Quantcast
Channel: Reading MFT
Viewing all articles
Browse latest Browse all 444

Reading MFT

$
0
0

John,

I’ve never done a thorough check but it would be an interesting test. I think I’ve always found more files and folders with the Master File Table than with FindFirst/FindNext. If you use the standard .Net Directory.GetFiles() function it tests each file/folder name and throws an exception if it finds a bad name. FindFirst/FindNext lets you find all of the files.

 

So here is the interesting test. Collect up all the files and all of the folders on a volume both ways and write out the differences… Those found one way and not the other and vice versa.

 

It wouldn’t take long to write and test on a couple of volumes.

 

I have always assumed that the Master File table has everything in it and FindFirst/FindNext filters out a couple. When I gotten properties on a volume and it shows the number of files , the number of files you find in the MFT is always larger in my experience.

 

You will find differences if you have Mounted volumes. If you specify a mount point, Find First/Find Next may find all of the ‘mounted’ files as well as those in the MFT. When I was working with mount points, it would only show one entry in the MFT for the mount point The MFT is strictly volume based.

 

I would like to use it on CodePlex. I see the link and will try it...


StCroixSkipper

Viewing all articles
Browse latest Browse all 444

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>