Mercurial > libpst
annotate xml/libpst.in @ 59:7d5c637aaafb
General cleanup and code fixes.
Use autoscan to cleanup our autoconf system.
Use autoconf to detect when we need to use our XGetopt files and other header files.
Decode BCC field.
Fix missing LE32_CPU byte swapping for FILETIME types.
| author | Carl Byington <carl@five-ten-sg.com> |
|---|---|
| date | Thu, 14 Feb 2008 14:55:32 -0800 |
| parents | a8b772313ff4 |
| children | 97b7706bdda2 |
| rev | line source |
|---|---|
| 16 | 1 <reference> |
| 2 <title>@PACKAGE@ Utilities - Version @VERSION@</title> | |
| 3 <partintro> | |
| 4 <title>Packages</title> | |
| 31 | 5 |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
6 <para>This is a fork of the libpst project at SourceForge. Another fork |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
7 is located at <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
8 url="http://alioth.debian.org/projects/libpst/">http://alioth.debian.org/projects/libpst/</ulink> |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
9 </para> |
| 31 | 10 |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
11 <para>The various source and binary packages are available at <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
12 url="http://www.five-ten-sg.com/@PACKAGE@/packages/">http://www.five-ten-sg.com/@PACKAGE@/packages/</ulink>. |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
13 The most recent documentation is available at <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
14 url="http://www.five-ten-sg.com/@PACKAGE@/">http://www.five-ten-sg.com/@PACKAGE@/</ulink>. |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
15 </para> |
| 31 | 16 |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
17 <para>A <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
18 url="http://www.selenic.com/mercurial/wiki/">Mercurial</ulink> source |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
19 code repository for this project is available at <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
20 url="http://hg.five-ten-sg.com/@PACKAGE@/">http://hg.five-ten-sg.com/@PACKAGE@/</ulink>. |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
21 </para> |
|
54
e109391424b5
some misc. cleanup and convert to mercurial source control
carl@ns.five-ten-sg.com
parents:
52
diff
changeset
|
22 |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
23 <para>This version can now convert both 32 bit Outlook files (pre 2003), and the |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
24 64 bit Outlook 2003 pst files. |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
25 </para> |
| 51 | 26 |
| 24 | 27 </partintro> |
| 16 | 28 |
| 29 | |
| 30 <refentry id="readpst.1"> | |
| 31 <refentryinfo> | |
| 52 | 32 <date>2008-01-27</date> |
| 16 | 33 </refentryinfo> |
| 34 | |
| 35 <refmeta> | |
| 36 <refentrytitle>readpst</refentrytitle> | |
| 37 <manvolnum>1</manvolnum> | |
| 38 <refmiscinfo>readpst @VERSION@</refmiscinfo> | |
| 39 </refmeta> | |
| 40 | |
| 20 | 41 <refnamediv id='readpst.name.1'> |
| 16 | 42 <refname>readpst</refname> |
| 51 | 43 <refpurpose>convert PST (MS Outlook Personal Folders) files to mbox and other formats</refpurpose> |
| 16 | 44 </refnamediv> |
| 45 | |
| 20 | 46 <refsynopsisdiv id='readpst.synopsis.1'> |
| 16 | 47 <title>Synopsis</title> |
| 48 <cmdsynopsis> | |
| 49 <command>readpst</command> | |
| 31 | 50 <arg><option>-b</option></arg> |
| 43 | 51 <arg><option>-C</option></arg> |
| 16 | 52 <arg><option>-c <replaceable class="parameter">format</replaceable></option></arg> |
| 53 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> | |
| 54 <arg><option>-h</option></arg> | |
| 55 <arg><option>-k</option></arg> | |
| 56 <arg><option>-o <replaceable class="parameter">output-directory</replaceable></option></arg> | |
| 57 <arg><option>-q</option></arg> | |
| 58 <arg><option>-r</option></arg> | |
| 59 <arg><option>-S</option></arg> | |
| 25 | 60 <arg><option>-M</option></arg> |
| 16 | 61 <arg><option>-V</option></arg> |
| 62 <arg><option>-w</option></arg> | |
| 43 | 63 <arg choice='plain'>pstfile</arg> |
| 16 | 64 </cmdsynopsis> |
| 65 </refsynopsisdiv> | |
| 66 | |
| 20 | 67 <refsect1 id='readpst.description.1'> |
| 68 <title>Description</title> | |
| 28 | 69 <para><command>readpst</command> is a program that can read an Outlook |
| 70 PST (Personal Folders) file and convert it into an mbox file, a format | |
| 71 suitable for KMail, a recursive mbox structure, or separate emails. | |
| 20 | 72 </para> |
| 73 </refsect1> | |
| 74 | |
| 75 <refsect1 id='readpst.options.1'> | |
| 16 | 76 <title>Options</title> |
| 77 <variablelist> | |
| 78 <varlistentry> | |
| 31 | 79 <term>-b</term> |
| 80 <listitem><para> | |
| 81 Do not save the attachments for the RTF format of the email body. | |
| 82 </para></listitem> | |
| 83 </varlistentry> | |
| 84 <varlistentry> | |
| 43 | 85 <term>-C</term> |
| 86 <listitem><para> | |
| 87 Decrypt the entire pst file and dump it to stdout. | |
| 88 </para></listitem> | |
| 89 </varlistentry> | |
| 90 <varlistentry> | |
| 16 | 91 <term>-c <replaceable class="parameter">format</replaceable></term> |
| 92 <listitem><para> | |
| 93 Set the Contact output mode. Use -cv for vcard format or -cl for an email list. | |
| 94 </para></listitem> | |
| 95 </varlistentry> | |
| 96 <varlistentry> | |
| 97 <term>-d <replaceable class="parameter">debug-file</replaceable></term> | |
| 98 <listitem><para> | |
|
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
99 Specify name of debug log file. The |
| 28 | 100 log file is not an ascii file, it is a binary file readable |
| 101 by <command>readpstlog</command>. | |
| 16 | 102 </para></listitem> |
| 103 </varlistentry> | |
| 104 <varlistentry> | |
| 105 <term>-h</term> | |
| 106 <listitem><para> | |
| 31 | 107 Show summary of options and exit. |
| 16 | 108 </para></listitem> |
| 109 </varlistentry> | |
| 110 <varlistentry> | |
| 111 <term>-k</term> | |
| 112 <listitem><para> | |
| 113 Changes the output format to KMail. | |
| 114 </para></listitem> | |
| 115 </varlistentry> | |
| 116 <varlistentry> | |
| 20 | 117 <term>-o <replaceable class="parameter">output-directory</replaceable></term> |
| 16 | 118 <listitem><para> |
| 119 Specifies the output directory. The directory must already exist, and | |
| 120 is entered after the PST file is opened, but before any processing of | |
| 121 files commences. | |
| 122 </para></listitem> | |
| 123 </varlistentry> | |
| 124 <varlistentry> | |
| 125 <term>-q</term> | |
| 126 <listitem><para> | |
| 127 Changes to silent mode. No feedback is printed to the screen, except | |
| 128 for error messages. | |
| 129 </para></listitem> | |
| 130 </varlistentry> | |
| 131 <varlistentry> | |
| 132 <term>-r</term> | |
| 133 <listitem><para> | |
| 134 Changes the output format to Recursive. This will create folders as | |
| 21 | 135 named in the PST file, and will put all emails in a file called "mbox" |
| 16 | 136 inside each folder. These files are then compatible with all |
| 137 mbox-compatible email clients. | |
| 138 </para></listitem> | |
| 139 </varlistentry> | |
| 140 <varlistentry> | |
| 141 <term>-S</term> | |
| 142 <listitem><para> | |
| 25 | 143 Output messages into separate files. This will create folders as named |
| 144 in the PST file, and will put each email in its own file. These files | |
| 28 | 145 will be numbered from 1 increasing in intervals of 1 (ie 1, 2, 3, ...). |
| 146 Any attachments are saved alongside each email as XXXXXXXXX-attach1, | |
| 147 XXXXXXXXX-attach2 and so on, or with the name of the attachment if one | |
| 148 is present. | |
| 16 | 149 </para></listitem> |
| 150 </varlistentry> | |
| 151 <varlistentry> | |
| 25 | 152 <term>-M</term> |
| 153 <listitem><para> | |
| 154 Output messages in MH format as separate files. This will create | |
| 28 | 155 folders as named in the PST file, and will put each email together with |
| 156 any attachments into its own file. These files will be numbered from 1 | |
| 157 to n with no leading zeros. | |
| 25 | 158 </para></listitem> |
| 159 </varlistentry> | |
| 160 <varlistentry> | |
| 16 | 161 <term>-V</term> |
| 162 <listitem><para> | |
| 31 | 163 Show program version and exit. |
| 16 | 164 </para></listitem> |
| 165 </varlistentry> | |
| 166 <varlistentry> | |
| 167 <term>-w</term> | |
| 168 <listitem><para> | |
| 20 | 169 Overwrite any previous output files. Beware: When used with the -S |
| 16 | 170 switch, this will remove all files from the target folder before |
| 171 writing. This is to keep the count of emails and attachments correct. | |
| 172 </para></listitem> | |
| 173 </varlistentry> | |
| 174 </variablelist> | |
| 175 </refsect1> | |
| 176 | |
| 20 | 177 <refsect1 id='readpst.also.1'> |
| 16 | 178 <title>See Also</title> |
| 179 <para> | |
| 25 | 180 <citerefentry><refentrytitle>readpstlog</refentrytitle> <manvolnum>1</manvolnum> </citerefentry> |
| 16 | 181 </para> |
| 182 </refsect1> | |
| 183 | |
| 20 | 184 <refsect1 id='readpst.author.1'> |
| 16 | 185 <title>Author</title> |
| 186 <para> | |
| 187 This manual page was originally written by Dave Smith | |
| 188 <dave.s@earthcorp.com>, and updated by Joe Nahmias <joe@nahmias.net> | |
| 189 for the Debian GNU/Linux system (but may be used by others). It was | |
| 20 | 190 subsequently updated by Brad Hards <bradh@frogmouth.net>, and converted to |
| 16 | 191 xml format by Carl Byington <carl@five-ten-sg.com>. |
| 192 </para> | |
| 193 </refsect1> | |
| 194 | |
| 20 | 195 <refsect1 id='readpst.copyright.1'> |
| 16 | 196 <title>Copyright</title> |
| 197 <para> | |
| 198 Copyright (C) 2002 by David Smith <dave.s@earthcorp.com>. | |
| 28 | 199 XML version Copyright (C) 2006 by 510 Software Group <carl@five-ten-sg.com>. |
| 16 | 200 </para> |
| 201 <para> | |
| 202 This program is free software; you can redistribute it and/or modify it | |
| 203 under the terms of the GNU General Public License as published by the | |
| 204 Free Software Foundation; either version 2, or (at your option) any | |
| 205 later version. | |
| 206 </para> | |
| 207 <para> | |
| 208 You should have received a copy of the GNU General Public License along | |
| 209 with this program; see the file COPYING. If not, please write to the | |
| 210 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
| 211 </para> | |
| 212 </refsect1> | |
| 213 | |
| 20 | 214 <refsect1 id='readpst.version.1'> |
| 52 | 215 <title>Version</title> |
| 16 | 216 <para> |
| 52 | 217 @VERSION@ |
| 16 | 218 </para> |
| 219 </refsect1> | |
| 220 </refentry> | |
| 221 | |
| 222 | |
| 43 | 223 <refentry id="lspst.1"> |
| 224 <refentryinfo> | |
| 52 | 225 <date>2008-01-27</date> |
| 43 | 226 </refentryinfo> |
| 227 | |
| 228 <refmeta> | |
| 229 <refentrytitle>lspst</refentrytitle> | |
| 230 <manvolnum>1</manvolnum> | |
| 231 <refmiscinfo>lspst @VERSION@</refmiscinfo> | |
| 232 </refmeta> | |
| 233 | |
| 234 <refnamediv id='lspst.name.1'> | |
| 235 <refname>lspst</refname> | |
| 236 <refpurpose>list PST (MS Outlook Personal Folders) file data</refpurpose> | |
| 237 </refnamediv> | |
| 238 | |
| 239 <refsynopsisdiv id='lspst.synopsis.1'> | |
| 240 <title>Synopsis</title> | |
| 241 <cmdsynopsis> | |
| 242 <command>lspst</command> | |
| 50 | 243 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> |
