FILE_RECORD_SEGMENT_HEADER structure
[This structure is valid only for version 3 of NTFS volumes; it may be altered in future versions.]
Represents the file record segment. This is the header for each file record segment in the master file table (MFT).
Syntax
typedef struct _FILE_RECORD_SEGMENT_HEADER {
MULTI_SECTOR_HEADER MultiSectorHeader;
ULONGLONG Reserved1;
USHORT SequenceNumber;
USHORT Reserved2;
USHORT FirstAttributeOffset;
USHORT Flags;
ULONG Reserved3[2];
FILE_REFERENCE BaseFileRecordSegment;
USHORT Reserved4;
UPDATE_SEQUENCE_ARRAY UpdateSequenceArray;
} FILE_RECORD_SEGMENT_HEADER, *PFILE_RECORD_SEGMENT_HEADER;
Members
-
MultiSectorHeader
-
The multisector header defined by the cache manager. The MULTI_SECTOR_HEADER structure always contains the signature "FILE" and a description of the location and size of the update sequence array.
-
Reserved1
-
Reserved.
-
SequenceNumber
-
The sequence number. This value is incremented each time that a file record segment is freed; it is 0 if the segment is not used. The SequenceNumber field of a file reference must match the contents of this field; if they do not match, the file reference is incorrect and probably obsolete.
-
Reserved2
-
Reserved.
-
FirstAttributeOffset
-
The offset of the first attribute record, in bytes.
-
Flags
-
The file flags.
-
FILE_RECORD_SEGMENT_IN_USE (0x0001)
-
FILE_FILE_NAME_INDEX_PRESENT (0x0002)
-
-
Reserved3
-
Reserved.
-
BaseFileRecordSegment
-
A file reference to the base file record segment for this file. If this is the base file record, the value is 0. See MFT_SEGMENT_REFERENCE.
-
Reserved4
-
Reserved.
-
UpdateSequenceArray
-
The update sequence array to protect multisector transfers of the file record segment.
Remarks
Note that there is no associated header file for this structure.
This structure definition is valid only for major version 3 and minor version 0 or 1, as reported by FSCTL_GET_NTFS_VOLUME_DATA.
See also