DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:to:from:subject:message-id:date
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=StW39dDvnpJtHgQYQn/LfsuYhOeesyTZe1ua/HopbZF2SoL99afeK
	qpAG5vfwF/ZiKPb5et01Wt9ahUFWFqz5Y3WB24izurRJrrL6ZE757UDNMYqqRWRw
	XjDsVAUdIhBe1RiScb7XXnVuhx8GMZ0uPSZR1PsLGZ8MzGVvql8waY=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Reply-To: w5pny AT w5pny DOT com
To: cygwin AT cygwin DOT com
From: Harry G McGavran Jr <w5pny AT w5pny DOT com>
Subject: NTFS inode ouput from ls -i
Message-ID: <77d1bb70-5bce-0ac0-e011-1997f7db8a25@w5pny.com>
Date: Mon, 17 Jul 2017 11:44:39 -0600
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.1
MIME-Version: 1.0
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit

I just had to deal with the output from chkdsk on my Windows 7 pro
that lists MFT record numbers just like ifind and icat do
in the Sleuth Kit as summarized in:

https://cygwin.com/ml/cygwin/2012-11/msg00172.html

The chkdsk MFT record numbers are exactly what ifind and icat
display/use. I also discovered when doing "ls -i" on NTFS
file systems mounted on my Ubuntu 16.04 linux system that
the "ls -i" numbers reported are the same as the chkdsk, ifind, and icat
record numbers.  These are all the lower 32 bits of the 64 bit
numbers reported by "ls -i" with the current cygwin.  Had
the cygwin "find -inum" and "ls -i" used these 32 bit numbers,
my task would have been easier.  From the above link, Corinna
found it odd that ifind and icat would use the 32 bit numbers.
I would have preferred them when dealing with chkdsk issues.

What's the current thinking about this?

Harry


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple