Main Window

main.png

The main window displays three things:
  • Header. This is an interpretation of the file header, with the various fields, as defined by the file format documentation. The fields are interpreted as their correct types (with the text version of any enumerated constants).
  • Nodes. Also known as the "Nodes BTree" or "NBT". This is a tree view visualizing the various NBT pages. The root NBT page is identified by the header, and each page points to its subpages. The leaf entries define the nodes. The icon type of each page identifies if it is a leaf or non-leaf page. The icons of the node entries tell you the node type. You can double click on any page to open a specific window for details about that page. You can double click on any node or data block to automatically browse to that block in the BBT.
  • Blocks. Also known as the "Blocks BTree" or "BBT". This is a tree view visualizing the various BBT pages. The leaf entries define the blocks, and the icons indicate if it is an internal or external block. Double clicking any block opens a details window specific to that block (and reads the data from disk). Double clicking on any reference count does a reverse lookup, trying to identify all blocks/nodes which point to that point.

Menu reference

  • File
    • Open - Open a file. Only unicode files are supported.
    • Close - Close a file
    • Exit - Exit the program
  • View
    • Address... - Open a specific address on disk and interpret it as a specified NDB data structure
    • NID... - Open a specific node, and interpret it as a specified LTP data structure
    • AMR Info - View the AMap Rebuild Resume info stored in the file
    • Scavenge Range... - Look for NDB data structures on disk in a certain interval
    • Allocation Map - View a summary of the AMap
    • BTree Page Distribution - View a summary of the BTree Page distribution on disk
    • Ref Report - Try to identify all references to a given block
    • Statistics - A summary of some basic information about the file
    • Consistency Report - Perform low level diagnostic tests.

FAQs

Q: What is NDBView?
A: You may (will) see references to "NDBView" throughout the source code and in the program itself. This was the original name of PST Data Structure View Tool.

Q: What does NDB stand for?
A: Node DataBase. It is the name of the "lowest layer" of the PST architecture.

Q: Why doesn't the tool support ANSI PST files?
A: Basically, it wasn't design to. The intial goal was simply to learn about the PST by building a tool to explore it; so no effort was made to build an abstraction layer which would be necessary to support ANSI files.

Last edited May 19, 2010 at 7:08 PM by danielkko, version 18

Comments

No comments yet.