Register • FAQ • Search • Login
Tuxera Home
View unanswered posts | View active topics It is currently Fri May 24, 2013 16:23

Board index » NTFS-3G Support » Usage Questions & Problems on Linux

All times are UTC + 2 hours




Post new topic Reply to topic  Page 1 of 1
  [ 10 posts ] 
Previous topic | Next topic 
possible driver bug in ntfs-3g 
Author Message
kordex

Joined: Mon Oct 31, 2011 00:08
Posts: 4
Post possible driver bug in ntfs-3g
Mounting a loopback volume with offset results into errors in filesystem.

# losetup -r -o 1048576 /dev/loop0 kublaid.img
using -r for read-only as I do not want to lose data if something breaks

# ntfs-3g -o ro /dev/loop0 /mnt/loop/
# find /mnt/loop/



Oct 30 23:48:46 teletex ntfs-3g[3238]: Version 2010.3.6 integrated FUSE 27
Oct 30 23:48:46 teletex ntfs-3g[3238]: Mounted /dev/loop0 (Read-Only, label "", NTFS 3.1)
Oct 30 23:48:46 teletex ntfs-3g[3238]: Cmdline options: ro
Oct 30 23:48:46 teletex ntfs-3g[3238]: Mount options: ro,silent,allow_other,nonempty,relatime,fsname=/dev/loop0,blkdev,blksize=4096
Oct 30 23:48:46 teletex ntfs-3g[3238]: Ownership and permissions disabled, configuration type 1
Oct 30 23:48:52 teletex ntfs-3g[3238]: Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x4b98.
Oct 30 23:48:52 teletex ntfs-3g[3238]: Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x804c.
Oct 30 23:48:52 teletex ntfs-3g[3238]: Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x4b3a.
Oct 30 23:48:52 teletex ntfs-3g[3238]: Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x7d3b.
Oct 30 23:48:52 teletex ntfs-3g[3238]: Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x4b9f.
Oct 30 23:48:52 teletex ntfs-3g[3238]: Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x7a32.
Oct 30 23:48:52 teletex ntfs-3g[3238]: Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x7c61.

With in-kernel ntfs-driver:

Oct 30 23:59:04 teletex kernel: NTFS volume version 3.1.
Oct 30 23:59:04 teletex kernel: NTFS-fs warning (device loop0): load_system_files(): $LogFile is not clean. Will not be able to remount read-write. Mount in Windows.
Oct 30 23:59:21 teletex kernel: NTFS-fs error (device loop0): ntfs_readdir(): Actual VCN (0x8) of index buffer is different from expected VCN (0x1). Directory inode 0x4b98 is corrupt or driver bug.
Oct 30 23:59:21 teletex kernel: NTFS-fs error (device loop0): ntfs_readdir(): Actual VCN (0x8) of index buffer is different from expected VCN (0x1). Directory inode 0x4b98 is corrupt or driver bug.
Oct 30 23:59:21 teletex kernel: NTFS-fs error (device loop0): ntfs_readdir(): Actual VCN (0x8) of index buffer is different from expected VCN (0x1). Directory inode 0x4b98 is corrupt or driver bug.
Oct 30 23:59:21 teletex kernel: NTFS-fs error (device loop0): ntfs_readdir(): Actual VCN (0x8) of index buffer is different from expected VCN (0x1). Directory inode 0x4b98 is corrupt or driver bug.

Inode information:

