The log file is a system file so that it can be found early in the boot process and used to recover the volume. $LogFile: Log file is to make the file system recoverable.The figure below shows the overall picture of how MFT and system files are organized. The size in bytes per MFT record is indicated in the boot sector (i.e., in BPB). A record of MFT normally spans up to 1024 bytes. First 16 records in MFT are reserved for system files. The first and second records in the MFT are MFT itself and mirror MFT respectively. Even MFT and mirror MFT have a record in them. What I mean file is system files, directories, normal files, hidden files, etc. The following figure illustrates the layout of an NTFS volume when formatting has finished.Īll the files in the NTFS have a record in representing MFT. Normally, the first resides in the beginning, and second MFT, called mirror MFT, resides in the middle part of NTFS disk. Like FAT, there are two MFT for each NTFS file system. Unlike FAT, it can reside any where in the disk. Therefore, whenever system boots up, it reads the boot sector, finds the MFT, and loads it before any file operation. It is a lookup table like FAT (File Allocation Table) in FAT file system. NTFS starts with MFT (Master File Table). NTFS provides several things to Windows than the FAT, for example: Security, Large storage, etc.
For explanation of journaling, see the LogFile section below.
Journaling file system means it can recover from sudden crashes (may be, Microsoft knows long before, their OS will crash more often :)) ).
It is a fast performing and sophisticated file system. Microsoft says NTFS is a fast performing and journaling file system. This explanation looks kind of an additional patch work for documentations available on the net. I created this tool to satisfy my curiosity, and I'm presenting to all of you having the same interest. There are many tools out in Internet for recovering deleted files from NTFS, but I couldn't find one with source, by now. It is a more sophisticated, powerful and complicated file system than FAT file system. NTFS - "New Technology File System" is the preferred native file system for Windows NT series.
0 kommentar(er)
