direntry.html

NTFS(NT文件系统) for Linux的一个实现源码

<title>Index entry</title>
The index entry has the following structure:
<pre>
Offset(length)         Description
0(8)                   MFT record number (inode number)
8(2)                   Entry size
A(2)                   0x42 + 2*<0x50>
C(1)                   Flags: 1 - entry has subnodes, 2 - entry is last
10(8)                  Directory where entry appears
18(20)                 File modification times
38(8)                  Data attribute allocated size
40(8)                  Data attribute size
50(1)                  File name in words
51(1)                  File name type (see file name attribute)
52(2*namelen)          File name
entry size-8 (8)       Virtual cluster number of index buffer with subnodes
</pre>
Most entries are not valid (and present) if the entry is the last one.
This entry does not represent a file and is used only for subnodes.
The pointer to the subnode buffer is only present if the entry has subnodes.