ntfsinfo -i 0x4b98 /dev/loop0
Dumping Inode 19352 (0x4b98)
Upd. Seq. Array Off.: 48 (0x30)
Upd. Seq. Array Count: 9 (0x9)
Upd. Seq. Number: 8 (0x8)
LogFile Seq. Number: 0xb286449
MFT Record Seq. Numb.: 1 (0x1)
Number of Hard Links: 2 (0x2)
Attribute Offset: 72 (0x48)
MFT Record Flags: IN_USE DIRECTORY
Bytes Used: 728 (0x2d8) bytes
Bytes Allocated: 4096 (0x1000) bytes
Next Attribute Instance: 11 (0xb)
MFT Padding: 00 00 00 00 00 00
Dumping attribute $STANDARD_INFORMATION (0x10) from mft record 19352 (0x4b98)
Resident: Yes
Attribute flags: 0x0000
Attribute instance: 0 (0x0)
Data size: 72 (0x48)
Resident flags: 0x00
File Creation Time: Sat Oct 15 14:51:11 2011
File Altered Time: Sat Aug 20 16:47:40 2011
MFT Changed Time: Thu Oct 20 02:19:10 2011
Last Accessed Time: Sat Oct 15 14:51:27 2011
File attributes: (0x00000000)
Maximum versions: 0
Version number: 0
Class ID: 0
User ID: 0 (0x0)
Security ID: 267 (0x10b)
Quota charged: 0 (0x0)
Update Sequence Number: 0 (0x0)
Dumping attribute $FILE_NAME (0x30) from mft record 19352 (0x4b98)
Resident: Yes
Attribute flags: 0x0000
Attribute instance: 10 (0xa)
Data size: 82 (0x52)
Resident flags: 0x01
Parent directory: 30848 (0x7880)
File Creation Time: Sat Oct 15 14:51:11 2011
File Altered Time: Sat Aug 20 16:47:40 2011
MFT Changed Time: Sat Oct 15 16:06:52 2011
Last Accessed Time: Sat Oct 15 14:51:27 2011
Allocated Size: 0 (0x0)
Data Size: 0 (0x0)
Filename Length: 8 (0x8)
File attributes: I30_INDEX (0x00000000)
Namespace: DOS
Filename: 'ADMINI~1'
Dumping attribute $FILE_NAME (0x30) from mft record 19352 (0x4b98)
Resident: Yes
Attribute flags: 0x0000
Attribute instance: 9 (0x9)
Data size: 92 (0x5c)
Resident flags: 0x01
Parent directory: 30848 (0x7880)
File Creation Time: Sat Oct 15 14:51:11 2011
File Altered Time: Sat Aug 20 16:47:40 2011
MFT Changed Time: Sat Oct 15 16:06:52 2011
Last Accessed Time: Sat Oct 15 14:51:27 2011
Allocated Size: 0 (0x0)
Data Size: 0 (0x0)
Filename Length: 13 (0xd)
File attributes: I30_INDEX (0x00000000)
Namespace: Win32
Filename: 'Administrator'
Dumping attribute $INDEX_ROOT (0x90) from mft record 19352 (0x4b98)
Resident: Yes
Attribute name: '$I30'
Attribute flags: 0x0000
Attribute instance: 6 (0x6)
Data size: 168 (0xa8)
Resident flags: 0x00
Indexed Attr Type: DIRECTORY_I30
Collation Rule: 1 (0x1)
Index Block Size: 4096 (0x1000)
Clusters Per Block: 8 (0x8)
Entries Offset: 16 (0x10)
Index Size: 152 (0x98)
Allocated Size: 152 (0x98)
Index header flags: 0x01
Index entries total: 2
Dumping attribute $INDEX_ALLOCATION (0xa0) from mft record 19352 (0x4b98)
Resident: No
Attribute name: '$I30'
Attribute flags: 0x0000
Attribute instance: 4 (0x4)
Compression unit: 0 (0x0)
Data size: 65536 (0x10000)
Allocated size: 65536 (0x10000)
Initialized size: 65536 (0x10000)
Index entries total: 53
INDX blocks total: 2
Dumping attribute $BITMAP (0xb0) from mft record 19352 (0x4b98)
Resident: Yes
Attribute name: '$I30'
Attribute flags: 0x0000
Attribute instance: 5 (0x5)
Data size: 8 (0x8)
Resident flags: 0x00
End of inode reached

Windows reports the filesystem clean:

C:\Users\Administrator>chkdsk /f f:
The type of the file system is NTFS.

CHKDSK is verifying files (stage 1 of 3)...
33280 file records processed.
File verification completed.
0 large file records processed.
0 bad file records processed.
0 EA records processed.
0 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3)...
42362 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
CHKDSK is verifying security descriptors (stage 3 of 3)...
33280 file SDs/SIDs processed.
Security descriptor verification completed.
4541 data files processed.
Windows has checked the file system and found no problems.

713028604 KB total disk space.
581699008 KB in 28535 files.
32448 KB in 4543 indexes.
0 KB in bad sectors.
200764 KB in use by the system.
65536 KB occupied by the log file.
131096384 KB available on disk.

65536 bytes in each allocation unit.
11141071 total allocation units on disk.
2048381 allocation units available on disk.

Filesystem is exported to a windows system via scst. Some of the files and inodes work fine with ntfs-3g.

Allocation unit size is 64K.
Mon Oct 31, 2011 00:34
Profile
jpa
NTFS-3G Lead Developer

Joined: Tue Sep 04, 2007 17:22
Posts: 1010
Post Re: possible driver bug in ntfs-3g
Hi,

Quote:
Index Block Size: 4096 (0x1000)
Clusters Per Block: 8 (0x8)

This must be wrong. Usually, the index block size is same or greater than cluster size, and there are several clusters per block, but :

Quote:
65536 bytes in each allocation unit.

Your cluster size is 64K, which is unusual and a possible cause for the above. This means there are 16 index blocks per cluster (instead of 8 clusters per block).

Quote:
Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x4b98

This looks like the VCN to cluster computation is based on 4K (or 8K ?) clusters instead of 64K.

I need some time to build a similar configuration and check the case where index block is smaller than a cluster. Before doing so, I would like to know your sector size. This is shown by ntfsinfo with option -m. Also please post the ntfsinfo information for a directory with option -vi (ntfsinfo -vi 0x4b98 /dev/loop0), so that I see the runlist for the index. You may compress both outputs and post as an attachment.

Regards

Jean-Pierre
Mon Oct 31, 2011 10:29
Profile
kordex

Joined: Mon Oct 31, 2011 00:08
Posts: 4
Post Re: possible driver bug in ntfs-3g
Hello,

Unfortunately uploading attachments does not work for me.