| 244 <arg><option>-h</option></arg> | |
| 245 <arg><option>-V</option></arg> | |
| 43 | 246 <arg choice='plain'>pstfile</arg> |
| 247 </cmdsynopsis> | |
| 248 </refsynopsisdiv> | |
| 249 | |
| 50 | 250 <refsect1 id='lspst.options.1'> |
| 251 <title>Options</title> | |
| 252 <variablelist> | |
| 253 <varlistentry> | |
| 254 <term>-d <replaceable class="parameter">debug-file</replaceable></term> | |
| 255 <listitem><para> | |
| 256 Specify name of debug log file. The | |
| 257 log file is not an ascii file, it is a binary file readable | |
| 258 by <command>readpstlog</command>. | |
| 259 </para></listitem> | |
| 260 </varlistentry> | |
| 261 <varlistentry> | |
| 262 <term>-h</term> | |
| 263 <listitem><para> | |
| 264 Show summary of options and exit. | |
| 265 </para></listitem> | |
| 266 </varlistentry> | |
| 267 <varlistentry> | |
| 268 <term>-V</term> | |
| 269 <listitem><para> | |
| 270 Show program version and exit. | |
| 271 </para></listitem> | |
| 272 </varlistentry> | |
| 273 </variablelist> | |
| 274 </refsect1> | |
| 275 | |
| 43 | 276 <refsect1 id='lspst.description.1'> |
| 277 <title>Description</title> | |
| 278 <para><command>lspst</command> is a program that can read an Outlook | |
| 279 PST (Personal Folders) file and produce a simple listing of the | |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
280 data (contacts, email subjects, etc). |
| 43 | 281 </para> |
| 282 </refsect1> | |
| 283 | |
| 284 <refsect1 id='lspst.also.1'> | |
| 285 <title>See Also</title> | |
| 286 <para> | |
| 287 <citerefentry><refentrytitle>readpstlog</refentrytitle> <manvolnum>1</manvolnum> </citerefentry> | |
| 288 </para> | |
| 289 </refsect1> | |
| 290 | |
| 291 <refsect1 id='lspst.author.1'> | |
| 292 <title>Author</title> | |
| 293 <para> | |
| 294 lspst was written by Joe Nahmias <joe@nahmias.net> based on readpst. | |
| 295 This man page was written by 510 Software Group <carl@five-ten-sg.com>. | |
| 296 </para> | |
| 297 </refsect1> | |
| 298 | |
| 299 <refsect1 id='lspst.copyright.1'> | |
| 300 <title>Copyright</title> | |
| 301 <para> | |
| 302 Copyright (C) 2004 by Joe Nahmias <joe@nahmias.net>. | |
| 303 </para> | |
| 304 <para> | |
| 305 This program is free software; you can redistribute it and/or modify it | |
| 306 under the terms of the GNU General Public License as published by the | |
| 307 Free Software Foundation; either version 2, or (at your option) any | |
| 308 later version. | |
| 309 </para> | |
| 310 <para> | |
| 311 You should have received a copy of the GNU General Public License along | |
| 312 with this program; see the file COPYING. If not, please write to the | |
| 313 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
| 314 </para> | |
| 315 </refsect1> | |
| 316 | |
| 317 <refsect1 id='lspst.version.1'> | |
| 52 | 318 <title>Version</title> |
| 43 | 319 <para> |
| 52 | 320 @VERSION@ |
| 43 | 321 </para> |
| 322 </refsect1> | |
| 323 </refentry> | |
| 324 | |
| 325 | |
| 16 | 326 <refentry id="readpstlog.1"> |
| 327 <refentryinfo> | |
| 52 | 328 <date>2008-01-27</date> |
| 16 | 329 </refentryinfo> |
| 330 | |
| 331 <refmeta> | |
| 332 <refentrytitle>readpstlog</refentrytitle> | |
| 333 <manvolnum>1</manvolnum> | |
| 334 <refmiscinfo>readpstlog @VERSION@</refmiscinfo> | |
| 335 </refmeta> | |
| 336 | |
| 20 | 337 <refnamediv id='readpstlog.name.1'> |
| 16 | 338 <refname>readpstlog</refname> |
| 24 | 339 <refpurpose>convert a <command>readpst</command> logfile to text format</refpurpose> |
| 16 | 340 </refnamediv> |
| 341 | |
| 20 | 342 <refsynopsisdiv id='readpstlog.synopsis.1'> |
| 16 | 343 <title>Synopsis</title> |
| 344 <cmdsynopsis> | |
| 24 | 345 <command>readpstlog</command> |
| 16 | 346 <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg> |
| 347 <arg><option>-t <replaceable class="parameter">include-types</replaceable></option></arg> | |
| 348 <arg><option>-x <replaceable class="parameter">exclude-types</replaceable></option></arg> | |
| 24 | 349 <arg choice='plain'>logfile</arg> |
| 16 | 350 </cmdsynopsis> |
| 351 </refsynopsisdiv> | |
| 352 | |
| 20 | 353 <refsect1 id='readpstlog.description.1'> |
| 354 <title>Description</title> | |
| 21 | 355 <para><command>readpstlog</command> |
| 24 | 356 is a program that converts the binary logfile generated |
| 357 by <command>readpst</command> to a more desirable text format. | |
| 20 | 358 </para> |
| 359 </refsect1> | |
| 360 | |
| 361 <refsect1 id='readpstlog.options.1'> | |
| 16 | 362 <title>Options</title> |
| 363 <variablelist> | |
| 364 <varlistentry> | |
| 365 <term>-f <replaceable class="parameter">format</replaceable></term> | |
| 366 <listitem><para> | |
| 367 Sets the format of the text log output. Currently, the only valid output | |
| 36 | 368 formats are T, for single line text, D for the default default multi line |
| 369 format, and I for an indented style with single line text. | |
| 16 | 370 </para></listitem> |
| 371 </varlistentry> | |
| 372 <varlistentry> | |
| 373 <term>-t <replaceable class="parameter">include-types</replaceable></term> | |
| 374 <listitem><para> | |
| 375 Print only the specified types of log messages. | |
| 376 Types are specified in a comma-delimited list (e.g. 3,10,5,6). | |
| 377 </para></listitem> | |
| 378 </varlistentry> | |
| 379 <varlistentry> | |
| 380 <term>-x <replaceable class="parameter">exclude-types</replaceable></term> | |
| 381 <listitem><para> | |
| 382 Exclude the specified types of log messages. | |
| 383 Types are specified in a comma-delimited list (e.g. 3,10,5,6). | |
| 384 </para></listitem> | |
| 385 </varlistentry> | |
| 386 </variablelist> | |
| 387 </refsect1> | |
| 388 | |
| 20 | 389 <refsect1 id='readpstlog.message.types.1'> |
| 16 | 390 <title>Message Types</title> |
| 24 | 391 <para><command>readpstlog</command> understands the following types of log |
| 392 messages: | |
| 16 | 393 </para> |
| 394 <variablelist> | |
| 20 | 395 <varlistentry> |
| 396 <term>1</term> | |
| 397 <listitem><para> | |
| 398 File accesses | |
| 399 </para></listitem> | |
| 400 </varlistentry> | |
| 401 <varlistentry> | |
| 402 <term>2</term> | |
| 403 <listitem><para> | |
| 404 Index accesses | |
| 405 </para></listitem> | |
| 406 </varlistentry> | |
| 407 <varlistentry> | |
| 408 <term>3</term> | |
| 409 <listitem><para> | |
| 410 New email found | |
| 411 </para></listitem> | |
| 412 </varlistentry> | |
| 413 <varlistentry> | |
| 414 <term>4</term> | |
| 415 <listitem><para> | |
| 416 Warnings | |
| 417 </para></listitem> | |
| 418 </varlistentry> | |
| 419 <varlistentry> | |
| 420 <term>5</term> | |
| 421 <listitem><para> | |
| 422 Read accesses | |
| 423 </para></listitem> | |
| 424 </varlistentry> | |
| 425 <varlistentry> | |
| 426 <term>6</term> | |
| 427 <listitem><para> | |
| 428 Informational messages | |
| 429 </para></listitem> | |
| 430 </varlistentry> | |
| 431 <varlistentry> | |
| 432 <term>7</term> | |
| 433 <listitem><para> | |
| 434 Main function calls | |
| 435 </para></listitem> | |
| 436 </varlistentry> | |
| 437 <varlistentry> | |
| 438 <term>8</term> | |
| 439 <listitem><para> | |
| 440 Decrypting calls | |
| 441 </para></listitem> | |
| 442 </varlistentry> | |
| 443 <varlistentry> | |
| 36 | 444 <term>9</term> |
| 445 <listitem><para> | |
| 446 Function entries | |
| 447 </para></listitem> | |
| 448 </varlistentry> | |
| 449 <varlistentry> | |
| 20 | 450 <term>10</term> |
| 451 <listitem><para> | |
| 36 | 452 Function exits |
| 20 | 453 </para></listitem> |
| 454 </varlistentry> | |
| 455 <varlistentry> | |
| 456 <term>11</term> | |
| 457 <listitem><para> | |
| 458 HexDump calls | |
| 459 </para></listitem> | |
| 460 </varlistentry> | |
| 16 | 461 </variablelist> |
| 462 </refsect1> | |
| 463 | |
| 20 | 464 <refsect1 id='readpstlog.author.1'> |
| 16 | 465 <title>Author</title> |
| 466 <para> | |
| 467 This manual page was written by Joe Nahmias <joe@nahmias.net> | |
| 468 for the Debian GNU/Linux system (but may be used by others). It was | |
| 469 converted to xml format by Carl Byington <carl@five-ten-sg.com>. | |
| 470 </para> | |
| 471 </refsect1> | |
| 472 | |
| 20 | 473 <refsect1 id='readpstlog.copyright.1'> |
| 16 | 474 <title>Copyright</title> |
| 475 <para> | |
| 476 Copyright (C) 2002 by David Smith <dave.s@earthcorp.com>. | |
| 477 XML version Copyright (C) 2005 by 510 Software Group <carl@five-ten-sg.com>. | |
| 478 </para> | |
| 479 <para> | |
| 480 This program is free software; you can redistribute it and/or modify it | |
| 481 under the terms of the GNU General Public License as published by the | |
| 482 Free Software Foundation; either version 2, or (at your option) any | |
| 483 later version. | |
| 484 </para> | |
| 485 <para> | |
| 486 You should have received a copy of the GNU General Public License along | |
| 487 with this program; see the file COPYING. If not, please write to the | |
| 488 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
| 489 </para> | |
| 490 </refsect1> | |
| 491 | |
| 20 | 492 <refsect1 id='readpstlog.version.1'> |
| 52 | 493 <title>Version</title> |
| 16 | 494 <para> |
| 52 | 495 @VERSION@ |
| 16 | 496 </para> |
| 497 </refsect1> | |
| 498 </refentry> | |
| 24 | 499 |
| 500 | |
| 501 <refentry id="pst2ldif.1"> | |
| 502 <refentryinfo> | |
| 52 | 503 <date>2008-01-27</date> |
| 24 | 504 </refentryinfo> |
| 505 | |
| 506 <refmeta> | |
| 507 <refentrytitle>pst2ldif</refentrytitle> | |
| 508 <manvolnum>1</manvolnum> | |
| 509 <refmiscinfo>pst2ldif @VERSION@</refmiscinfo> | |
| 510 </refmeta> | |
| 511 | |
| 512 <refnamediv id='pst2ldif.name.1'> | |
| 513 <refname>pst2ldif</refname> | |
| 514 <refpurpose>extract contacts from a MS Outlook .pst file in .ldif format</refpurpose> | |
| 515 </refnamediv> | |
| 516 | |
| 517 <refsynopsisdiv id='pst2ldif.synopsis.1'> | |
| 518 <title>Synopsis</title> | |
| 519 <cmdsynopsis> | |
| 520 <command>pst2ldif</command> | |
| 521 <arg><option>-h</option></arg> | |
| 522 <arg><option>-V</option></arg> | |
| 523 <arg><option>-b <replaceable class="parameter">ldap-base</replaceable></option></arg> | |
| 524 <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg> | |
|
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
525 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> |
| 24 | 526 <arg choice='plain'>pstfilename</arg> |
| 527 </cmdsynopsis> | |
| 528 </refsynopsisdiv> | |
| 529 | |
| 530 <refsect1 id='pst2ldif.options.1'> | |
| 531 <title>Options</title> | |
| 532 <variablelist> | |
| 533 <varlistentry> | |
| 534 <term>-h</term> | |
| 535 <listitem><para> | |
| 536 Show summary of options. Subsequent options are then ignored. | |
| 537 </para></listitem> | |
| 538 </varlistentry> | |
| 539 <varlistentry> | |
| 540 <term>-V <replaceable class="parameter">include-types</replaceable></term> | |
| 541 <listitem><para> | |
| 542 Show program version. Subsequent options are then ignored. | |
| 543 </para></listitem> | |
| 544 </varlistentry> | |
| 545 <varlistentry> | |
| 546 <term>-b <replaceable class="parameter">ldap-base</replaceable></term> | |
| 547 <listitem><para> | |
| 548 Sets the ldap base value used in the dn records. You probably want to | |
| 549 use something like "o=organization, c=US". | |
| 550 </para></listitem> | |
| 551 </varlistentry> | |
| 552 <varlistentry> | |
| 553 <term>-c <replaceable class="parameter">class</replaceable></term> | |
