3.51 saves a copy of the boot
sector and puts it in the logical middle of the volume.  Windows NT
and later put it at the end of the volume.

Ещё где-то лежит копия начала MFT ($MFTMirr):

This is a system file that duplicates at least the first four FILE
records of the MFT for recovery purposes.

If the cluster size of the volume is less than or equal to four times
the mft record size, i.e. usually the cluster size is less than or
equal to 4096 bytes, then the first four MFT records are stored in the
$MFTMirr.

If the cluster size is greater than four times the mft record size,
then the size of $MFTMirr is one cluster and as many MFT records are
stored in it as fit inside a cluster.

For example given an MFT record size of 1024 bytes and a cluster size
of 8192 bytes the $MFTMirr would be 8192 bytes long and it would
contain the first eight FILE records of the MFT.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]