Here are the outputs:

MFT information:

Code:
Volume Information
   Name of device: /dev/loop0
   Device state: 11
   Volume Name:
   Volume State: 1
   Volume Version: 3.1
   Sector Size: 4096
   Cluster Size: 65536
   Volume Size in Clusters: 11141071
MFT Information
   MFT Record Size: 4096
   MFT Zone Multiplier: 1
   MFT Data Position: 24
   MFT Zone Start: 49152
   MFT Zone End: 1441785
   MFT Zone Position: 49152
   Current Position in First Data Zone: 1441785
   Current Position in Second Data Zone: 0
   LCN of Data Attribute for FILE_MFT: 49152
   FILE_MFTMirr Size: 4
   LCN of Data Attribute for File_MFTMirr: 1
   Size of Attribute Definition Table: 2560
FILE_Bitmap Information
   FILE_Bitmap MFT Record Number: 6
   State of FILE_Bitmap Inode: 0
   Length of Attribute List: 0
   Attribute List: (null)
   Number of Attached Extent Inodes: 0
FILE_Bitmap Data Attribute Information
   Decompressed Runlist: not done yet
   Base Inode: 6
   Attribute Types: not done yet
   Attribute Name Length: 0
   Attribute State: 3
   Attribute Allocated Size: 1441792
   Attribute Data Size: 1392640
   Attribute Initialized Size: 1392640
   Attribute Compressed Size: 0
   Compression Block Size: 0
   Compression Block Size Bits: 0
   Compression Block Clusters: 0


inode information:

Code:
Dumping Inode 19352 (0x4b98)
Upd. Seq. Array Off.:    48 (0x30)
Upd. Seq. Array Count:    9 (0x9)
Upd. Seq. Number:    8 (0x8)
LogFile Seq. Number:    0xb286449
MFT Record Seq. Numb.:    1 (0x1)
Number of Hard Links:    2 (0x2)
Attribute Offset:    72 (0x48)
MFT Record Flags:    IN_USE DIRECTORY
Bytes Used:       728 (0x2d8) bytes
Bytes Allocated:    4096 (0x1000) bytes
Next Attribute Instance: 11 (0xb)
MFT Padding:   00 00 00 00 00 00
Dumping attribute $STANDARD_INFORMATION (0x10) from mft record 19352 (0x4b98)
   Attribute length:    96 (0x60)
   Resident:        Yes
   Name length:       0 (0x0)
   Name offset:       0 (0x0)
   Attribute flags:    0x0000
   Attribute instance:    0 (0x0)
   Data size:       72 (0x48)
   Data offset:       24 (0x18)
   Resident flags:       0x00
   ReservedR:       0 (0x0)
   File Creation Time:    Sat Oct 15 14:51:11 2011
   File Altered Time:    Sat Aug 20 16:47:40 2011
   MFT Changed Time:    Thu Oct 20 02:19:10 2011
   Last Accessed Time:    Sat Oct 15 14:51:27 2011
   File attributes:    (0x00000000)
   Maximum versions:    0
   Version number:       0
   Class ID:       0
   User ID:       0 (0x0)
   Security ID:       267 (0x10b)
   Quota charged:       0 (0x0)
   Update Sequence Number:    0 (0x0)
Dumping attribute $FILE_NAME (0x30) from mft record 19352 (0x4b98)
   Attribute length:    112 (0x70)
   Resident:        Yes
   Name length:       0 (0x0)
   Name offset:       0 (0x0)
   Attribute flags:    0x0000
   Attribute instance:    10 (0xa)
   Data size:       82 (0x52)
   Data offset:       24 (0x18)
   Resident flags:       0x01
   ReservedR:       0 (0x0)
   Parent directory:    30848 (0x7880)
   File Creation Time:    Sat Oct 15 14:51:11 2011
   File Altered Time:    Sat Aug 20 16:47:40 2011
   MFT Changed Time:    Sat Oct 15 16:06:52 2011
   Last Accessed Time:    Sat Oct 15 14:51:27 2011
   Allocated Size:       0 (0x0)
   Data Size:       0 (0x0)
   Filename Length:    8 (0x8)
   File attributes:    I30_INDEX (0x00000000)
   Namespace:       DOS
   Filename:       'ADMINI~1'
Dumping attribute $FILE_NAME (0x30) from mft record 19352 (0x4b98)
   Attribute length:    120 (0x78)
   Resident:        Yes
   Name length:       0 (0x0)
   Name offset:       0 (0x0)
   Attribute flags:    0x0000
   Attribute instance:    9 (0x9)
   Data size:       92 (0x5c)
   Data offset:       24 (0x18)
   Resident flags:       0x01
   ReservedR:       0 (0x0)
   Parent directory:    30848 (0x7880)
   File Creation Time:    Sat Oct 15 14:51:11 2011
   File Altered Time:    Sat Aug 20 16:47:40 2011
   MFT Changed Time:    Sat Oct 15 16:06:52 2011
   Last Accessed Time:    Sat Oct 15 14:51:27 2011
   Allocated Size:       0 (0x0)
   Data Size:       0 (0x0)
   Filename Length:    13 (0xd)
   File attributes:    I30_INDEX (0x00000000)
   Namespace:       Win32
   Filename:       'Administrator'
Dumping attribute $INDEX_ROOT (0x90) from mft record 19352 (0x4b98)
   Attribute length:    200 (0xc8)
   Resident:        Yes
   Name length:       4 (0x4)
   Name offset:       24 (0x18)
   Attribute name:       '$I30'
   Attribute flags:    0x0000
   Attribute instance:    6 (0x6)
   Data size:       168 (0xa8)
   Data offset:       32 (0x20)
   Resident flags:       0x00
   ReservedR:       0 (0x0)
   Indexed Attr Type:    DIRECTORY_I30
   Collation Rule:       1 (0x1)
   Index Block Size:    4096 (0x1000)
   Clusters Per Block:    8 (0x8)
   Entries Offset:       16 (0x10)
   Index Size:       152 (0x98)
   Allocated Size:       152 (0x98)
   Index header flags:    0x01
   Dumping index root:
      Entry length:       112 (0x70)
      Key length:       82 (0x52)
      Index entry flags:    0x01
      Subnode VCN:       0 (0x0)
      FILE record number:    19377 (0x4bb1)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:13:16 2011
      Last Accessed Time:    Sat Oct 15 15:13:16 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'FAVORI~1'