| 554 <listitem><para> | |
| 555 Sets the objectClass values for the contact items. This class needs to be | |
| 556 defined in the schema used by your LDAP server, and at a minimum it must | |
| 557 contain the ldap attributes given below. | |
| 558 </para></listitem> | |
| 559 </varlistentry> | |
|
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
560 <varlistentry> |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
561 <term>-d <replaceable class="parameter">debug-file</replaceable></term> |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
562 <listitem><para> |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
563 Specify name of debug log file. The |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
564 log file is not an ascii file, it is a binary file readable |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
565 by <command>readpstlog</command>. |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
566 </para></listitem> |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
567 </varlistentry> |
| 24 | 568 </variablelist> |
| 569 </refsect1> | |
| 570 | |
| 571 <refsect1 id='pst2ldif.description.1'> | |
| 572 <title>Description</title> | |
| 573 <para><command>pst2ldif</command> | |
| 574 reads the contact information from a MS Outlook .pst file | |
| 575 and produces a .ldif file that may be used to import those contacts | |
| 576 into an LDAP database. The following ldap attributes are generated: | |
| 577 <simplelist> | |
| 578 <member>cn </member> | |
| 579 <member>givenName </member> | |
| 580 <member>sn </member> | |
| 581 <member>personalTitle </member> | |
| 582 <member>company </member> | |
| 583 <member>mail </member> | |
| 584 <member>postalAddress </member> | |
| 585 <member>l </member> | |
| 586 <member>st </member> | |
| 587 <member>postalCode </member> | |
| 588 <member>c </member> | |
| 589 <member>homePhone </member> | |
| 590 <member>telephoneNumber </member> | |
| 591 <member>facsimileTelephoneNumber </member> | |
| 592 <member>mobile </member> | |
| 593 <member>description </member> | |
| 594 </simplelist> | |
| 595 </para> | |
| 596 </refsect1> | |
| 597 | |
| 598 <refsect1 id='pst2ldif.copyright.1'> | |
| 599 <title>Copyright</title> | |
| 600 <para> | |
| 601 Copyright (C) 2006 by 510 Software Group <carl@five-ten-sg.com> | |
| 602 </para> | |
| 603 <para> | |
| 604 This program is free software; you can redistribute it and/or modify it | |
| 605 under the terms of the GNU General Public License as published by the | |
| 606 Free Software Foundation; either version 2, or (at your option) any | |
| 607 later version. | |
| 608 </para> | |
| 609 <para> | |
| 610 You should have received a copy of the GNU General Public License along | |
| 611 with this program; see the file COPYING. If not, please write to the | |
| 612 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
| 613 </para> | |
| 614 </refsect1> | |
| 615 | |
| 616 <refsect1 id='pst2ldif.version.1'> | |
| 52 | 617 <title>Version</title> |
| 24 | 618 <para> |
| 52 | 619 @VERSION@ |
| 24 | 620 </para> |
| 621 </refsect1> | |
| 622 </refentry> | |
| 623 | |
| 624 | |
| 625 <refentry id="pst.5"> | |
| 626 <refentryinfo> | |
| 52 | 627 <date>2008-01-27</date> |
| 24 | 628 </refentryinfo> |
| 629 | |
| 630 <refmeta> | |
| 631 <refentrytitle>outlook.pst</refentrytitle> | |
| 632 <manvolnum>5</manvolnum> | |
| 633 </refmeta> | |
| 634 | |
| 635 <refnamediv id='pst.name.1'> | |
| 636 <refname>outlook.pst</refname> | |
| 637 <refpurpose>format of MS Outlook .pst file</refpurpose> | |
| 638 </refnamediv> | |
| 639 | |
| 640 <refsynopsisdiv id='pst.synopsis.1'> | |
| 641 <title>Synopsis</title> | |
| 642 <cmdsynopsis> | |
| 643 <command>outlook.pst</command> | |
| 644 </cmdsynopsis> | |
| 645 </refsynopsisdiv> | |
| 646 | |
| 647 <refsect1 id='pst.file.overview.5'> | |
| 648 <title>Overview</title> | |
| 649 <para> | |
| 650 Each item in a .pst file is identified by two id values ID1 and ID2. | |
| 651 There are two separate b-trees indexed by these ID1 and ID2 values. | |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
652 Starting with Outlook 2003, the file format changed from one with 32 |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
653 bit pointers, to one with 64 bit pointers. We describe both formats |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
654 here. |
| 24 | 655 </para> |
| 656 </refsect1> | |
| 657 | |
| 44 | 658 <refsect1 id='pst.file.header.32.5'> |
| 659 <title>32 bit File Header</title> | |
| 24 | 660 <para> |
| 44 | 661 The 32 bit file header is located at offset 0 in the .pst file. |
| 24 | 662 </para> |
| 663 <literallayout class="monospaced"><![CDATA[ | |
| 664 0000 21 42 44 4e 49 f8 64 d9 53 4d 0e 00 13 00 01 01 | |
| 665 0010 00 00 00 00 00 00 00 00 50 d6 03 00 bd 1e 02 00 | |
| 666 0020 08 4c 00 00 00 04 00 00 00 04 00 00 0f 04 00 00 | |
| 667 0030 0d 40 00 00 99 0a 01 00 18 04 00 00 0d 40 00 00 | |
| 668 0040 0d 40 00 00 11 80 00 00 02 04 00 00 0a 04 00 00 | |
| 669 0050 00 04 00 00 00 04 00 00 0f 04 00 00 0f 04 00 00 | |
| 670 0060 0f 04 00 00 0d 40 00 00 00 04 00 00 00 04 00 00 | |
| 671 0070 04 40 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 672 0080 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 673 0090 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 674 00a0 0c 09 00 00 00 00 00 00 00 04 27 00 00 24 23 00 | |
| 675 00b0 c0 09 0a 00 00 c8 00 00 bc 1e 02 00 00 7e 0c 00 | |
| 676 00c0 b4 1e 02 00 00 54 00 00 01 00 00 00 23 55 44 d1 | |
| 677 00d0 5a 4f ce 6b 80 ff ff ff 00 00 00 00 00 00 00 00 | |
| 678 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 679 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 680 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 681 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 682 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 683 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 684 0140 00 00 00 00 00 00 00 00 00 00 00 00 3f ff ff ff | |
| 685 0150 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 686 0160 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 687 0170 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 688 0180 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 689 0190 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 690 01a0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 691 01b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 692 01c0 ff ff ff ff ff ff ff ff ff ff ff ff 80 01 00 00 | |
| 693 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 694 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 695 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 696 | |
| 697 0000 signature [4 bytes] 0x4e444221 constant | |
| 28 | 698 000a indexType [1 byte] 0x0e constant |
| 44 | 699 01cd encryptionType [1 byte] 0x01 in this case |
| 24 | 700 00a8 total file size [4 bytes] 0x270400 in this case |
| 28 | 701 00c0 backPointer1 [4 bytes] 0x021eb4 in this case |
| 702 00c4 offsetIndex1 [4 bytes] 0x005400 in this case | |
| 703 00b8 backPointer2 [4 bytes] 0x021ebc in this case | |
| 704 00bc offsetIndex2 [4 bytes] 0x0c7e00 in this case | |
| 24 | 705 ]]></literallayout> |
| 706 <para> | |
| 44 | 707 We only support index types 0x0e and 0x17, and encryption types |
| 708 0x00 and 0x01. Index type 0x0e is the older 32 bit Outlook format. | |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
709 Index type 0x17 is the newer 64 bit Outlook format. Encryption |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
710 type 0x00 is no encryption, and type 0x01 is the only other supported |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
711 encryption type. |
| 24 | 712 </para> |
| 713 <para> | |
| 28 | 714 offsetIndex1 is the file offset of the root of the |
| 24 | 715 index1 b-tree, which contains (ID1, offset, size, unknown) tuples |
| 28 | 716 for each item in the file. backPointer1 is the value that should |
| 24 | 717 appear in the parent pointer of that root node. |
| 718 </para> | |
| 719 <para> | |
| 28 | 720 offsetIndex2 is the file offset of the root of the |
| 24 | 721 index2 b-tree, which contains (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) |
| 28 | 722 tuples for each item in the file. backPointer2 is the value that should |
| 24 | 723 appear in the parent pointer of that root node. |
| 724 </para> | |
| 725 </refsect1> | |
| 726 | |
| 44 | 727 <refsect1 id='pst.file.header.64.5'> |
| 728 <title>64 bit File Header</title> | |
| 24 | 729 <para> |
| 44 | 730 The 64 bit file header is located at offset 0 in the .pst file. |
| 731 </para> | |
| 732 <literallayout class="monospaced"><![CDATA[ | |
| 733 0000 21 42 44 4e 03 02 23 b2 53 4d 17 00 13 00 01 01 | |
| 734 0010 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 | |
| 735 0020 8b 00 00 00 00 00 00 00 1d 00 00 00 00 04 00 00 | |
| 736 0030 00 04 00 00 04 04 00 00 00 40 00 00 02 00 01 00 | |
| 737 0040 00 04 00 00 00 04 00 00 00 04 00 00 00 80 00 00 | |
| 738 0050 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 739 0060 04 04 00 00 04 04 00 00 04 04 00 00 00 04 00 00 | |
| 740 0070 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 741 0080 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 742 0090 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 743 00a0 00 04 00 00 00 04 00 00 02 04 00 00 00 00 00 00 | |
| 744 00b0 00 00 00 00 00 00 00 00 00 24 04 00 00 00 00 00 | |
| 745 00c0 00 44 00 00 00 00 00 00 00 71 03 00 00 00 00 00 | |
| 746 00d0 00 22 00 00 00 00 00 00 83 00 00 00 00 00 00 00 | |
| 747 00e0 00 6a 00 00 00 00 00 00 8a 00 00 00 00 00 00 00 | |
| 748 00f0 00 60 00 00 00 00 00 00 01 00 00 00 00 00 00 00 | |
| 749 0100 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 750 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 751 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 752 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 753 0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 754 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 755 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 756 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 757 0180 7f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 758 0190 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 759 01a0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 760 01b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 761 01c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 762 01d0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 763 01e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 764 01f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 765 0200 80 00 00 00 e8 00 00 00 00 00 00 00 c4 68 cb 89 | |
| 766 | |
| 767 0000 signature [4 bytes] 0x4e444221 constant | |
| 768 000a indexType [1 byte] 0x17 constant | |
| 769 0201 encryptionType [1 byte] 0x00 in this case | |
| 770 00b8 total file size [8 bytes] 0x042400 in this case | |
| 771 00e8 backPointer1 [8 bytes] 0x00008a in this case | |
| 772 00f0 offsetIndex1 [8 bytes] 0x006000 in this case | |
| 773 00d8 backPointer2 [8 bytes] 0x000083 in this case | |
| 774 00e0 offsetIndex2 [8 bytes] 0x006a00 in this case | |
| 775 ]]></literallayout> | |
| 776 </refsect1> | |
| 777 | |
| 778 <refsect1 id='pst.file.node1.32.5'> | |
