From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <vsu@altlinux.ru>
Date: Sun, 29 Jan 2006 20:09:50 +0300
From: Sergey Vlasov <vsu@altlinux.ru>
To: Maksim Otstavnov <maksim@otstavnov.com>,
	ALT Linux Community <community@lists.altlinux.org>
Subject: Re: [Comm] ntfs recovery
Message-ID: <20060129170950.GC7267@procyon.home>
References: <1501900453.20060128233156@otstavnov.com>
	<43DCE970.8080406@lsi.bas-net.by>
	<16610210218.20060130042140@otstavnov.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="yLVHuoLXiP9kZBkt"
Content-Disposition: inline
In-Reply-To: <16610210218.20060130042140@otstavnov.com>
Cc: 
X-BeenThere: community@lists.altlinux.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: ALT Linux Community <community@lists.altlinux.org>
List-Id: ALT Linux Community <community.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community>
List-Post: <mailto:community@lists.altlinux.org>
List-Help: <mailto:community-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community>,
	<mailto:community-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jan 2006 17:10:19 -0000
Archived-At: <http://lore.altlinux.org/community/20060129170950.GC7267@procyon.home/>
List-Archive: <http://lore.altlinux.org/community/>
List-Post: <mailto:mandrake-russian@linuxteam.iplabs.ru>


--yLVHuoLXiP9kZBkt
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jan 30, 2006 at 04:21:40AM +0300, Maksim Otstavnov wrote:
> =F7=CF=D0=D2=CF=D3 =C2=D9=CC, =D3=CF=C2=D3=D4=D7=C5=CE=CE=CF, =D7 =D4=CF=
=CD, =CE=C5=D4 =CC=C9 =D7 ntfs =C4=CF=D3=D4=D5=D0=CE=CF=CA =CB=CF=D0=C9=C9 =
sb, =CB=C1=CB =D7
> =D3=CF=D7=D2=C5=CD=C5=CE=CE=D9=C8 =C6=C1=CA=CC=CF=D7=D9=C8 =D3=C9=D3=D4=
=C5=CD=C1=C8.

http://www.linux-ntfs.org/content/view/108/47#file_boot

=EE=C1=D0=C9=D3=C1=CE=CF, =DE=D4=CF =C5=D3=D4=D8:

For crash recovery purposes Windows NT 3.51 saves a copy of the boot
sector and puts it in the logical middle of the volume.  Windows NT
and later put it at the end of the volume.

=E5=DD=A3 =C7=C4=C5-=D4=CF =CC=C5=D6=C9=D4 =CB=CF=D0=C9=D1 =CE=C1=DE=C1=CC=
=C1 MFT ($MFTMirr):

This is a system file that duplicates at least the first four FILE
records of the MFT for recovery purposes.

If the cluster size of the volume is less than or equal to four times
the mft record size, i.e. usually the cluster size is less than or
equal to 4096 bytes, then the first four MFT records are stored in the
$MFTMirr.

If the cluster size is greater than four times the mft record size,
then the size of $MFTMirr is one cluster and as many MFT records are
stored in it as fit inside a cluster.

For example given an MFT record size of 1024 bytes and a cluster size
of 8192 bytes the $MFTMirr would be 8192 bytes long and it would
contain the first eight FILE records of the MFT.

--yLVHuoLXiP9kZBkt
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFD3PbeW82GfkQfsqIRAksTAJ4kr9rvv+BTQwNvbmIoWYE0/nmBSwCfbtfU
E/zpqUkVEk5ZirX6wNOYfuA=
=WRre
-----END PGP SIGNATURE-----

--yLVHuoLXiP9kZBkt--