      Entry length:       24 (0x18)
      Key length:       0 (0x0)
      Index entry flags:    0x03
      Subnode VCN:       8 (0x8)
   End of index block reached
   Index entries total:    2
Dumping attribute $INDEX_ALLOCATION (0xa0) from mft record 19352 (0x4b98)
   Attribute length:    80 (0x50)
   Resident:        No
   Name length:       4 (0x4)
   Name offset:       64 (0x40)
   Attribute name:       '$I30'
   Attribute flags:    0x0000
   Attribute instance:    4 (0x4)
   Lowest VCN       0 (0x0)
   Highest VCN:       0 (0x0)
   Mapping pairs offset:    72 (0x48)
   Compression unit:    0 (0x0)
   Data size:       65536 (0x10000)
   Allocated size:       65536 (0x10000)
   Initialized size:    65536 (0x10000)
   Runlist:   VCN      LCN      Length
         0x0      0x93d      0x1
   Dumping index block:
      Upd. Seq. Array Off.:    40 (0x28)
      Upd. Seq. Array Count:    9 (0x9)
      Upd. Seq. Number:    13 (0xd)
      LogFile Seq. Number:    0x323d923
      Node VCN:       0 (0x0)
      Entries Offset:       40 (0x28)
      Index Size:       2392 (0x958)
      Allocated Size:       4072 (0xfe8)
      Index header flags:    0x00

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19365 (0x4ba5)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:14 2011
      MFT Changed Time:    Sat Oct 15 14:51:27 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       '.android'

      Entry length:       104 (0x68)
      Key length:       84 (0x54)
      Index entry flags:    0x00
      FILE record number:    19608 (0x4c98)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Sat Aug 13 13:44:51 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       65536 (0x10000)
      Data Size:       15364 (0x3c04)
      Filename Length:    9 (0x9)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32
      Filename:       '.DS_Store'

      Entry length:       96 (0x60)
      Key length:       78 (0x4e)
      Index entry flags:    0x00
      FILE record number:    19366 (0x4ba6)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:20 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    6 (0x6)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       '.gconf'

      Entry length:       96 (0x60)
      Key length:       80 (0x50)
      Index entry flags:    0x00
      FILE record number:    19367 (0x4ba7)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:35 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    7 (0x7)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       '.gconfd'

      Entry length:       96 (0x60)
      Key length:       80 (0x50)
      Index entry flags:    0x00
      FILE record number:    19368 (0x4ba8)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:35 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    7 (0x7)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       '.gnome2'

      Entry length:       112 (0x70)
      Key length:       96 (0x60)
      Index entry flags:    0x00
      FILE record number:    19369 (0x4ba9)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat May 28 18:01:02 2011
      MFT Changed Time:    Sat Oct 15 14:51:12 2011
      Last Accessed Time:    Sat Oct 15 14:51:12 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    15 (0xf)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       '.gnome2_private'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19370 (0x4baa)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:37 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       '.gnucash'

      Entry length:       104 (0x68)
      Key length:       88 (0x58)
      Index entry flags:    0x00
      FILE record number:    19371 (0x4bab)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:37 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    11 (0xb)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       '.kchmviewer'

      Entry length:       168 (0xa8)
      Key length:       152 (0x98)
      Index entry flags:    0x00
      FILE record number:    19609 (0x4c99)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Mon Jul  4 23:04:48 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       40 (0x28)
      Data Size:       36 (0x24)
      Filename Length:    43 (0x2b)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32
      Filename:       '.org.eclipse.epp.usagedata.recording.userId'

      Entry length:       120 (0x78)
      Key length:       104 (0x68)
      Index entry flags:    0x00
      FILE record number:    19610 (0x4c9a)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Sun Jul 10 13:06:42 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       224 (0xe0)
      Data Size:       218 (0xda)
      Filename Length:    19 (0x13)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32
      Filename:       '.recently-used.xbel'

      Entry length:       104 (0x68)
      Key length:       88 (0x58)
      Index entry flags:    0x00
      FILE record number:    19364 (0x4ba4)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:39 2011
      MFT Changed Time:    Sat Oct 15 14:51:27 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    11 (0xb)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       '.VirtualBox'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19365 (0x4ba5)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:14 2011
      MFT Changed Time:    Sat Oct 15 14:51:27 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'ANDROI~1'

