Your IP : 172.28.240.42


Current Path : /bin/
Upload File :
Current File : //bin/ntfsdump_logfile

ELF>D'@0Q@8	@@@@888DD LL L @P LL L TTTDDPtdBBBTTQtdRtdLL L 00/lib64/ld-linux-x86-64.so.2GNUGNUMVh`͵+Q1$!d)$&+BE|KqXj|8p7aFPUOHz6 
[\" 2iQ"bP  P `-
p,P 
0`

-H-libntfs-3g.so.831__gmon_start___Jv_RegisterClassesntfs_attr_closeAT_UNNAMEDntfs_inode_openntfs_mst_post_read_fixupntfs_log_set_handlerntfs_log_redirectntfs_umountntfs_inode_closentfs_version_is_supportedntfs_attr_openntfs_log_handler_outerrntfs_mountntfs_attr_preadntfs_ucstombslibc.so.6exit__errno_locationmemcmpfputslseekmallocstderrfwrite__vfprintf_chk__cxa_finalize__xstatstrerror__libc_start_mainfree_edata__bss_start_end_IO_stdin_used__libc_csu_fini__libc_csu_initGLIBC_2.3.4GLIBC_2.2.5(ti	ui		O -O p,O 0P P O O 
O O O "O #N N N N N N O 	O O O 
 O (O 0O 8O @O HO PO XO `O hO pO xO O O O O O  O !O "HH5:A %<A @%:A h%2A h%*A h%"A h%A h%A h%
A h%A hp%@ h`%@ h	P%@ h
@%@ h0%@ h %@ h
%@ h%@ h%@ h%@ h%@ h%@ h%@ h%@ h%@ h%@ hp%z@ h`%r@ hP%j@ h@%b@ h0%Z@ h HHH+L
H|$8H|$0H5+H|$(H|$ E1H|$H|$H<$H={1HD$1KATIUSHHLD$PLL$Xt:)D$`)L$p)$)$)$)$)$)$HHtHRMt<Lt0L
JH5+H=0E11$11H7t)L
*H5*H=0E11HK? H=*H3TH$H;HL$HD$ HD$ HD$0D$0HD$(H=A0L
*H5C*E11AWAVAUATUSHHH={> L
-H5)H=/E11%EHsH=*Ld$PHs1LuH\$`H
LcLHHD$(L$PHL$(H|$xL19L
yH52)H=+/E11\$D$,$XL)H)H|$(H5NH1|$h11wHHt$(|$hL]LHT$(=CHKDtk=RSTR"IL9:Hf.8HL9uH|$(H=U)HĘ1[]A\A]A^A_Ht$(D~AAGDHT$(BA9`=PHL$(QffyHT$(	JR9fɍQHL$(A9L
u"H5^'H='-E11L
"H55'H=,E11jLl$(Lt$8D$0MA}CHKDXDL|oA}BAADa|$0AVLLA^uAuLWL@AufA9vNAEfA9F>HQ'L
'H5^&H=,E1H$
1L
'H51&H=z,E1^1fA}RSTRH&H&L
q'H5%H=;,HEE1`H$1AEL
G'H5%H=,E1bD$$1AEL
''H5%H=+E1dD$$1IEL
'H5S%H=+E1gHD$H$1AEL
&H5%H=f+E1jD$$1KAEL
&H5$H=2+E1mD$$1AEL
&H5$H=*E1pD$$1L
&H5$H=*E1
1EeL
&H5V$H=*E1MI$HD$H$1{AD$L
l&H5$H=*E1D$$1EAD$
L
O&H5#H=J*E1Љ$1T$AD$L
!H5#H=*E1Љ$1T$AD$L
%H5o#H=)E1$1AD$L
%H5>#H=)E1D$$1lAD$L
 H5#H=q)E1D$$16AD$L
 H5"H=;)E1D$$1ID$L
V%H5"H=)E1HD$H$1AD$ L
= H5f"H=(E1D$$1AD$$L
/ H50"H=(E1D$$1^AD$&L
! H5!H=c(E1D$$1(AD$(L
 H5!H=.(E1D$$1fA|$A\$@1LH$H{ 1HDŽ$H$L
$H5A!H='E1H$1HàkH$NAD$9L
iH5 H=['E11,$!HL
#H5 H=)'E1HD$H$1HCL
!H5 H=&E1HD$H$1CL
D#H5T H=&E1Љ$1T$CL
&#H5 H=&E1Љ$1T$HCL
#H5H=O&E1D$$1CH5L
kH=&E1D$$1s
1HtH<unnamedf@>HHH$|$0DD$0I-L
H5$H=%E11Y_HHtHH5"L
H5H=$E11.Lt$8L
H5H=g$E11Lt$(DD$8IHL$@MLt$HD$8Ht$@LH9t$HHt$0L
!H53H=$$E11ceA$=CHKDtR=RCRDtK1A<u)HA9wH=\!D$8Ld$0uDA9vH=_DH=1"I\$@M$?A<$RCRDH~H|L
H5{H=$HEE1tH$1E1ID$L
H5BH=#E1wH$1sAD$L
 H5H=#E1x$1BAD$L
q H5H=g#E1y$1AD$L
P H5H=5#E1z$1AD$L
H5zH=#E1|H$1ID$ L
 H5HH="E1~H$1y@1ҨCt1tL
 H5H="E1=1+L
H5H=v"E1?1C0L
Y H5H=I"E1A$1C2L
@ H5pH="E1B$1C4L
' H5@H=!E1C$1rC6L
 H5H=!E1D$1BC8L
H5H=!E1E$1C:L
H5H=Y!E1F$1C<L
H5H=)!E1G$1C>L
H5PH= E1H$1C@L
H5 H= E1I$1RCBL
mH5H= E1J$1"HCHL
VH5H=i E1LH$1f{>6AD$LIpALI9L
AH5kH=E11D4$HL
"H5;H=E1!H$1lHCL
H5
H=E1#H$1;HCL
H5H=E1%H$1
CL
H5H=RE1'$1CL
H5yH="E1)$1CL
0H5IH=E1+$1{C L
jH5H=E1-$1LC$L
OH5H=E1/$1C(L
6H5H=dE10$1C(fpL
H5H=+E12@L
H5RH=E11Nf{>1f.L
H5HDPH=E1Q,$HD$15C>9rBL
RH5H=kf7E11C(f.L
)H5H=+E1<1^H|$(H=Lt$8L
1H5/H=(E11$]L5`HLd$PHsLAAEL
H5H=E1D$AE$1Hv$D4H|$(H51_H|$(H51LL
mH5NH=E1L]H;+Ht$(H|$(1NH59
H|$(H5p
1H|$(H5
1H|$(H5:1H5H1H|$(H561L9l$(HmH`H|$(H5 HE1eH|$(H51RHL$(Hy.H5;H11*KH|$(H51H|$(H511I^HHPTL^( H
