does anybody know something about ntfs streams. i know how to enumerate
them or read/write them but i have actually no background infos on streams.
how many streams can i associate to a file, are they reliable, are there more
cool ntfs features available?

one more thing, when i create a text file and set up additional informations i
can retrive them easily with the


more <"test.txt:[ALT-0-5]SummaryInformation">test_stream.txt

command but does anybody know the exact structure?
Posted on 2002-11-05 11:31:22 by mob
Actually I was just reading up on them... seems like you know pretty much everything about them already!

As for reliable... nope. If you copy or move a file to Fat32 the streams disappear, this also happens when a file is copied with ReadFile / WriteFile (kind of obvious I guess :rolleyes: )

Oh and could you post some info about enumerating them? Didn't find that yet :grin:
Posted on 2002-11-05 12:44:47 by Qweerdy
you can do it with the BackupRead/Write/Seek API's. BackupRead indicates also if there's
more data present or if you're at the last stream.
Posted on 2002-11-06 04:21:05 by mob
look at msdn, there is a tech article
A Programmer's Perspective on NTFS 2000 Part 1: Stream and Hard Link
Posted on 2002-11-10 21:06:46 by baumann
A Programmer's Perspective on NTFS 2000 Part 1: Stream and Hard Link
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnfiles/html/ntfs5.asp

A Programmer's Perspective on NTFS 2000 Part 2: Encryption, Sparseness, and Reparse Points
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnfiles/html/ntfs2.asp
Posted on 2002-11-10 21:11:16 by natas
cool, thank you for these links, that's what i wanted
Posted on 2002-11-11 05:00:43 by mob
also i remember some virus use the ntfs stream features. you may also have a search in google, this virus just append a stream
Posted on 2002-11-12 19:17:56 by baumann