      Entry length:       96 (0x60)
      Key length:       80 (0x50)
      Index entry flags:    0x00
      FILE record number:    19372 (0x4bac)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:26:37 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    7 (0x7)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'AppData'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19373 (0x4bad)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:29:25 2011
      MFT Changed Time:    Sat Oct 15 15:10:04 2011
      Last Accessed Time:    Sat Oct 15 15:10:04 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'Contacts'

      Entry length:       96 (0x60)
      Key length:       80 (0x50)
      Index entry flags:    0x00
      FILE record number:    19374 (0x4bae)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:45:31 2011
      MFT Changed Time:    Sat Oct 15 15:10:04 2011
      Last Accessed Time:    Sat Oct 15 15:10:04 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    7 (0x7)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'Desktop'

      Entry length:       104 (0x68)
      Key length:       86 (0x56)
      Index entry flags:    0x00
      FILE record number:    19614 (0x4c9e)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Sat Jul 23 09:13:40 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       48 (0x30)
      Data Size:       41 (0x29)
      Filename Length:    10 (0xa)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'dlmgr_.pro'

      Entry length:       104 (0x68)
      Key length:       84 (0x54)
      Index entry flags:    0x00
      FILE record number:    19375 (0x4baf)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:01 2011
      MFT Changed Time:    Sat Oct 15 15:12:51 2011
      Last Accessed Time:    Sat Oct 15 15:12:51 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    9 (0x9)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       'Documents'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19375 (0x4baf)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:01 2011
      MFT Changed Time:    Sat Oct 15 15:12:51 2011
      Last Accessed Time:    Sat Oct 15 15:12:51 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'DOCUME~1'

      Entry length:       104 (0x68)
      Key length:       84 (0x54)
      Index entry flags:    0x00
      FILE record number:    19376 (0x4bb0)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:35 2011
      MFT Changed Time:    Sat Oct 15 15:13:12 2011
      Last Accessed Time:    Sat Oct 15 15:13:12 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    9 (0x9)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       'Downloads'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19376 (0x4bb0)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:35 2011
      MFT Changed Time:    Sat Oct 15 15:13:12 2011
      Last Accessed Time:    Sat Oct 15 15:13:12 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'DOWNLO~1'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19608 (0x4c98)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Sat Aug 13 13:44:51 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       65536 (0x10000)
      Data Size:       15364 (0x3c04)
      Filename Length:    8 (0x8)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       DOS
      Filename:       'DS_STO~1'

      Entry length:       104 (0x68)
      Key length:       84 (0x54)
      Index entry flags:    0x00
      FILE record number:    19377 (0x4bb1)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:13:16 2011
      Last Accessed Time:    Sat Oct 15 15:13:16 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    9 (0x9)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       'Favorites'

      Entry length:       16 (0x10)
      Key length:       0 (0x0)
      Index entry flags:    0x02
   End of index block reached
   Index entries:       23
   Dumping index block:
      Upd. Seq. Array Off.:    40 (0x28)
      Upd. Seq. Array Count:    9 (0x9)
      Upd. Seq. Number:    9 (0x9)
      LogFile Seq. Number:    0x323dd36
      Node VCN:       8 (0x8)
      Entries Offset:       40 (0x28)
      Index Size:       3512 (0xdb8)
      Allocated Size:       4072 (0xfe8)
      Index header flags:    0x00

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19367 (0x4ba7)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:35 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'GCONFD~1'

      Entry length:       96 (0x60)
      Key length:       80 (0x50)
      Index entry flags:    0x00
      FILE record number:    19366 (0x4ba6)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:20 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    7 (0x7)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'GCONF~1'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19368 (0x4ba8)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:35 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'GNOME2~1'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19369 (0x4ba9)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat May 28 18:01:02 2011
      MFT Changed Time:    Sat Oct 15 14:51:12 2011
      Last Accessed Time:    Sat Oct 15 14:51:12 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'GNOME2~2'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19370 (0x4baa)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:37 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'GNUCAS~1'

      Entry length:       112 (0x70)
      Key length:       90 (0x5a)
      Index entry flags:    0x00
      FILE record number:    19615 (0x4c9f)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Mon May 23 19:52:32 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       65536 (0x10000)
      Data Size:       11195 (0x2bbb)
      Filename Length:    12 (0xc)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'gsview64.ini'

      Entry length:       88 (0x58)
      Key length:       72 (0x48)
      Index entry flags:    0x00
      FILE record number:    19378 (0x4bb2)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:23:42 2011
      Last Accessed Time:    Sat Oct 15 15:23:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    3 (0x3)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'IBM'

      Entry length:       112 (0x70)
      Key length:       96 (0x60)
      Index entry flags:    0x00
      FILE record number:    19379 (0x4bb3)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sun Aug 14 14:16:59 2011
      MFT Changed Time:    Sat Oct 15 15:12:52 2011
      Last Accessed Time:    Sat Oct 15 15:12:52 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    15 (0xf)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       'InstallAnywhere'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19379 (0x4bb3)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sun Aug 14 14:16:59 2011
      MFT Changed Time:    Sat Oct 15 15:12:52 2011
      Last Accessed Time:    Sat Oct 15 15:12:52 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'INSTAL~1'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19371 (0x4bab)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:37 2011
      MFT Changed Time:    Sat Oct 15 14:51:42 2011
      Last Accessed Time:    Sat Oct 15 14:51:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'KCHMVI~1'

      Entry length:       96 (0x60)
      Key length:       76 (0x4c)
      Index entry flags:    0x00
      FILE record number:    19380 (0x4bb4)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:23:42 2011
      Last Accessed Time:    Sat Oct 15 15:23:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    5 (0x5)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'Links'

      Entry length:       96 (0x60)
      Key length:       76 (0x4c)
      Index entry flags:    0x00
      FILE record number:    19381 (0x4bb5)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:23:42 2011
      Last Accessed Time:    Sat Oct 15 15:23:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    5 (0x5)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'Music'

      Entry length:       192 (0xc0)
      Key length:       176 (0xb0)
      Index entry flags:    0x00
      FILE record number:    19611 (0x4c9b)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Thu May 12 19:44:08 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       65536 (0x10000)
      Data Size:       65536 (0x10000)
      Filename Length:    55 (0x37)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32
      Filename:       'NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf'

      Entry length:       272 (0x110)
      Key length:       250 (0xfa)
      Index entry flags:    0x00
      FILE record number:    19612 (0x4c9c)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Thu May 12 19:44:08 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       524288 (0x80000)
      Data Size:       524288 (0x80000)
      Filename Length:    92 (0x5c)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32
      Filename:       'NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms'

      Entry length:       272 (0x110)
      Key length:       250 (0xfa)
      Index entry flags:    0x00
      FILE record number:    19613 (0x4c9d)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Thu May 12 19:44:08 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       524288 (0x80000)
      Data Size:       524288 (0x80000)
      Filename Length:    92 (0x5c)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32
      Filename:       'NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms'

      Entry length:       104 (0x68)
      Key length:       86 (0x56)
      Index entry flags:    0x00
      FILE record number:    19616 (0x4ca0)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Thu May 12 19:44:07 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       24 (0x18)
      Data Size:       20 (0x14)
      Filename Length:    10 (0xa)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'ntuser.ini'

      Entry length:       112 (0x70)
      Key length:       90 (0x5a)
      Index entry flags:    0x00
      FILE record number:    19611 (0x4c9b)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Thu May 12 19:44:08 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       65536 (0x10000)
      Data Size:       65536 (0x10000)
      Filename Length:    12 (0xc)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       DOS
      Filename:       'NTUSER~1.BLF'

      Entry length:       112 (0x70)
      Key length:       90 (0x5a)
      Index entry flags:    0x00
      FILE record number:    19612 (0x4c9c)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Thu May 12 19:44:08 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       524288 (0x80000)
      Data Size:       524288 (0x80000)
      Filename Length:    12 (0xc)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       DOS
      Filename:       'NTUSER~1.REG'

      Entry length:       112 (0x70)
      Key length:       90 (0x5a)
      Index entry flags:    0x00
      FILE record number:    19613 (0x4c9d)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Thu May 12 19:44:08 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       524288 (0x80000)
      Data Size:       524288 (0x80000)
      Filename Length:    12 (0xc)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       DOS
      Filename:       'NTUSER~2.REG'

      Entry length:       112 (0x70)
      Key length:       90 (0x5a)
      Index entry flags:    0x00
      FILE record number:    19609 (0x4c99)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Mon Jul  4 23:04:48 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       40 (0x28)
      Data Size:       36 (0x24)
      Filename Length:    12 (0xc)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       DOS
      Filename:       'ORGECL~1.USE'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19382 (0x4bb6)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:23:42 2011
      Last Accessed Time:    Sat Oct 15 15:23:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'Pictures'

      Entry length:       112 (0x70)
      Key length:       90 (0x5a)
      Index entry flags:    0x00
      FILE record number:    19610 (0x4c9a)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:27 2011
      File Altered Time:    Sun Jul 10 13:06:42 2011
      MFT Changed Time:    Sun Oct 16 13:00:08 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       224 (0xe0)
      Data Size:       218 (0xda)
      Filename Length:    12 (0xc)
      File attributes:    ARCHIVE (0x00000000)
      Namespace:       DOS
      Filename:       'RECENT~1.XBE'

      Entry length:       104 (0x68)
      Key length:       88 (0x58)
      Index entry flags:    0x00
      FILE record number:    19383 (0x4bb7)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:23:42 2011
      Last Accessed Time:    Sat Oct 15 15:23:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    11 (0xb)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       'Saved Games'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19383 (0x4bb7)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:23:42 2011
      Last Accessed Time:    Sat Oct 15 15:23:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'SAVEDG~1'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19384 (0x4bb8)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:23:42 2011
      Last Accessed Time:    Sat Oct 15 15:23:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'Searches'

      Entry length:       96 (0x60)
      Key length:       78 (0x4e)
      Index entry flags:    0x00
      FILE record number:    19385 (0x4bb9)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:47:40 2011
      MFT Changed Time:    Sat Oct 15 15:23:42 2011
      Last Accessed Time:    Sat Oct 15 15:23:42 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    6 (0x6)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32 & DOS
      Filename:       'Videos'

      Entry length:       112 (0x70)
      Key length:       94 (0x5e)
      Index entry flags:    0x00
      FILE record number:    19386 (0x4bba)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sun Jul 31 18:24:19 2011
      MFT Changed Time:    Sat Oct 15 15:12:52 2011
      Last Accessed Time:    Sat Oct 15 15:12:52 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    14 (0xe)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       Win32
      Filename:       'VirtualBox VMs'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19364 (0x4ba4)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sat Aug 20 16:16:39 2011
      MFT Changed Time:    Sat Oct 15 14:51:27 2011
      Last Accessed Time:    Sat Oct 15 14:51:27 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'VIRTUA~1'