| 779 <title>32 bit Index 1 Node</title> | |
| 780 <para> | |
| 52 | 781 The 32 bit index1 b-tree nodes are 512 byte blocks with the |
| 44 | 782 following format. |
| 24 | 783 </para> |
| 784 <literallayout class="monospaced"><![CDATA[ | |
| 785 0000 04 00 00 00 8a 1e 02 00 00 1c 0b 00 | |
| 786 000c 58 27 03 00 b3 1e 02 00 00 52 00 00 | |
| 787 0018 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 788 0024 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 789 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 790 003c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 791 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 792 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 793 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 794 006c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 795 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 796 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 797 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 798 009c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 799 00a8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 800 00b4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 801 00c0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 802 00cc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 803 00d8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 804 00e4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 805 00f0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 806 00fc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 807 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 808 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 809 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 810 012c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 811 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 812 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 813 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 814 015c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 815 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 816 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 817 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 818 018c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 819 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 820 01a4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 821 01b0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 822 01bc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 823 01c8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 824 01d4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 825 01e0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 826 01ec 00 00 00 00 02 29 0c 02 80 80 b6 4a | |
| 52 | 827 01f8 b4 1e 02 00 27 9c cc 56 |
| 24 | 828 |
| 28 | 829 01f0 itemCount [1 byte] 0x02 in this case |
| 830 01f1 maxItemCount [1 byte] 0x29 constant | |
| 831 01f3 nodeLevel [1 byte] 0x02 in this case | |
| 832 01f8 backPointer [4 bytes] 0x021eb4 in this case | |
| 24 | 833 ]]></literallayout> |
| 834 <para> | |
| 28 | 835 The itemCount specifies the number of 12 byte records that |
| 836 are active. The nodeLevel is non-zero for this style of nodes. | |
| 837 The leaf nodes have a different format. The backPointer must | |
| 838 match the backPointer from the triple that pointed to this node. | |
| 24 | 839 </para> |
| 840 <para> | |
| 35 | 841 Each item in this node is a triple of (ID1, backPointer, offset) |
| 24 | 842 where the offset points to the next deeper node in the tree, the |
| 28 | 843 backPointer value must match the backPointer in that deeper node, |
| 35 | 844 and ID1 is the lowest ID1 value in the subtree. |
| 24 | 845 </para> |
| 846 </refsect1> | |
| 847 | |
| 44 | 848 <refsect1 id='pst.file.node1.64.5'> |
| 849 <title>64 bit Index 1 Node</title> | |
| 24 | 850 <para> |
| 44 | 851 The 64 bit index1 b-tree nodes are 512 byte blocks with the |
| 852 following format. | |
| 853 </para> | |
| 854 <literallayout class="monospaced"><![CDATA[ | |
| 855 0000 04 00 00 00 00 00 00 00 88 00 00 00 | |
| 856 000C 00 00 00 00 00 48 00 00 00 00 00 00 | |
| 857 0018 74 00 00 00 00 00 00 00 86 00 00 00 | |
| 858 0024 00 00 00 00 00 54 00 00 00 00 00 00 | |
| 859 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 860 003C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 861 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 862 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 863 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 864 006C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 865 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 866 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 867 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 868 009C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 869 00A8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 870 00B4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 871 00C0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 872 00CC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 873 00D8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 874 00E4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 875 00F0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 876 00FC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 877 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 878 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 879 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 880 012C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 881 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 882 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 883 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 884 015C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 885 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 886 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 887 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 888 018C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 889 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 890 01A4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 891 01B0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 892 01BC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 893 01C8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 894 01D4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 895 01E0 00 00 00 00 00 00 00 00 02 14 18 01 | |
| 896 01EC 00 00 00 00 80 80 8a 60 68 e5 b5 19 | |
| 897 01F8 8a 00 00 00 00 00 00 00 | |
| 898 | |
| 899 01e8 itemCount [1 byte] 0x02 in this case | |
| 900 01e9 maxItemCount [1 byte] 0x14 constant | |
| 901 01eb nodeLevel [1 byte] 0x01 in this case | |
| 902 01f8 backPointer [8 bytes] 0x00008a in this case | |
| 903 ]]></literallayout> | |
| 904 <para> | |
| 905 The itemCount specifies the number of 24 byte records that | |
| 906 are active. The nodeLevel is non-zero for this style of nodes. | |
| 907 The leaf nodes have a different format. The backPointer must | |
| 908 match the backPointer from the triple that pointed to this node. | |
| 909 </para> | |
| 910 <para> | |
| 911 Each item in this node is a triple of (ID1, backPointer, offset) | |
| 912 where the offset points to the next deeper node in the tree, the | |
| 913 backPointer value must match the backPointer in that deeper node, | |
| 914 and ID1 is the lowest ID1 value in the subtree. | |
| 915 </para> | |
| 916 </refsect1> | |
| 917 | |
| 918 <refsect1 id='pst.file.leaf1.32.5'> | |
| 919 <title>32 bit Index 1 Leaf Node</title> | |
| 920 <para> | |
| 52 | 921 The 32 bit index1 b-tree leaf nodes are 512 byte blocks with the |
| 44 | 922 following format. |
| 24 | 923 </para> |
| 924 <literallayout class="monospaced"><![CDATA[ | |
| 925 0000 04 00 00 00 00 58 00 00 64 00 0f 00 | |
| 926 000c 08 00 00 00 80 58 00 00 ac 00 06 00 | |
| 927 0018 0c 00 00 00 40 59 00 00 ac 00 06 00 | |
| 928 0024 10 00 00 00 00 5a 00 00 bc 00 03 00 | |
| 929 0030 14 00 00 00 00 5b 00 00 a4 00 02 00 | |
| 930 003c 18 00 00 00 c0 5b 00 00 64 00 02 00 | |
| 931 0048 1c 00 00 00 40 5c 00 00 5c 00 02 00 | |
| 932 0054 50 00 00 00 80 62 00 00 60 00 02 00 | |
| 933 0060 74 00 00 00 00 77 00 00 5e 00 02 00 | |
| 934 006c 7c 00 00 00 80 77 00 00 66 00 02 00 | |
| 935 0078 84 00 00 00 00 76 00 00 ca 00 02 00 | |
| 936 0084 88 00 00 00 00 63 00 00 52 00 02 00 | |
| 937 0090 90 00 00 00 00 79 00 00 58 00 02 00 | |
| 938 009c cc 00 00 00 c0 61 00 00 76 00 02 00 | |
| 939 00a8 e0 00 00 00 00 61 00 00 74 00 02 00 | |
| 940 00b4 f4 00 00 00 80 65 00 00 6e 00 02 00 | |
| 941 00c0 8c 01 00 00 40 60 00 00 70 00 02 00 | |
| 942 00cc ea 01 00 00 80 61 00 00 10 00 02 00 | |
| 943 00d8 ec 01 00 00 40 8a 00 00 f3 01 02 00 | |
| 944 00e4 f0 01 00 00 80 93 00 00 f4 1f 02 00 | |
| 945 00f0 fa 01 00 00 c0 7f 00 00 10 00 02 00 | |
| 946 00fc 00 02 00 00 00 89 00 00 34 01 02 00 | |
| 947 0108 1c 02 00 00 40 ec 00 00 12 06 02 00 | |
| 948 0114 22 02 00 00 00 84 00 00 10 00 02 00 | |
| 949 0120 24 02 00 00 c0 ea 00 00 3c 01 02 00 | |
| 950 012c 40 02 00 00 00 f4 00 00 0a 06 02 00 | |
| 951 0138 46 02 00 00 40 8c 00 00 10 00 02 00 | |
| 952 0144 48 02 00 00 80 f2 00 00 36 01 02 00 | |
| 953 0150 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 954 015c 6a 02 00 00 80 63 00 00 10 00 02 00 | |
| 955 0168 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 956 0174 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 957 0180 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 958 018c 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 959 0198 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 960 01a4 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 961 01b0 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 962 01bc 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 963 01c8 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 964 01d4 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 965 01e0 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 966 01ec 00 00 00 00 1f 29 0c 00 80 80 5b b3 | |
| 52 | 967 01f8 5a 67 01 00 4f ae 70 a7 |
| 24 | 968 |
| 28 | 969 01f0 itemCount [1 byte] 0x1f in this case |
| 970 01f1 maxItemCount [1 byte] 0x29 constant | |
| 44 | 971 01f3 nodeLevel [1 byte] 0x00 defines a leaf node |
| 28 | 972 01f8 backPointer [4 bytes] 0x01675a in this case |
| 24 | 973 ]]></literallayout> |
| 974 <para> | |
| 28 | 975 The itemCount specifies the number of 12 byte records that |
| 976 are active. The nodeLevel is zero for these leaf nodes. | |
| 977 The backPointer must match the backPointer from the triple | |
| 24 | 978 that pointed to this node. |
| 979 </para> | |
| 980 <para> | |
| 981 Each item in this node is a tuple of (ID1, offset, size, unknown) | |
| 35 | 982 The two low order bits of the ID1 value seem to be flags. I have |
| 983 never seen a case with bit zero set. Bit one indicates that the | |
| 984 item is <emphasis>not</emphasis> encrypted. Note that references | |
| 985 to these ID1 values elsewhere may have the low order bit set (and | |
| 986 I don't know what that means), but when we do the search in this | |
| 987 tree we need to clear that bit so that we can find the correct item. | |
| 24 | 988 </para> |
| 989 </refsect1> | |
| 990 | |
| 44 | 991 <refsect1 id='pst.file.leaf1.64.5'> |
| 992 <title>64 bit Index 1 Leaf Node</title> | |
| 24 | 993 <para> |
| 44 | 994 The 64 bit index1 b-tree leaf nodes are 512 byte blocks with the |
| 995 following format. | |
| 996 </para> | |
| 997 <literallayout class="monospaced"><![CDATA[ | |
| 998 0000 04 00 00 00 00 00 00 00 00 58 00 00 | |
| 999 000C 00 00 00 00 6c 00 05 00 00 00 00 00 | |
| 1000 0018 08 00 00 00 00 00 00 00 80 58 00 00 | |
| 1001 0024 00 00 00 00 b4 00 06 00 d8 22 37 08 | |
| 1002 0030 0c 00 00 00 00 00 00 00 80 59 00 00 | |
| 1003 003C 00 00 00 00 ac 00 07 00 d8 22 37 08 | |
| 1004 0048 10 00 00 00 00 00 00 00 40 5a 00 00 | |
| 1005 0054 00 00 00 00 bc 00 03 00 d8 22 37 08 | |
| 1006 0060 14 00 00 00 00 00 00 00 40 5b 00 00 | |
| 1007 006C 00 00 00 00 a4 00 02 00 d8 22 37 08 | |
| 1008 0078 18 00 00 00 00 00 00 00 00 5c 00 00 | |
| 1009 0084 00 00 00 00 64 00 02 00 d8 22 37 08 | |
| 1010 0090 1c 00 00 00 00 00 00 00 80 5c 00 00 | |
| 1011 009C 00 00 00 00 5c 00 02 00 d8 22 37 08 | |
| 1012 00A8 24 00 00 00 00 00 00 00 80 5d 00 00 | |
| 1013 00B4 00 00 00 00 72 00 02 00 d8 22 37 08 | |
| 1014 00C0 34 00 00 00 00 00 00 00 00 70 00 00 | |
| 1015 00CC 00 00 00 00 8c 00 02 00 00 0d 00 00 | |
| 1016 00D8 38 00 00 00 00 00 00 00 c0 71 00 00 | |
| 1017 00E4 00 00 00 00 5c 00 02 00 d8 22 9c 00 | |
| 1018 00F0 40 00 00 00 00 00 00 00 40 72 00 00 | |
| 1019 00FC 00 00 00 00 26 00 02 00 d8 22 9c 00 | |
| 1020 0108 4c 00 00 00 00 00 00 00 80 5f 00 00 | |
| 1021 0114 00 00 00 00 3e 00 02 00 d8 22 9c 00 | |
| 1022 0120 5c 00 00 00 00 00 00 00 c0 76 00 00 | |
| 1023 012C 00 00 00 00 8c 00 02 00 d8 22 9c 00 | |
| 1024 0138 64 00 00 00 00 00 00 00 40 75 00 00 | |
| 1025 0144 00 00 00 00 76 00 02 00 d8 22 9c 00 | |
| 1026 0150 6c 00 00 00 00 00 00 00 c0 73 00 00 | |
| 1027 015C 00 00 00 00 5e 00 02 00 d8 22 9c 00 | |
| 1028 0168 70 00 00 00 00 00 00 00 80 72 00 00 | |
| 1029 0174 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
| 1030 0180 70 00 00 00 00 00 00 00 80 72 00 00 | |
| 1031 018C 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
| 1032 0198 70 00 00 00 00 00 00 00 80 72 00 00 | |
| 1033 01A4 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
| 1034 01B0 74 00 00 00 00 00 00 00 40 74 00 00 | |
| 1035 01BC 00 00 00 00 e0 00 02 00 d8 22 9c 00 | |
| 1036 01C8 7c 00 00 00 00 00 00 00 80 77 00 00 | |
| 1037 01D4 00 00 00 00 dc 00 02 00 d8 22 9c 00 | |
| 1038 01E0 00 00 00 00 00 00 00 00 10 14 18 00 | |
| 1039 01EC 00 00 00 00 80 80 88 48 3f 50 0b 04 | |
| 1040 01F8 88 00 00 00 00 00 00 00 | |
| 1041 | |
| 1042 01e8 itemCount [1 byte] 0x10 in this case | |
| 1043 01e9 maxItemCount [1 byte] 0x14 constant | |
| 1044 01eb nodeLevel [1 byte] 0x00 defines a leaf node | |
| 1045 01f8 backPointer [8 bytes] 0x000088 in this case | |
| 1046 ]]></literallayout> | |
| 1047 <para> | |
| 1048 The itemCount specifies the number of 24 byte records that | |
| 1049 are active. The nodeLevel is zero for these leaf nodes. | |
| 1050 The backPointer must match the backPointer from the triple | |
| 1051 that pointed to this node. | |
| 1052 </para> | |
| 1053 <para> | |
| 1054 Each item in this node is a tuple of (ID1, offset, size, unknown) | |
| 1055 The two low order bits of the ID1 value seem to be flags. I have | |
| 1056 never seen a case with bit zero set. Bit one indicates that the | |
| 1057 item is <emphasis>not</emphasis> encrypted. Note that references | |
| 1058 to these ID1 values elsewhere may have the low order bit set (and | |
| 1059 I don't know what that means), but when we do the search in this | |
| 1060 tree we need to clear that bit so that we can find the correct item. | |
| 1061 </para> | |
| 1062 </refsect1> | |
| 1063 | |
| 1064 <refsect1 id='pst.file.node2.32.5'> | |
| 1065 <title>32 bit Index 2 Node</title> | |
| 1066 <para> | |
| 52 | 1067 The 32 bit index2 b-tree nodes are 512 byte blocks with the |
| 44 | 1068 following format. |
| 24 | 1069 </para> |
| 1070 <literallayout class="monospaced"><![CDATA[ | |
| 1071 0000 21 00 00 00 bb 1e 02 00 00 e2 0b 00 | |
| 1072 000c 64 78 20 00 8c 1e 02 00 00 dc 0b 00 | |
| 1073 0018 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1074 0024 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1075 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1076 003c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1077 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1078 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1079 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1080 006c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1081 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1082 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1083 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1084 009c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1085 00a8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1086 00b4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1087 00c0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1088 00cc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1089 00d8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1090 00e4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1091 00f0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1092 00fc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1093 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1094 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1095 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1096 012c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1097 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1098 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1099 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1100 015c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1101 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1102 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1103 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1104 018c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1105 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1106 01a4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1107 01b0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1108 01bc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1109 01c8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1110 01d4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1111 01e0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1112 01ec 00 00 00 00 02 29 0c 02 81 81 b2 60 | |
| 52 | 1113 01f8 bc 1e 02 00 7e 70 dc e3 |
| 24 | 1114 |
| 28 | 1115 01f0 itemCount [1 byte] 0x02 in this case |
| 1116 01f1 maxItemCount [1 byte] 0x29 constant | |
| 1117 01f3 nodeLevel [1 byte] 0x02 in this case | |
| 1118 01f8 backPointer [4 bytes] 0x021ebc in this case | |
| 24 | 1119 ]]></literallayout> |
| 1120 <para> | |
| 28 | 1121 The itemCount specifies the number of 12 byte records that |
| 1122 are active. The nodeLevel is non-zero for this style of nodes. | |
| 1123 The leaf nodes have a different format. The backPointer must | |
| 1124 match the backPointer from the triple that pointed to this node. | |
| 24 | 1125 </para> |
| 1126 <para> | |
| 28 | 1127 Each item in this node is a triple of (ID2, backPointer, offset) |
| 24 | 1128 where the offset points to the next deeper node in the tree, the |
| 28 | 1129 backPointer value must match the backPointer in that deeper node, |
| 24 | 1130 and ID2 is the lowest ID2 value in the subtree. |
| 1131 </para> | |
| 1132 </refsect1> | |
| 1133 | |
| 44 | 1134 <refsect1 id='pst.file.node2.64.5'> |
| 1135 <title>64 bit Index 2 Node</title> | |
| 24 | 1136 <para> |
| 44 | 1137 The 64 bit index2 b-tree nodes are 512 byte blocks with the |
| 1138 following format. | |
| 1139 </para> | |
| 1140 <literallayout class="monospaced"><![CDATA[ | |
| 1141 0000 21 00 00 00 00 00 00 00 77 00 00 00 | |
| 1142 000C 00 00 00 00 00 56 00 00 00 00 00 00 | |
| 1143 0018 4c 06 00 00 00 00 00 00 82 00 00 00 | |
| 1144 0024 00 00 00 00 00 68 00 00 00 00 00 00 | |
| 1145 0030 4f 80 00 00 00 00 00 00 84 00 00 00 | |
| 1146 003C 00 00 00 00 00 6e 00 00 00 00 00 00 | |
| 1147 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1148 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1149 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1150 006C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1151 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1152 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1153 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1154 009C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1155 00A8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1156 00B4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1157 00C0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1158 00CC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1159 00D8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1160 00E4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1161 00F0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1162 00FC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1163 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1164 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1165 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1166 012C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1167 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1168 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1169 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1170 015C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1171 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1172 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1173 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1174 018C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1175 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1176 01A4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1177 01B0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1178 01BC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1179 01C8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1180 01D4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1181 01E0 00 00 00 00 00 00 00 00 03 14 18 01 | |
| 1182 01EC 00 00 00 00 81 81 83 6a 49 da f3 d3 | |
| 1183 01F8 83 00 00 00 00 00 00 00 | |
| 1184 | |
| 1185 01e8 itemCount [1 byte] 0x03 in this case | |
| 1186 01e9 maxItemCount [1 byte] 0x14 constant | |
| 1187 01eb nodeLevel [1 byte] 0x01 in this case | |
| 1188 01f8 backPointer [4 bytes] 0x000083 in this case | |
| 1189 ]]></literallayout> | |
| 1190 <para> | |
| 1191 The itemCount specifies the number of 24 byte records that | |
| 1192 are active. The nodeLevel is non-zero for this style of nodes. | |
| 1193 The leaf nodes have a different format. The backPointer must | |
| 1194 match the backPointer from the triple that pointed to this node. | |
| 1195 </para> | |
| 1196 <para> | |
| 1197 Each item in this node is a triple of (ID2, backPointer, offset) | |
| 1198 where the offset points to the next deeper node in the tree, the | |
| 1199 backPointer value must match the backPointer in that deeper node, | |
| 1200 and ID2 is the lowest ID2 value in the subtree. | |
| 1201 </para> | |
| 1202 </refsect1> | |
| 1203 | |
| 1204 <refsect1 id='pst.file.leaf2.32.5'> | |
| 1205 <title>32 bit Index 2 Leaf Node</title> | |
