Questions Regarding NTFS File Attribute Types

Hi,

I'm reading about the NTFS File Attribute Types from the documents that I've printed from the Microsoft Technet.

I've few questions and hoping someone would be able to answer or be able to provide a link so that I can have a better understanding of what I'm reading.

1] Standard Information: Information such as Access Mode[read-only, read/write], timestamp and Link Count.

Q] What is Link Count?



2] Data: File Data. NTFS Supports Multiple Data Attributes per File. Each File typically has One UnNamed Data Attribute. A File can also have One or More Named Data Attributes.

Q] Why does NTFS Support Multiple Data Attributes?

Q] What are Named Data Attributes?

Q] What are UnNamed Data Attributes?



3] Reparse Point: Used for Mounted Drives. This is also used by Installable File System[IFS] Filter Drivers to mark certain Files as Special to that Driver.

Q] What are Mounted Drives?

Q] What is Installable File System? Is IFS part of NTFS?



4] Index Root: Used to Implement Folders and other Indexes.

Q] What does it mean to Implement Folders?

Q] What are Indexes?

Q] What are the different Types Of Indexes in NTFS?



5] Index Allocation: Used to Implement B-Tree Structures for Large Folders and Large Indexes.

Q] What is a B-Tree Structure?

Q] What are the different Types Of Structures available in NTFS?

Q] What Folders are considered to be Large?

Q] What Indexes are considered to be Large?



I'll greatly appreciate any help you can provide me.

Thankyou
Ctrl+Alt+Delete

Hi Welcome to AO

Here is a link: Happy Reading should answer just about everything related to NTFS. ;)

Hello Dalek,

Thankyou for the link.
I've checked NTFS.com before I've posted my questions. I did not find answers to my specific questions. Would it be possible for you to provide any examples for my questions? That would be great.

Thankyou for your time.

Ctrl+Alt+Delete

Link Count
· One of the items in the inode is a link count
o "How many links are there to this file?"
o When you unlink a file, the kernel decrements the link count
o If the link count is 0, the kernel frees up the data blocks
o ... unless someone still has the file open
o ... in which case the data is freed only when the file is closed
· This means you can open a file and unlink it
o And still read it and write it
o unlinking doesn't remove the file; it only removes the name

Why does NTFS Support Multiple Data Attributes?
Multiple data streams. , NTFS files can consist of more than one stream. The additional streams may contain any kind of data, although typically it is data describing the file, or metadata.

What are Named Data Attributes?
What are UnNamed Data Attributes?
http://publib.boulder.ibm.com/infoce...ibml2mst44.htm


http://www.littleharbor.com/ntfs-details.htm

What are Mounted Drives

http://www.microsoft.com/resources/d....mspx?mfr=true

What is Installable File System? Is IFS part of NTFS?

http://www.febooti.com/products/filetweak/online-help/

What does it mean to Implement Folders?

http://www.active-disk-wiper.com/wip...file-types.htm


What are Indexes?
What are the different Types Of Indexes in NTFS?
http://www.pcguide.com/ref/hdd/file/...ilesDir-c.html

What is a B-Tree Structure?
http://www.bluerwhite.org/btree

What are the different Types Of Structures available in NTFS?

http://www.pcguide.com/ref/hdd/file/ntfs/secPerm-c.html

What Folders are considered to be Large?

http://support.microsoft.com/?kbid=303079

What Indexes are considered to be Large?

http://www.littleharbor.com/ntfs-details.htm

http://www.softpedia.com/get/System/...NTFSInfo.shtml

Take your time reading all of this, bookmark the ones which are easier to decipher and or join together their respective information and copy and paste somewhere where you can easily read it from.

Lots of info...Google is your friend

Luck