      Entry length:       104 (0x68)
      Key length:       82 (0x52)
      Index entry flags:    0x00
      FILE record number:    19386 (0x4bba)
      Parent directory:    19352 (0x4b98)
      File Creation Time:    Sat Oct 15 14:51:12 2011
      File Altered Time:    Sun Jul 31 18:24:19 2011
      MFT Changed Time:    Sat Oct 15 15:12:52 2011
      Last Accessed Time:    Sat Oct 15 15:12:52 2011
      Allocated Size:       0 (0x0)
      Data Size:       0 (0x0)
      Filename Length:    8 (0x8)
      File attributes:    I30_INDEX (0x00000000)
      Namespace:       DOS
      Filename:       'VIRTUA~2'

      Entry length:       16 (0x10)
      Key length:       0 (0x0)
      Index entry flags:    0x02
   End of index block reached
   Index entries:       30
   Index entries total:    53
   INDX blocks total:    2
Dumping attribute $BITMAP (0xb0) from mft record 19352 (0x4b98)
   Attribute length:    40 (0x28)
   Resident:        Yes
   Name length:       4 (0x4)
   Name offset:       24 (0x18)
   Attribute name:       '$I30'
   Attribute flags:    0x0000
   Attribute instance:    5 (0x5)
   Data size:       8 (0x8)
   Data offset:       32 (0x20)
   Resident flags:       0x00
   ReservedR:       0 (0x0)
End of inode reached
Mon Oct 31, 2011 15:40
Profile
jpa
NTFS-3G Lead Developer

Joined: Tue Sep 04, 2007 17:22
Posts: 1010
Post Re: possible driver bug in ntfs-3g
Hi,

Ok, there is a bug in ntfs-3g.

I created a volume similar to yours, with 4K sectors and 64K clusters, and put enough files in a directory to force a non resident index. ntfs-3g is happy with it, but chkdsk complains.

The problem lies in evaluating the index block size. When the index size is smaller than a cluster, ntfs-3g assumes the size unit is a sector, but :
Quote:
Index Block Size: 4096 (0x1000)
Clusters Per Block: 8 (0x8)

would mean the sector size is 4096/8 or 512 bytes, but in your case the sector size is 4K (in this case ntfs-3g would use one sector per block).

Also note that ntfsinfo should probably have displayed "Sectors per block" instead of "Clusters per block". Maybe the unit is always 512 bytes whatever the sector size, with the index block size adjusted so that the index block size is a multiple of physical sector size.

How did you format the device (which utility and version did you use ?)

I have to ask you to be patient for a fix.

Quote:
Unfortunately uploading attachments does not work for me.

This forum only accepts compressed attachments, this is why I asked you to compress the outputs... Anyway I got them.

Regards

Jean-Pierre
Mon Oct 31, 2011 18:13
Profile
kordex

Joined: Mon Oct 31, 2011 00:08
Posts: 4
Post Re: possible driver bug in ntfs-3g
Hello,

Following steps are used to create such a ntfs-volume and reproduce such error:

Create empty disk with size of 4K*102400 (419 MB)

root@teletex:/mnt/sd/d/1# dd if=/dev/zero of=testx.img bs=4k count=102400
102400+0 records in
102400+0 records out
419430400 bytes (419 MB) copied, 9.55843 s, 43.9 MB/s

Tell vdisk handler to add /mnt/sd/d/1/testx.img with blocksize=4096 (will be sector size for windows?) labeled as testx.

root@teletex:/mnt/sd/d/1# echo "add_device testx filename=/mnt/sd/d/1/testx.img;blocksize=4096" > /sys/kernel/scst_tgt/handlers/vdisk_fileio/mgmt

Show vdisk labled testx from 21:00:00:e0:8b:xx:5d:xx to any

root@teletex:/mnt/sd/d/1# echo "add testx 4" > /sys/kernel/scst_tgt/targets/qla2x00t/21:00:00:e0:8b:xx:5d:xx/luns/mgmt

Again for multipath

root@teletex:/mnt/sd/d/1# echo "add testx 4" > /sys/kernel/scst_tgt/targets/qla2x00t/21:00:00:e0:8b:yy:63:yy/luns/mgmt

Run diskmgmt.msc on Microsoft Windows [Version 6.1.7601] (Windows 2008 R2).

* MPIO already configured for disk SCST_FIOtestx.