| 1206 <para> | |
| 52 | 1207 The 32 bit index2 b-tree leaf nodes are 512 byte blocks with the |
| 44 | 1208 following format. |
| 24 | 1209 </para> |
| 1210 <literallayout class="monospaced"><![CDATA[ | |
| 1211 0000 21 00 00 00 38 e6 00 00 00 00 00 00 00 00 00 00 | |
| 1212 0010 61 00 00 00 2c a8 02 00 36 a8 02 00 00 00 00 00 | |
| 1213 0020 22 01 00 00 20 a2 02 00 00 00 00 00 22 01 00 00 | |
| 1214 0030 2d 01 00 00 88 7b 03 00 00 00 00 00 00 00 00 00 | |
| 1215 0040 2e 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
| 1216 0050 2f 01 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 | |
| 1217 0060 e1 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1218 0070 01 02 00 00 b4 e4 02 00 00 00 00 00 00 00 00 00 | |
| 1219 0080 61 02 00 00 a0 e4 02 00 00 00 00 00 00 00 00 00 | |
| 1220 0090 0d 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 | |
| 1221 00A0 0e 06 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
| 1222 00B0 0f 06 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 | |
| 1223 00C0 10 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 | |
| 1224 00D0 2b 06 00 00 84 00 00 00 00 00 00 00 00 00 00 00 | |
| 1225 00E0 4c 06 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 | |
| 1226 00F0 71 06 00 00 18 00 00 00 00 00 00 00 00 00 00 00 | |
| 1227 0100 92 06 00 00 14 00 00 00 00 00 00 00 00 00 00 00 | |
| 1228 0110 23 22 00 00 14 a0 02 00 00 00 00 00 22 01 00 00 | |
| 1229 0120 26 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1230 0130 27 22 00 00 1c a0 02 00 00 00 00 00 00 00 00 00 | |
| 1231 0140 22 80 00 00 50 00 00 00 00 00 00 00 22 01 00 00 | |
| 1232 0150 2d 80 00 00 f8 9f 02 00 00 00 00 00 00 00 00 00 | |
| 1233 0160 2e 80 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
| 1234 0170 2f 80 00 00 34 e6 00 00 00 00 00 00 00 00 00 00 | |
| 1235 0180 42 80 00 00 3c 6d 02 00 00 00 00 00 22 80 00 00 | |
| 1236 0190 4d 80 00 00 04 00 00 00 00 00 00 00 00 00 00 00 | |
| 1237 01A0 4e 80 00 00 10 6d 02 00 00 00 00 00 00 00 00 00 | |
| 1238 01B0 4f 80 00 00 ec 23 00 00 00 00 00 00 00 00 00 00 | |
| 1239 01C0 62 80 00 00 38 78 02 00 00 00 00 00 22 01 00 00 | |
| 1240 01D0 6d 80 00 00 34 78 02 00 00 00 00 00 00 00 00 00 | |
| 1241 01E0 6e 80 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
| 1242 01F0 10 1f 10 00 81 81 a0 9a ae 1e 02 00 89 44 6a 0f | |
| 1243 | |
| 28 | 1244 01f0 itemCount [1 byte] 0x10 in this case |
| 1245 01f1 maxItemCount [1 byte] 0x1f constant | |
| 1246 01f3 nodeLevel [1 byte] 0x00 in this case | |
| 1247 01f8 backPointer [4 bytes] 0x021eae in this case | |
| 24 | 1248 ]]></literallayout> |
| 1249 <para> | |
| 28 | 1250 The itemCount specifies the number of 16 byte records that |
| 1251 are active. The nodeLevel is zero for these leaf nodes. | |
| 1252 The backPointer must match the backPointer from the triple | |
| 24 | 1253 that pointed to this node. |
| 1254 </para> | |
| 1255 <para> | |
| 1256 Each item in this node is a tuple of (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) | |
| 1257 </para> | |
| 1258 </refsect1> | |
| 1259 | |
| 44 | 1260 <refsect1 id='pst.file.leaf2.64.5'> |
| 1261 <title>64 bit Index 2 Leaf Node</title> | |
| 1262 <para> | |
| 1263 The 64 bit index2 b-tree leaf nodes are 512 byte blocks with the | |
| 1264 following format. | |
| 1265 </para> | |
| 1266 <literallayout class="monospaced"><![CDATA[ | |
| 1267 0000 21 00 00 00 00 00 00 00 74 00 00 00 00 00 00 00 | |
| 1268 0010 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1269 0020 61 00 00 00 00 00 00 00 34 00 00 00 00 00 00 00 | |
| 1270 0030 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1271 0040 22 01 00 00 00 00 00 00 4c 00 00 00 00 00 00 00 | |
| 1272 0050 00 00 00 00 00 00 00 00 22 01 00 00 02 00 00 00 | |
| 1273 0060 2d 01 00 00 00 00 00 00 70 00 00 00 00 00 00 00 | |
| 1274 0070 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1275 0080 2e 01 00 00 00 00 00 00 08 00 00 00 00 00 00 00 | |
| 1276 0090 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1277 00A0 2f 01 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 | |
| 1278 00B0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1279 00C0 e1 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1280 00D0 00 00 00 00 00 00 00 00 00 00 00 00 d8 e3 13 00 | |
| 1281 00E0 01 02 00 00 00 00 00 00 8c 00 00 00 00 00 00 00 | |
| 1282 00F0 00 00 00 00 00 00 00 00 00 00 00 00 b0 e3 13 00 | |
| 1283 0100 61 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1284 0110 00 00 00 00 00 00 00 00 00 00 00 00 d8 e3 13 00 | |
| 1285 0120 0d 06 00 00 00 00 00 00 04 00 00 00 00 00 00 00 | |
| 1286 0130 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1287 0140 0e 06 00 00 00 00 00 00 08 00 00 00 00 00 00 00 | |
| 1288 0150 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1289 0160 0f 06 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 | |
| 1290 0170 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1291 0180 10 06 00 00 00 00 00 00 10 00 00 00 00 00 00 00 | |
| 1292 0190 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1293 01A0 2b 06 00 00 00 00 00 00 24 00 00 00 00 00 00 00 | |
| 1294 01B0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1295 01C0 71 06 00 00 00 00 00 00 18 00 00 00 00 00 00 00 | |
| 1296 01D0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1297 01E0 00 00 00 00 00 00 00 00 0e 0f 20 00 00 00 00 00 | |
| 1298 01F0 81 81 77 56 f8 32 43 49 77 00 00 00 00 00 00 00 | |
| 1299 | |
| 1300 01e8 itemCount [1 byte] 0x0e in this case | |
| 1301 01e9 maxItemCount [1 byte] 0x0f constant | |
| 1302 01eb nodeLevel [1 byte] 0x00 defines a leaf node | |
| 1303 01f8 backPointer [4 bytes] 0x000077 in this case | |
| 1304 ]]></literallayout> | |
| 1305 <para> | |
| 1306 The itemCount specifies the number of 32 byte records that | |
| 1307 are active. The nodeLevel is zero for these leaf nodes. | |
| 1308 The backPointer must match the backPointer from the triple | |
| 1309 that pointed to this node. | |
| 1310 </para> | |
| 1311 <para> | |
| 1312 Each item in this node is a tuple of (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) | |
| 1313 </para> | |
| 1314 </refsect1> | |
| 1315 | |
| 46 | 1316 <refsect1 id='pst.file.list.32.5'> |
| 48 | 1317 <title>32 bit Associated List Item 0x0002</title> |
| 24 | 1318 <para> |
| 1319 Contains associations between id1 and id2 for the items controlled by the record. | |
| 44 | 1320 In the above 32 bit leaf node, we have a tuple of (0x61, 0x02a82c, 0x02a836, 0) |
| 24 | 1321 0x02a836 is the ID1 of the associated list, and we can lookup that ID1 value |
| 1322 in the index1 b-tree to find the (offset,size) of the data in the .pst file. | |
| 1323 </para> | |
| 1324 <literallayout class="monospaced"><![CDATA[ | |
| 1325 0000 02 00 01 00 9f 81 00 00 30 a8 02 00 00 00 00 00 | |
| 1326 | |
| 48 | 1327 0000 signature [2 bytes] 0x0002 constant |
| 24 | 1328 0002 count [2 bytes] 0x0001 in this case |
| 1329 repeating | |
| 1330 0004 id2 [4 bytes] 0x00819f in this case | |
| 1331 0008 id [4 bytes] 0x02a830 in this case | |
| 46 | 1332 000c table2 [4 bytes] 0 in this case |
| 1333 ]]></literallayout> | |
| 1334 </refsect1> | |
| 1335 | |
| 1336 <refsect1 id='pst.file.list.64.5'> | |
| 48 | 1337 <title>64 bit Associated List Item 0x0002</title> |
| 46 | 1338 <para> |
| 1339 Contains associations between id1 and id2 for the items controlled by the record. | |
| 1340 </para> | |
| 1341 <literallayout class="monospaced"><![CDATA[ | |
| 1342 0000 02 00 02 00 00 00 00 00 92 06 00 00 00 00 00 00 | |
| 1343 0010 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1344 0020 3f 80 00 00 00 00 00 00 98 00 00 00 00 00 00 00 | |
| 1345 0030 00 00 00 00 00 00 00 00 | |
| 1346 | |
| 48 | 1347 0000 signature [2 bytes] 0x0002 constant |
| 46 | 1348 0002 count [2 bytes] 0x0002 in this case |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
1349 0004 unknown [4 bytes] 0 possibly constant |
| 46 | 1350 repeating |
| 48 | 1351 0008 id2 [4 bytes] 0x000692 in this case |
| 1352 000c unknown1 [2 bytes] 0 may be a count or size | |
| 1353 000e unknown2 [2 bytes] 0 may be a count or size | |
| 1354 0010 id [8 bytes] 0x0000a8 in this case | |
| 1355 0018 table2 [8 bytes] 0 in this case | |
| 24 | 1356 ]]></literallayout> |
| 1357 </refsect1> | |
| 1358 | |
| 1359 <refsect1 id='pst.file.desc.5'> | |
| 28 | 1360 <title>Associated Descriptor Item 0xbcec</title> |
| 24 | 1361 <para> |
| 28 | 1362 Contains information about the item, which may be email, contact, or |
| 1363 other outlook types. In the above leaf node, we have a tuple of (0x21, | |
| 1364 0x00e638, 0, 0) 0x00e638 is the ID1 of the associated descriptor, and we | |
| 1365 can lookup that ID1 value in the index1 b-tree to find the (offset,size) | |
| 1366 of the data in the .pst file. | |
| 24 | 1367 </para> |
| 1368 <literallayout class="monospaced"><![CDATA[ | |
| 1369 0000 3c 01 ec bc 20 00 00 00 00 00 00 00 b5 02 06 00 | |
| 1370 0010 40 00 00 00 f9 0f 02 01 60 00 00 00 01 30 1e 00 | |
| 1371 0020 80 00 00 00 04 30 1e 00 00 00 00 00 df 35 03 00 | |
| 1372 0030 ff 00 00 00 e0 35 02 01 a0 00 00 00 e2 35 02 01 | |
| 1373 0040 e0 00 00 00 e3 35 02 01 c0 00 00 00 e4 35 02 01 | |
| 1374 0050 00 01 00 00 e5 35 02 01 20 01 00 00 e6 35 02 01 | |
| 1375 0060 40 01 00 00 e7 35 02 01 60 01 00 00 1e 66 0b 00 | |
| 1376 0070 00 00 00 00 ff 67 03 00 00 00 00 00 d2 7f 17 d8 | |
| 1377 0080 64 8c d5 11 83 24 00 50 04 86 95 45 53 74 61 6e | |
| 1378 0090 6c 65 79 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
| 1379 00A0 24 00 50 04 86 95 45 22 80 00 00 00 00 00 00 d2 | |
| 1380 00B0 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 42 | |
| 1381 00C0 80 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
| 1382 00D0 24 00 50 04 86 95 45 a2 80 00 00 00 00 00 00 d2 | |
| 1383 00E0 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 c2 | |
| 1384 00F0 80 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
| 1385 0100 24 00 50 04 86 95 45 e2 80 00 00 00 00 00 00 d2 | |
| 1386 0110 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 02 | |
| 1387 0120 81 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
| 1388 0130 24 00 50 04 86 95 45 62 80 00 00 00 0b 00 00 00 | |
| 1389 0140 0c 00 14 00 7c 00 8c 00 93 00 ab 00 c3 00 db 00 | |
| 1390 0150 f3 00 0b 01 23 01 3b 01 | |
| 1391 | |
| 28 | 1392 0000 indexOffset [2 bytes] 0x013c in this case |
| 24 | 1393 0002 signature [2 bytes] 0xbcec constant |
| 35 | 1394 0004 b5offset [4 bytes] 0x0020 index reference |
| 24 | 1395 ]]></literallayout> |
| 1396 <para> | |
| 35 | 1397 Note the signature of 0xbcec. There are other descriptor block formats |
| 1398 with other signatures. Note the indexOffset of 0x013c - starting at | |
| 1399 that position in the descriptor block, we have an array of two byte | |
| 1400 integers. The first integer (0x000b) is a (count-1) of the number of | |
| 1401 overlapping pairs following the count. The first pair is (0, 0xc), the | |
| 1402 next pair is (0xc, 0x14) and the last (12th) pair is (0x123, 0x13b). | |
| 1403 These pairs are (start,end+1) offsets of items in this block. So we | |
| 1404 have count+2 integers following the count value. | |
| 24 | 1405 </para> |
| 1406 <para> | |
| 35 | 1407 Note the b5offset of 0x0020, which is a type that I will call an index |
| 49 | 1408 reference. Such index references have at least two different forms, |