w( H=x( HHU( HtHÐU=x( HATSubH=H( tH=W( H+% L%% HM( L)HHH9s DHH-( AH"( H9r( [A\]fH=$ UHtH' Ht]H=$ @]ÐUSHHT$0HL$8LD$@LL$Ht7)D$P)L$`)T$p)$)$)$)$)$HHQ' H=H`H$H;HL$HD$HD$HD$ D$0HD$H=iL
H5?E11{AVAUAATIUSHHLHHCH!P H5(H@L
=H=Ld$HL$T$HDH5E1H$1H+mHVHIH% 1ɾHHHP8HHSHkLs HC(D+LcHİ[]A\A]1A^HT$ Ft#11LHT$PCHSY8tH5NHL11H5L118H5HL11r8fH
IA11H18<H
IA1LH1H
.HLH1H
11H1v|8H5{HL11ffffff.SHHt;H(HtH{ Ht
&H{1uGH1[ËOtHCL
 H5iH=pE1lH$1HCL
H56H==E1hH$1gL
NH5H=E1e1$5BHl$Ld$H-K  L%D  Ll$Lt$L|$H\$H8L)AIHIHt1@LLDAHH9uH\$Hl$Ld$Ll$ Lt$(L|$0H8ÐUHSHH HtH HHHuH[]ÐH?H%s v%s (libntfs-3g) - Interpret and display information about the journal
($LogFile) of an NTFS volume.
Copyright (c) 2000-2005 Anton Altaparmakov.
%s is free software, released under the GNU General Public License
and you are welcome to redistribute it under certain conditions.
%s comes with ABSOLUTELY NO WARRANTY; for details read the GNU
General Public License to be found in the file COPYING in the main Linux-NTFS
distribution directory.
Usage: %s device
    e.g. %s /dev/hda6
Alternative usage: %s -f file
    e.g. %s -f MyCopyOfTheLogFile
Warning: Failed to close $LogFile (inode %i)Mounted NTFS volume %s (NTFS v%i.%i) on device %s.
Failed to open $LogFile (inode %i): %s
Failed to open $LogFile/$DATA (attribute 0x%x): %s
$LogFile has zero length.  Run chkdsk /f to correct this.
The file %s does not exist.  Did you specify it correctly?
Error getting information about %s: %s
Warning: Failed to close file %sWarning: $LogFile is too big.  Only analysing the first 64MiB.
Failed to allocate buffer for file dataOnly %d out of %d bytes read starting at %d
Failed to read $LogFile/$DATA: %s
$LogFile contents are corrupt (magic RSTR is missing).  Cannot handle this yet.
$LogFile is corrupt:  Restart page header magic is not CHKD but a chkdsk LSN is specified.  Cannot handle this yet.
$LogFile is corrupt:  Restart page header specifies invalid log page size.  Cannot handle this yet.
$LogFile is corrupt:  Restart page header specifies invalid system page size.  Cannot handle this yet.
Unknown $LogFile version %i.%i.  Only know how to handle version 1.1.
Restart page header in $LogFile is corrupt:  Update sequence array size is wrong.  Cannot handle this yet.
Restart page header in $LogFile is corrupt:  Update sequence array overlaps restart page header.  Cannot handle this yet.
Restart page header in $LogFile is corrupt:  Update sequence array overlaps or is behind first protected sequence number.  Cannot handle this yet.
Restart page header in $LogFile is corrupt:  Update sequence array overlaps or is behind restart area.  Cannot handle this yet.
Restart page header in $LogFile is corrupt:  Restart area offset is not aligned to 8-byte boundary.  Cannot handle this yet.
Warning:  Sanity checking of restart area not implemented yet.
Warning:  Sanity checking of array of log client records not implemented yet.
The %s restart page header in $LogFile has been modified by chkdsk.  Do not know how to handle this yet.  Reboot into Windows to fix this.
$LogFile incomplete multi sector transfer detected in restart page header.  Cannot handle this yet.