1) Initializing disk with MBR partition style.
2) Creating New Simple Volume.
* Size 397 in MB
* Assigning drive letter X:
* Format this volume with following settings:
* File system: NTFS
* Allocation unit size: 64K
* Volume Label: testx
* [x] Perform quick format

3) Create a few directories on volume x: under directory admin

X:\admin>mkdir a b c d e f g h i j k l m n o p q r s t u v w x y z aa ab ac ad a
e af ag ah ai aj ak al ao ap aq ar as at au av aw ax ay az

4) Mark device offline

5) Determine the partition start with hexdump:

root@teletex:/mnt/sd/d/1# hexdump -C testx.img |less

00040000 eb 52 90 4e 54 46 53 20 20 20 20 00 10 10 00 00 |.R.NTFS .....|

Offset is 00040000

Determine it in decimal

root@teletex:/mnt/sd/d/1# bc -l
bc 1.06.95
Copyright 1991-1994, 1997, 1998, 2000, 2004, 2006 Free Software Foundation, Inc.
This is free software with ABSOLUTELY NO WARRANTY.
For details type `warranty'.
obase=10
ibase=16
00040000
262144

6) losetup device

losetup -o 262144 -r /dev/loop1 testx.img

7) mount

ntfs-3g -o ro /dev/loop1 /mnt/loop1/

8) try to access the inode of x:\admin:

root@teletex:/mnt/sd/d/1# ls /mnt/loop1/admin/
ls: reading directory /mnt/loop1/admin/: Input/output error

Oct 31 18:50:43 teletex ntfs-3g[10981]: Version 2010.3.6 integrated FUSE 27
Oct 31 18:50:43 teletex ntfs-3g[10981]: Mounted /dev/loop1 (Read-Only, label "testx", NTFS 3.1)
Oct 31 18:50:43 teletex ntfs-3g[10981]: Cmdline options: ro
Oct 31 18:50:43 teletex ntfs-3g[10981]: Mount options: ro,silent,allow_other,nonempty,relatime,fsname=/dev/loop1,blkdev,blksize=4096
Oct 31 18:50:43 teletex ntfs-3g[10981]: Ownership and permissions disabled, configuration type 1
Oct 31 18:50:51 teletex ntfs-3g[10981]: Actual VCN (0x8) of index buffer is different from expected VCN (0x1) in inode 0x23.

Sorry about the imperative instructions.

I can tell you that Windows Disk Management is also against using blocksizes larger than 4K (Volume Manager crashes and does not start before taking disks of larger blocksize off from SAN).

Br,
-Mikko Kortelainen
Mon Oct 31, 2011 18:54
Profile
aia21
Tuxera Kernel Developer

Joined: Fri Sep 04, 2009 15:30
Posts: 12
Location: Cambridge, UK
Post Re: possible driver bug in ntfs-3g
Hi,

This very simple patch to the kernel NTFS driver should fix this issue:


--- fs/ntfs/inode.c.old 2011-10-31 23:39:54.000000000 +0000
+++ fs/ntfs/inode.c 2011-10-31 23:40:18.000000000 +0000
@@ -894,8 +894,8 @@ skip_attr_list_load:
ni->itype.index.vcn_size = vol->cluster_size;
ni->itype.index.vcn_size_bits = vol->cluster_size_bits;
} else {
- ni->itype.index.vcn_size = vol->sector_size;
- ni->itype.index.vcn_size_bits = vol->sector_size_bits;
+ ni->itype.index.vcn_size = NTFS_BLOCK_SIZE;
+ ni->itype.index.vcn_size_bits = NTFS_BLOCK_SIZE_SHIFT;
}

/* Setup the index allocation attribute, even if not present. */

Would you be able to try it and tell us if it works?

Thanks a lot in advance!

Best regards,

Anton
Tue Nov 01, 2011 01:42
Profile
aia21
Tuxera Kernel Developer

Joined: Fri Sep 04, 2009 15:30
Posts: 12
Location: Cambridge, UK
Post Re: possible driver bug in ntfs-3g
Sorry I meant _BITS not _SHIFT in above diff...

Best regards,

Anton
Tue Nov 01, 2011 02:07
Profile
jpa
NTFS-3G Lead Developer

Joined: Tue Sep 04, 2007 17:22
Posts: 1010
Post Re: possible driver bug in ntfs-3g
Hi,

Thank you Anton for the fix.

Attached are a couple of equivalent patches for ntfs-3g, chkdsk does not complain any more. These patches should apply to all ntfs-3g versions.

Note that ntfs-3g and mkntfs were consistently wrong. The bug could only be noticed when interoperating with Windows. The fix may cause problems to existing users of devices with 4K sectors.

If patches are needed to mkntfs or other ntfsprogs utilities, they will be included in future releases.

Regards

Jean-Pierre


Attachments:
index.c.patch15.gz [300 Bytes]
Downloaded 92 times
dir.c.patch15.gz [446 Bytes]
Downloaded 81 times
Tue Nov 01, 2011 10:27
Profile
kordex

Joined: Mon Oct 31, 2011 00:08
Posts: 4
Post Re: possible driver bug in ntfs-3g
Hello,

Both patches, the in-kernel one and ntfs-3g, resolve the problem. Thank you!

Br,
-Mikko Kortelainen
Tue Nov 01, 2011 13:05
Profile
aia21
Tuxera Kernel Developer

Joined: Fri Sep 04, 2009 15:30
Posts: 12
Location: Cambridge, UK
Post Re: possible driver bug in ntfs-3g
Great, thanks for testing!

Best regards,

Anton
Tue Nov 01, 2011 13:29
Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 10 posts ] 

Board index » NTFS-3G Support » Usage Questions & Problems on Linux

All times are UTC + 2 hours


Who is online

Users browsing this forum: No registered users and 3 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Original forum style by Vjacheslav Trushkin.