| 1409 and may point to data either in this block, or in some other block. | |
| 35 | 1410 External pointer references have the low order 4 bits all set, and are |
| 1411 ID2 values that can be used to fetch data. This value of 0x0020 is an | |
| 49 | 1412 internal pointer reference, which needs to be right shifted by 4 bits |
| 1413 to become 0x0002, which is then a byte offset to be added to the above | |
| 35 | 1414 indexOffset plus two (to skip the count), so it points to the (0xc, |
| 1415 0x14) pair. | |
| 1416 </para> | |
| 1417 <para> | |
| 49 | 1418 So far we have only described internal index references where the high |
| 1419 order 16 bits are zero. That suffices for single descriptor | |
| 1420 blocks. But in the case of the type 0x0101 descriptor block, we have | |
| 1421 an array of subblocks. In this case, the high order 16 bits of an | |
| 1422 internal index reference are used to select the subblock. Each | |
| 1423 subblock starts with a 16 bit indexOffset which points to the count | |
| 1424 and array of 16 bit integer pairs which are offsets in the current | |
| 1425 subblock. | |
| 1426 </para> | |
| 1427 <para> | |
| 35 | 1428 Finally, we have the offset and size of the "b5" block located at offset 0xc |
| 24 | 1429 with a size of 8 bytes in this descriptor block. The "b5" block has the |
| 1430 following format: | |
| 1431 </para> | |
| 1432 <literallayout class="monospaced"><![CDATA[ | |
| 1433 0000 signature [2 bytes] 0x02b5 constant | |
| 1434 0002 unknown [2 bytes] 0x0006 in this case | |
| 35 | 1435 0004 descoffset [4 bytes] 0x0040 index reference |
| 24 | 1436 ]]></literallayout> |
| 1437 <para> | |
| 35 | 1438 Note the descoffset of 0x0040, which again is an index reference. In this |
| 1439 case, it is an internal pointer reference, which needs to be right shifted by 4 bits | |
| 24 | 1440 to become 0x0004, which is then a byte offset to be added to the above |
| 28 | 1441 indexOffset plus two (to skip the count), so it points to the (0x14, 0x7c) |
| 24 | 1442 pair. We now have the offset 0x14 of the descriptor array, composed of 8 byte |
| 1443 entries. Each descriptor entry has the following format: | |
| 1444 </para> | |
| 1445 <literallayout class="monospaced"><![CDATA[ | |
| 28 | 1446 0000 itemType [2 bytes] |
| 1447 0002 referenceType [2 bytes] | |
| 24 | 1448 0004 value [4 bytes] |
| 1449 ]]></literallayout> | |
| 1450 <para> | |
| 1451 For some reference types (2, 3, 0xb) the value is used directly. Otherwise, | |
| 35 | 1452 the value is an index reference, which is either an ID2 value, or an |
| 1453 offset, to be right shifted by 4 bits and used to fetch a pair from the | |
| 1454 index table to find the offset and size of the item in this descriptor block. | |
| 24 | 1455 </para> |
| 1456 <para> | |
| 1457 The following reference types are known, but not all of these | |
| 1458 are implemented in the code yet. | |
| 1459 </para> | |
| 1460 <literallayout class="monospaced"><![CDATA[ | |
| 1461 0x0002 - Signed 16bit value | |
| 1462 0x0003 - Signed 32bit value | |
| 1463 0x0004 - 4-byte floating point | |
| 1464 0x0005 - Floating point double | |
| 1465 0x0006 - Signed 64-bit int | |
| 1466 0x0007 - Application Time | |
| 1467 0x000A - 32-bit error value | |
| 1468 0x000B - Boolean (non-zero = true) | |
| 1469 0x000D - Embedded Object | |
| 1470 0x0014 - 8-byte signed integer (64-bit) | |
| 1471 0x001E - Null terminated String | |
| 1472 0x001F - Unicode string | |
| 1473 0x0040 - Systime - Filetime structure | |
| 1474 0x0048 - OLE Guid | |
| 1475 0x0102 - Binary data | |
| 1476 0x1003 - Array of 32bit values | |
| 1477 0x1014 - Array of 64bit values | |
| 1478 0x101E - Array of Strings | |
| 1479 0x1102 - Array of Binary data | |
| 1480 ]]></literallayout> | |
| 1481 <para> | |
| 1482 The following item types are known, but not all of these | |
| 1483 are implemented in the code yet. | |
| 1484 </para> | |
| 1485 <literallayout class="monospaced"><![CDATA[ | |
| 51 | 1486 0002 Alternate recipient allowed |
| 24 | 1487 0003 Extended Attributes Table |
| 1488 0017 Importance Level | |
| 51 | 1489 001a IPM Context, message class |
| 1490 0023 Global delivery report requested | |
| 24 | 1491 0026 Priority |
| 1492 0029 Read Receipt | |
| 1493 002b Reassignment Prohibited | |
| 1494 002e Original Sensitivity | |
| 1495 0036 Sensitivity | |
| 51 | 1496 0037 Email Subject |
| 24 | 1497 0039 Date. This is likely to be the arrival date |
| 1498 003b Outlook Address of Sender | |
| 1499 003f Outlook structure describing the recipient | |
| 1500 0040 Name of the Outlook recipient structure | |
| 1501 0041 Outlook structure describing the sender | |
| 1502 0042 Name of the Outlook sender structure | |
| 1503 0043 Another structure describing the recipient | |
| 1504 0044 Name of the second recipient structure | |
| 1505 004f Reply-To Outlook Structure | |
| 1506 0050 Name of the Reply-To structure | |
| 1507 0051 Outlook Name of recipient | |
| 1508 0052 Second Outlook name of recipient | |
| 1509 0057 My address in TO field | |
| 1510 0058 My address in CC field | |
| 1511 0059 Message addressed to me | |
| 1512 0063 Response requested | |
| 1513 0064 Sender's Address access method (SMTP, EX) | |
| 1514 0065 Sender's Address | |
| 1515 0070 Processed Subject (with Fwd:, Re, ... removed) | |
| 1516 0071 Date. Another date | |
| 1517 0075 Recipient Address Access Method (SMTP, EX) | |
| 1518 0076 Recipient's Address | |
| 1519 0077 Second Recipient Access Method (SMTP, EX) | |
| 1520 0078 Second Recipient Address | |
| 1521 007d Email Header. This is the header that was attached to the email | |
| 1522 0c17 Reply Requested | |
| 52 | 1523 0c19 Second sender structure |
| 1524 0c1a Name of second sender structure | |
| 24 | 1525 0c1d Second outlook name of sender |
| 1526 0c1e Second sender access method (SMTP, EX) | |
| 1527 0c1f Second Sender Address | |
| 1528 0e01 Delete after submit | |
| 1529 0e03 CC Address? | |
| 1530 0e04 SentTo Address | |
| 1531 0e06 Date. | |
| 1532 0e07 Flag - contains IsSeen value | |
| 1533 0e08 Message Size | |
| 1534 0e0a Sentmail EntryID | |
| 1535 0e1f Compressed RTF in Sync | |
| 1536 0e20 Attachment Size | |
| 1537 0ff9 binary record header | |
| 1538 1000 Plain Text Email Body. Does not exist if the email doesn't have a plain text version | |
| 1539 1006 RTF Sync Body CRC | |
| 1540 1007 RTF Sync Body character count | |
| 1541 1008 RTF Sync body tag | |
| 1542 1009 RTF Compressed body | |
| 1543 1010 RTF whitespace prefix count | |
| 1544 1011 RTF whitespace tailing count | |
| 36 | 1545 1013 HTML Email Body. Does not exist if the email doesn't have an HTML version |
| 24 | 1546 1035 Message ID |
| 1547 1042 In-Reply-To or Parent's Message ID | |
| 1548 1046 Return Path | |
| 1549 3001 Folder Name? I have seen this value used for the contacts record aswell | |
| 1550 3002 Address Type | |
| 1551 3003 Contact Address | |
| 1552 3004 Comment | |
| 1553 3007 Date item creation | |
| 1554 3008 Date item modification | |
| 1555 300b binary record header | |
| 1556 35df Valid Folder Mask | |
| 51 | 1557 35e0 binary record contains a reference to "Top of Personal Folder" item |
| 1558 35e2 binary record contains a reference to default outbox item | |
| 1559 35e3 binary record contains a reference to "Deleted Items" item | |
| 1560 35e4 binary record contains a reference to sent items folder item | |
| 1561 35e5 binary record contains a reference to user views folder item | |
| 1562 35e6 binary record contains a reference to common views folder item | |
| 1563 35e7 binary record contains a reference to "Search Root" item | |
| 24 | 1564 3602 the number of emails stored in a folder |
| 1565 3603 the number of unread emails in a folder | |
| 1566 360a Has Subfolders | |
| 1567 3613 the folder content description | |
| 1568 3617 Associate Content count | |
| 1569 3701 Binary Data attachment | |
| 1570 3704 Attachment Filename | |
| 1571 3705 Attachement method | |
| 1572 3707 Attachment Filename long | |
| 1573 370b Attachment Position | |
| 1574 370e Attachment mime encoding | |
| 51 | 1575 3710 Attachment mime Sequence |
| 24 | 1576 3a00 Contact's Account name |
| 1577 3a01 Contact Alternate Recipient | |
| 1578 3a02 Callback telephone number | |
| 1579 3a03 Message Conversion Prohibited | |
| 1580 3a05 Contacts Suffix | |
| 1581 3a06 Contacts First Name | |
| 1582 3a07 Contacts Government ID Number | |
| 1583 3a08 Business Telephone Number | |
| 1584 3a09 Home Telephone Number | |
| 1585 3a0a Contacts Initials | |
| 1586 3a0b Keyword | |
| 1587 3a0c Contact's Language | |
| 1588 3a0d Contact's Location | |
| 1589 3a0e Mail Permission | |
| 1590 3a0f MHS Common Name | |
| 1591 3a10 Organizational ID # | |
| 1592 3a11 Contacts Surname | |
| 1593 3a12 original entry id | |
| 1594 3a13 original display name | |
| 1595 3a14 original search key | |
| 1596 3a15 Default Postal Address | |
| 1597 3a16 Company Name | |
| 1598 3a17 Job Title | |
| 1599 3a18 Department Name | |
| 1600 3a19 Office Location | |
| 1601 3a1a Primary Telephone | |
| 1602 3a1b Business Phone Number 2 | |
| 1603 3a1c Mobile Phone Number | |
| 1604 3a1d Radio Phone Number | |
| 1605 3a1e Car Phone Number | |
| 1606 3a1f Other Phone Number | |
| 1607 3a20 Transmittable Display Name | |
| 1608 3a21 Pager Phone Number | |
| 1609 3a22 user certificate | |
| 1610 3a23 Primary Fax Number | |
| 1611 3a24 Business Fax Number | |
| 1612 3a25 Home Fax Number | |
| 1613 3a26 Business Address Country | |
| 1614 3a27 Business Address City | |
| 1615 3a28 Business Address State | |
| 1616 3a29 Business Address Street | |
| 1617 3a2a Business Postal Code | |
| 1618 3a2b Business PO Box | |
| 1619 3a2c Telex Number | |
| 1620 3a2d ISDN Number | |
| 1621 3a2e Assistant Phone Number | |
| 1622 3a2f Home Phone 2 | |
| 1623 3a30 Assistant's Name | |
| 1624 3a40 Can receive Rich Text | |
| 1625 3a41 Wedding Anniversary | |
| 1626 3a42 Birthday | |
| 1627 3a43 Hobbies | |
| 1628 3a44 Middle Name | |
| 1629 3a45 Display Name Prefix (Title) | |
| 1630 3a46 Profession | |
| 1631 3a47 Preferred By Name | |
| 1632 3a48 Spouse's Name | |
| 1633 3a49 Computer Network Name | |
| 1634 3a4a Customer ID | |
| 1635 3a4b TTY/TDD Phone | |
| 1636 3a4c Ftp Site | |
| 1637 3a4d Gender | |
| 1638 3a4e Manager's Name | |
| 1639 3a4f Nickname | |
| 1640 3a50 Personal Home Page | |
| 1641 3a51 Business Home Page | |
| 1642 3a57 Company Main Phone | |
| 1643 3a58 childrens names | |
| 1644 3a59 Home Address City | |
| 1645 3a5a Home Address Country | |
| 1646 3a5b Home Address Postal Code | |
| 1647 3a5c Home Address State or Province | |
| 1648 3a5d Home Address Street | |
| 1649 3a5e Home Address Post Office Box | |
| 1650 3a5f Other Address City | |
| 1651 3a60 Other Address Country | |
| 1652 3a61 Other Address Postal Code | |
| 1653 3a62 Other Address State | |
| 1654 3a63 Other Address Street | |
| 1655 3a64 Other Address Post Office box | |
| 1656 65e3 Entry ID | |
| 1657 67f2 Attachment ID2 value | |
| 36 | 1658 67ff Password checksum |
| 24 | 1659 6f02 Secure HTML Body |
| 1660 6f04 Secure Text Body | |
| 36 | 1661 7c07 Top of folders RecID |
| 24 | 1662 8005 Contact Fullname |
| 1663 801a Home Address | |
| 1664 801b Business Address | |
| 1665 801c Other Address | |
| 51 | 1666 8045 Work Address Street |
| 1667 8046 Work Address City | |
| 1668 8047 Work Address State | |
| 1669 8048 Work Address Postal Code | |
| 1670 8049 Work Address Country | |
| 1671 804a Work Address Post Office Box | |
| 24 | 1672 8082 Email Address 1 Transport |
| 1673 8083 Email Address 1 Address | |
| 1674 8084 Email Address 1 Description | |
| 1675 8085 Email Address 1 Record | |
| 1676 8092 Email Address 2 Transport | |
| 1677 8093 Email Address 2 Address | |
| 36 | 1678 8094 Email Address 2 Description |
| 24 | 1679 8095 Email Address 2 Record |
| 36 | 1680 80a2 Email Address 3 Transport |
| 24 | 1681 80a3 Email Address 3 Address |
| 1682 80a4 Email Address 3 Description | |
| 1683 80a5 Email Address 3 Record | |
| 1684 80d8 Internet Free/Busy | |
| 1685 8205 Appointment shows as | |
| 1686 8208 Appointment Location | |
| 51 | 1687 820d Appointment start |
| 1688 820e Appointment end | |
| 24 | 1689 8214 Label for appointment |
| 32 | 1690 8215 All day appointment flag |
| 51 | 1691 8231 Recurrence type |
| 1692 8232 Recurrence description | |
| 24 | 1693 8234 TimeZone of times |
| 51 | 1694 8235 Recurrence Start Time |
| 1695 8236 Recurrence End Time | |
| 1696 8501 Reminder minutes before appointment start | |
| 1697 8503 Reminder alarm | |
| 1698 8516 Common Time Start | |
| 1699 8517 Common Time End | |
| 1700 851f Play reminder sound filename | |
| 24 | 1701 8530 Followup String |
| 1702 8534 Mileage | |
| 1703 8535 Billing Information | |
| 1704 8554 Outlook Version | |
| 1705 8560 Appointment Reminder Time | |
| 1706 8700 Journal Entry Type | |
| 1707 8706 Start Timestamp | |
| 1708 8708 End Timestamp | |
| 51 | 1709 8712 Journal Entry Type - duplicate? |
| 24 | 1710 ]]></literallayout> |
| 1711 </refsect1> | |
| 1712 | |
| 28 | 1713 <refsect1 id='pst.file.desc2.5'> |
| 1714 <title>Associated Descriptor Item 0x7cec</title> | |
| 1715 <para> | |
| 35 | 1716 This style of descriptor block is similar to the 0xbcec format. |
| 28 | 1717 </para> |
| 1718 <literallayout class="monospaced"><![CDATA[ | |
| 1719 0000 7a 01 ec 7c 40 00 00 00 00 00 00 00 b5 04 02 00 | |
| 1720 0010 60 00 00 00 7c 18 60 00 60 00 62 00 65 00 20 00 | |
| 1721 0020 00 00 80 00 00 00 00 00 00 00 03 00 20 0e 0c 00 | |
| 1722 0030 04 03 1e 00 01 30 2c 00 04 0b 1e 00 03 37 28 00 | |
| 1723 0040 04 0a 1e 00 04 37 14 00 04 05 03 00 05 37 10 00 | |
| 1724 0050 04 04 1e 00 07 37 24 00 04 09 1e 00 08 37 20 00 | |
| 1725 0060 04 08 02 01 0a 37 18 00 04 06 03 00 0b 37 08 00 | |
| 1726 0070 04 02 1e 00 0d 37 1c 00 04 07 1e 00 0e 37 40 00 | |
| 1727 0080 04 10 02 01 0f 37 30 00 04 0c 1e 00 11 37 34 00 | |
| 1728 0090 04 0d 1e 00 12 37 3c 00 04 0f 1e 00 13 37 38 00 | |
| 1729 00A0 04 0e 03 00 f2 67 00 00 04 00 03 00 f3 67 04 00 | |
| 1730 00B0 04 01 03 00 09 69 44 00 04 11 03 00 fa 7f 5c 00 | |
| 1731 00C0 04 15 40 00 fb 7f 4c 00 08 13 40 00 fc 7f 54 00 | |
| 1732 00D0 08 14 03 00 fd 7f 48 00 04 12 0b 00 fe 7f 60 00 | |
| 1733 00E0 01 16 0b 00 ff 7f 61 00 01 17 45 82 00 00 00 00 | |
| 1734 00F0 45 82 00 00 78 3c 00 00 ff ff ff ff 49 1e 00 00 | |
| 1735 0100 06 00 00 00 00 00 00 00 a0 00 00 00 00 00 00 00 | |
| 1736 0110 00 00 00 00 00 00 00 00 00 00 00 00 c0 00 00 00 | |
| 1737 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1738 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 40 dd a3 | |
| 1739 0140 57 45 b3 0c 00 40 dd a3 57 45 b3 0c 02 00 00 00 | |
| 1740 0150 00 00 fa 10 3e 2a 86 48 86 f7 14 03 0a 03 02 01 | |
| 1741 0160 4a 2e 20 44 61 76 69 64 20 4b 61 72 61 6d 27 73 | |
| 1742 0170 20 42 69 72 74 68 64 61 79 00 06 00 00 00 0c 00 | |
| 1743 0180 14 00 ea 00 f0 00 55 01 60 01 79 01 | |
| 1744 | |
| 1745 0000 indexOffset [2 bytes] 0x017a in this case | |
| 1746 0002 signature [2 bytes] 0x7cec constant | |
| 35 | 1747 0004 7coffset [4 bytes] 0x0040 index reference |
| 28 | 1748 ]]></literallayout> |
| 1749 <para> | |
| 1750 Note the signature of 0x7cec. There are other descriptor block | |
| 1751 formats with other signatures. | |
| 1752 Note the indexOffset of 0x017a - starting at that position in the | |
| 1753 descriptor block, we have an array of two byte integers. The first | |
| 1754 integer (0x0006) is a (count-1) of the number of overlapping pairs | |
| 1755 following the count. The first pair is (0, 0xc), the next pair is (0xc, 0x14) | |
| 1756 and the last (7th) pair is (0x160, 0x179). These pairs are (start,end+1) | |
| 1757 offsets of items in this block. So we have count+2 integers following | |
| 1758 the count value. | |
| 1759 </para> | |
| 1760 <para> | |
| 35 | 1761 Note the 7coffset of 0x0040, which is an index reference. In this case, |
| 1762 it is an internal reference pointer, which needs to be right shifted by 4 bits | |
| 28 | 1763 to become 0x0004, which is then a byte offset to be added to the above |
| 1764 indexOffset plus two (to skip the count), so it points to the (0x14, 0xea) | |
| 1765 pair. We have the offset and size of the "7c" block located at offset 0x14 | |
| 1766 with a size of 214 bytes in this case. The "7c" block starts with | |
| 1767 a header with the following format: | |
| 1768 </para> | |
| 1769 <literallayout class="monospaced"><![CDATA[ | |
| 1770 0000 signature [1 bytes] 0x7c constant | |
| 1771 0001 itemCount [1 bytes] 0x18 in this case | |
| 1772 0002 unknown [2 bytes] 0x0060 in this case | |
| 1773 0004 unknown [2 bytes] 0x0060 in this case | |
| 1774 0006 unknown [2 bytes] 0x0062 in this case | |
| 1775 0008 recordSize [2 bytes] 0x0065 in this case | |
| 35 | 1776 000a b5Offset [4 bytes] 0x0020 index reference |
| 1777 000e index2Offset [4 bytes] 0x0080 index reference | |
| 28 | 1778 0012 unknown [2 bytes] 0x0000 in this case |
| 1779 0014 unknown [2 bytes] 0x0000 in this case | |
| 1780 ]]></literallayout> | |
| 1781 <para> | |
| 35 | 1782 Note the b5Offset of 0x0020, which is an index reference. In this case, |
| 1783 it is an internal reference pointer, which needs to be right shifted by 4 bits | |
| 28 | 1784 to become 0x0002, which is then a byte offset to be added to the above |
| 1785 indexOffset plus two (to skip the count), so it points to the (0xc, | |
| 1786 0x14) pair. Finally, we have the offset and size of the "b5" block | |
| 1787 located at offset 0xc with a size of 8 bytes in this descriptor block. | |
| 1788 The "b5" block has the following format: | |
| 1789 </para> | |
| 1790 <literallayout class="monospaced"><![CDATA[ | |
| 1791 0000 signature [2 bytes] 0x04b5 constant | |
| 1792 0002 unknown [2 bytes] 0x0002 in this case | |
| 35 | 1793 0004 descoffset [4 bytes] 0x0060 index reference |
| 28 | 1794 ]]></literallayout> |
| 1795 <para> | |
| 35 | 1796 Note the descoffset of 0x0060, which again is an index reference. In this |
| 1797 case, it is an internal pointer reference, which needs to be right shifted by 4 | |
| 28 | 1798 bits to become 0x0006, which is then a byte offset to be added to the |
| 1799 above indexOffset plus two (to skip the count), so it points to the | |
| 1800 (0xea, 0xf0) pair. That gives us (0xf0 - 0xea)/6 = 1, so we have a | |
| 1801 recordCount of one. The actual data between 0xea and 0xf0 is unknown | |
| 1802 and unused here. | |
| 1803 </para> | |
| 1804 <para> | |
| 35 | 1805 Note the index2Offset above of 0x0080, which again is an index reference. In this |
| 1806 case, it is an internal pointer reference, which needs to be right shifted | |
| 28 | 1807 by 4 bits to become 0x0008, which is then a byte offset to be added to |
| 1808 the above indexOffset plus two (to skip the count), so it points to the | |
| 1809 (0xf0, 0x155) pair. This is an array of tables of four byte integers. | |
| 1810 We will call these the IND2 tables. The size of each of these tables is | |
| 1811 specified by the recordSize field of the "7c" header. The number of | |
| 1812 these tables is the above recordCount value derived from the "b5" block. | |
| 1813 </para> | |
| 1814 <para> | |
| 1815 Now the remaining data in the "7c" block after the header starts at | |
| 1816 offset 0x2a. There should be itemCount 8 byte items here, with the | |
| 1817 following format: | |
| 1818 </para> | |
| 1819 <literallayout class="monospaced"><![CDATA[ | |
| 1820 0000 referenceType [2 bytes] | |
| 1821 0002 itemType [2 bytes] | |
| 1822 0004 ind2Offset [2 bytes] | |
| 35 | 1823 0006 size [1 byte] |
| 1824 0007 unknown [1 byte] | |
| 28 | 1825 ]]></literallayout> |
| 1826 <para> | |
| 35 | 1827 The ind2Offset is a byte offset into the current IND2 table of some value. |
| 1828 If that is a four byte integer value, then once we fetch that, we have | |
| 1829 the same triple (item type, reference type, value) as we find in the | |
| 1830 0xbcec style descriptor blocks. If not, then this value is used directly. | |
| 1831 These 8 byte descriptors are processed recordCount times, each | |
| 28 | 1832 time using the next IND2 table. The item and reference types are as |
| 1833 described above for the 0xbcec format descriptor block. | |
| 1834 </para> | |
| 1835 </refsect1> | |
| 1836 | |
| 48 | 1837 <refsect1 id='pst.file.desc3.32.5'> |
| 1838 <title>32 bit Associated Descriptor Item 0x0101</title> | |
| 35 | 1839 <para> |
| 49 | 1840 This descriptor block contains a list of ID1 values. It is used when |
| 1841 an ID1 (that would normally point to a type 0x7cec or 0xbcec | |
| 1842 descriptor block) contains more data than can fit in any single | |
| 1843 descriptor of those types. In this case, it points to a type 0x0101 | |
| 1844 block, which contains a list of ID1 values that themselves point to | |
| 1845 the actual descriptor blocks. The total length value in the 0x0101 | |
| 1846 header is the sum of the lengths of the blocks pointed to by the list | |
| 1847 of ID1 values. The result is an array of subblocks, that may contain | |
| 1848 index references where the high order 16 bits specify which descriptor | |
| 1849 subblock to use. Only the first descriptor subblock contains the | |
| 1850 signature (0xbcec or 0x7cec). | |
| 35 | 1851 </para> |
| 1852 <literallayout class="monospaced"><![CDATA[ | |
| 1853 0000 01 01 02 00 26 28 00 00 18 77 0c 00 b8 04 00 00 | |
| 1854 | |
| 1855 0000 signature [2 bytes] 0x0101 constant | |
| 1856 0002 count [2 bytes] 0x0002 in this case | |
| 49 | 1857 0004 total length [4 bytes] 0x002826 in this case |
| 35 | 1858 repeating |
| 49 | 1859 0008 id1 [4 bytes] 0x0c7718 in this case |
| 1860 000c id1 [4 bytes] 0x0004b8 in this case | |
| 35 | 1861 ]]></literallayout> |
| 1862 </refsect1> | |
| 1863 | |
| 48 | 1864 <refsect1 id='pst.file.desc3.64.5'> |
| 1865 <title>64 bit Associated Descriptor Item 0x0101</title> | |
| 1866 <para> | |
| 1867 This descriptor block contains a list of ID1 values. | |
| 1868 </para> | |
| 1869 <literallayout class="monospaced"><![CDATA[ | |
| 1870 0000 01 01 02 00 ea 29 00 00 10 83 00 00 00 00 00 00 | |
| 1871 0010 1c 83 00 00 00 00 00 00 | |
| 1872 | |
| 1873 0000 signature [2 bytes] 0x0101 constant | |
| 1874 0002 count [2 bytes] 0x0002 in this case | |
| 49 | 1875 0004 total length [4 bytes] 0x0029ea in this case |
| 48 | 1876 repeating |
| 49 | 1877 0008 id1 [8 bytes] 0x008310 in this case |
| 1878 0010 id1 [8 bytes] 0x00831c in this case | |
| 48 | 1879 ]]></literallayout> |
| 1880 </refsect1> | |
| 1881 | |
| 24 | 1882 </refentry> |
| 16 | 1883 </reference> |