Skipping analysis of second restart page because it fully matches the first one.Second restart area specifies different $LogFile version to first restart area.  Cannot handle this yet.
client_in_use_list = %i (0x%x)
restart_area_length = %u (0x%x)
client_array_offset = %u (0x%x)
last_lsn_data_length = %u (0x%x)
log_record_header_length = %u (0x%x)
log_page_data_offset = %u (0x%x)
restart_log_open_count = %u (0x%x)

Log client record number %i:
client_restart_lsn = %lli (0x%llx)
client_name_length = %u (0x%x)
Failed to convert log client name

Finished with restart pages.  Beginning with log pages.
 is corrupt (magic is not RCRD or CHKD).copy.last_lsn/file_offset = 0x%llx
header.next_record_offset = 0x%llx
client undo next lsn = 0x%llx
client_id.client_index = 0x%x
ntfsdump_logfile.c2012.1.15AR.1Warning: Failed to umountERROR: Aborting...
<NO_NAME>Failed to mount %s: %s
Unsupported NTFS version.
Failed to open file %s: %s
Warning: Failed to umount %sPartial read.firstsecond1st2ndRSTRCHKDRCRD-fCould not seek to offset %u
$LogFile is not initialized.$LogFile version %i.%i.

%s restart page:

Restart page header:
magic = %s
usa_ofs = %u (0x%x)
usa_count = %u (0x%x)
chkdsk_lsn = %lli (0x%llx)
system_page_size = %u (0x%x)
log_page_size = %u (0x%x)
restart_offset = %u (0x%x)

Restart area:
current_lsn = %lli (0x%llx)
log_clients = %u (0x%x)
client_free_list = %i (0x%x)
flags = 0x%.4x
seq_number_bits = %u (0x%x)
file_size = %lli (0x%llx)
oldest_lsn = %lli (0x%llx)
prev_client = %i (0x%x)
next_client = %i (0x%x)
seq_number = %u (0x%x)
<conversion error>client_name = %s

Log record page number %i is empty.flags = 0x%x
page count = %i
page position = %i
header.last_end_lsn = 0x%llx

Log record %i:
this lsn = 0x%llx
client previous lsn = 0x%llx
client data length = 0x%x
client_id.seq_number = 0x%x
record type = 0x%x
transaction_id = 0x%x
flags = 0x%x: NONE
 LOG_RECORD_MULTI_PAGE | Unknown flagsredo_operation = 0x%x
undo_operation = 0x%x
redo_offset = 0x%x
redo_length = 0x%x
undo_offset = 0x%x
undo_length = 0x%x
target_attribute = 0x%x
lcns_to_follow = 0x%x
record_offset = 0x%x
attribute_offset = 0x%x
target_vcn = 0x%llx
Array of lcns:
lcn_list[%u].lcn = 0x%llx
mainusagelogfile_opendevice_err_exitlogfile_preadlogfile_closelog_err_exitdump_restart_areasdump_restart_areas_headerdump_restart_areas_areadump_log_recordsdump_log_record;T	ppP h0 p@`zRx$FJw?;*3$"DeDP$\fBDA JPAAGD ABBE D(A0J
0A(A BBDA$(AG }
CALBBB B(A0C8J
8C0A(B BBBA$dQ_@X(`

H-o
N 
		oo	oo.	oL 






&6FVfv&6FV-p,0P 9c044d561b16eab0687f60a3cdb5f82b5131ad.debug@.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.data.bss.gnu_debuglink88TT !tt$4oH>8FNo.	.	Z[o		0j		t

~`
`
y

``H-H-`-`-BBThBhBL LL LL LL LN NHP PP PP4DP