Parsing a File's Me...
 
Notifications
Clear all

Parsing a File's Metadata Block in ReFS

NeriMatrixx
(@nerimatrixx)
New Member

I have search everywhere trying to find out EXACTLY what's inside an ReFS Metadata Block. Particularly, I would like to know the sector-offset of the file pointer that's within the metadata block.

"...where the file has content a file pointer, it will point to the 16KB metadata block address." -  http://resilientfilesystem.co.uk/refs-metadata-block

 

Also, I have read that the partition ID for ReFS is 07 (the same as NTFS); however, I cant find an official documentation from MS that confirming this. Can anyone provide a link to a reliable source that confirms this?

Quote
Topic starter Posted : 24/02/2021 7:19 am
Topic Tags
JimC
 JimC
(@jimc)
Member

I would suggest the following starting point:

Reverse engineering of ReFS

There is quite a lot of ReFS research out there now if you go looking.

 

Jim

www.binarymarkup.com

 

ReplyQuote
Posted : 24/02/2021 11:38 am
mscotgrove
(@mscotgrove)
Senior Member

My experience of Partition ID for many Linux file systems is that nothing is defined.  7 is always NTFS, and Reiser may or may not be 7.  You need to look at the start of the partition to determine the actual format.

Programs such as HP Media Vault use Reiser as JOBD RAID, and have a unique boot sector

ReplyQuote
Posted : 28/02/2021 10:15 am
Share: