Mercurial > libpst
annotate xml/libpst.in @ 55:0cdbd066f65a stable-0-6-6
add missing news items, add reference to mercurial repository in the documentation
author | Carl Byington <carl@five-ten-sg.com> |
---|---|
date | Thu, 31 Jan 2008 22:15:29 -0800 |
parents | e109391424b5 |
children | de3753c3160a |
rev | line source |
---|---|
16 | 1 <reference> |
2 <title>@PACKAGE@ Utilities - Version @VERSION@</title> | |
3 <partintro> | |
4 <title>Packages</title> | |
31 | 5 |
6 <para>This is a fork of the libpst project at SourceForge. Another fork | |
7 is located at <ulink | |
8 url="http://alioth.debian.org/projects/libpst/">http://alioth.debian.org/projects/libpst/</ulink> | |
9 </para> | |
10 | |
11 <para>The various source and binary packages are available at <ulink | |
12 url="http://www.five-ten-sg.com/@PACKAGE@/packages/">http://www.five-ten-sg.com/@PACKAGE@/packages/</ulink> | |
13 The most recent documentation is available at <ulink | |
14 url="http://www.five-ten-sg.com/@PACKAGE@/">http://www.five-ten-sg.com/@PACKAGE@/</ulink> | |
15 </para> | |
16 | |
55
0cdbd066f65a
add missing news items, add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents:
54
diff
changeset
|
17 <para>A Mercurial source code repository for this project is available at <ulink |
0cdbd066f65a
add missing news items, add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents:
54
diff
changeset
|
18 url="http://hg.five-ten-sg.com/@PACKAGE@/">http://hg.five-ten-sg.com/@PACKAGE@/</ulink>. |
54
e109391424b5
some misc. cleanup and convert to mercurial source control
carl@ns.five-ten-sg.com
parents:
52
diff
changeset
|
19 </para> |
e109391424b5
some misc. cleanup and convert to mercurial source control
carl@ns.five-ten-sg.com
parents:
52
diff
changeset
|
20 |
51 | 21 <para>This version can now convert both 32 bit Outlook files (pre 2003), and the |
22 64 bit Outlook 2003 pst files. | |
23 </para> | |
24 | |
24 | 25 </partintro> |
16 | 26 |
27 | |
28 <refentry id="readpst.1"> | |
29 <refentryinfo> | |
52 | 30 <date>2008-01-27</date> |
16 | 31 </refentryinfo> |
32 | |
33 <refmeta> | |
34 <refentrytitle>readpst</refentrytitle> | |
35 <manvolnum>1</manvolnum> | |
36 <refmiscinfo>readpst @VERSION@</refmiscinfo> | |
37 </refmeta> | |
38 | |
20 | 39 <refnamediv id='readpst.name.1'> |
16 | 40 <refname>readpst</refname> |
51 | 41 <refpurpose>convert PST (MS Outlook Personal Folders) files to mbox and other formats</refpurpose> |
16 | 42 </refnamediv> |
43 | |
20 | 44 <refsynopsisdiv id='readpst.synopsis.1'> |
16 | 45 <title>Synopsis</title> |
46 <cmdsynopsis> | |
47 <command>readpst</command> | |
31 | 48 <arg><option>-b</option></arg> |
43 | 49 <arg><option>-C</option></arg> |
16 | 50 <arg><option>-c <replaceable class="parameter">format</replaceable></option></arg> |
51 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> | |
52 <arg><option>-h</option></arg> | |
53 <arg><option>-k</option></arg> | |
54 <arg><option>-o <replaceable class="parameter">output-directory</replaceable></option></arg> | |
55 <arg><option>-q</option></arg> | |
56 <arg><option>-r</option></arg> | |
57 <arg><option>-S</option></arg> | |
25 | 58 <arg><option>-M</option></arg> |
16 | 59 <arg><option>-V</option></arg> |
60 <arg><option>-w</option></arg> | |
43 | 61 <arg choice='plain'>pstfile</arg> |
16 | 62 </cmdsynopsis> |
63 </refsynopsisdiv> | |
64 | |
20 | 65 <refsect1 id='readpst.description.1'> |
66 <title>Description</title> | |
28 | 67 <para><command>readpst</command> is a program that can read an Outlook |
68 PST (Personal Folders) file and convert it into an mbox file, a format | |
69 suitable for KMail, a recursive mbox structure, or separate emails. | |
20 | 70 </para> |
71 </refsect1> | |
72 | |
73 <refsect1 id='readpst.options.1'> | |
16 | 74 <title>Options</title> |
75 <variablelist> | |
76 <varlistentry> | |
31 | 77 <term>-b</term> |
78 <listitem><para> | |
79 Do not save the attachments for the RTF format of the email body. | |
80 </para></listitem> | |
81 </varlistentry> | |
82 <varlistentry> | |
43 | 83 <term>-C</term> |
84 <listitem><para> | |
85 Decrypt the entire pst file and dump it to stdout. | |
86 </para></listitem> | |
87 </varlistentry> | |
88 <varlistentry> | |
16 | 89 <term>-c <replaceable class="parameter">format</replaceable></term> |
90 <listitem><para> | |
91 Set the Contact output mode. Use -cv for vcard format or -cl for an email list. | |
92 </para></listitem> | |
93 </varlistentry> | |
94 <varlistentry> | |
95 <term>-d <replaceable class="parameter">debug-file</replaceable></term> | |
96 <listitem><para> | |
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
97 Specify name of debug log file. The |
28 | 98 log file is not an ascii file, it is a binary file readable |
99 by <command>readpstlog</command>. | |
16 | 100 </para></listitem> |
101 </varlistentry> | |
102 <varlistentry> | |
103 <term>-h</term> | |
104 <listitem><para> | |
31 | 105 Show summary of options and exit. |
16 | 106 </para></listitem> |
107 </varlistentry> | |
108 <varlistentry> | |
109 <term>-k</term> | |
110 <listitem><para> | |
111 Changes the output format to KMail. | |
112 </para></listitem> | |
113 </varlistentry> | |
114 <varlistentry> | |
20 | 115 <term>-o <replaceable class="parameter">output-directory</replaceable></term> |
16 | 116 <listitem><para> |
117 Specifies the output directory. The directory must already exist, and | |
118 is entered after the PST file is opened, but before any processing of | |
119 files commences. | |
120 </para></listitem> | |
121 </varlistentry> | |
122 <varlistentry> | |
123 <term>-q</term> | |
124 <listitem><para> | |
125 Changes to silent mode. No feedback is printed to the screen, except | |
126 for error messages. | |
127 </para></listitem> | |
128 </varlistentry> | |
129 <varlistentry> | |
130 <term>-r</term> | |
131 <listitem><para> | |
132 Changes the output format to Recursive. This will create folders as | |
21 | 133 named in the PST file, and will put all emails in a file called "mbox" |
16 | 134 inside each folder. These files are then compatible with all |
135 mbox-compatible email clients. | |
136 </para></listitem> | |
137 </varlistentry> | |
138 <varlistentry> | |
139 <term>-S</term> | |
140 <listitem><para> | |
25 | 141 Output messages into separate files. This will create folders as named |
142 in the PST file, and will put each email in its own file. These files | |
28 | 143 will be numbered from 1 increasing in intervals of 1 (ie 1, 2, 3, ...). |
144 Any attachments are saved alongside each email as XXXXXXXXX-attach1, | |
145 XXXXXXXXX-attach2 and so on, or with the name of the attachment if one | |
146 is present. | |
16 | 147 </para></listitem> |
148 </varlistentry> | |
149 <varlistentry> | |
25 | 150 <term>-M</term> |
151 <listitem><para> | |
152 Output messages in MH format as separate files. This will create | |
28 | 153 folders as named in the PST file, and will put each email together with |
154 any attachments into its own file. These files will be numbered from 1 | |
155 to n with no leading zeros. | |
25 | 156 </para></listitem> |
157 </varlistentry> | |
158 <varlistentry> | |
16 | 159 <term>-V</term> |
160 <listitem><para> | |
31 | 161 Show program version and exit. |
16 | 162 </para></listitem> |
163 </varlistentry> | |
164 <varlistentry> | |
165 <term>-w</term> | |
166 <listitem><para> | |
20 | 167 Overwrite any previous output files. Beware: When used with the -S |
16 | 168 switch, this will remove all files from the target folder before |
169 writing. This is to keep the count of emails and attachments correct. | |
170 </para></listitem> | |
171 </varlistentry> | |
172 </variablelist> | |
173 </refsect1> | |
174 | |
20 | 175 <refsect1 id='readpst.also.1'> |
16 | 176 <title>See Also</title> |
177 <para> | |
25 | 178 <citerefentry><refentrytitle>readpstlog</refentrytitle> <manvolnum>1</manvolnum> </citerefentry> |
16 | 179 </para> |
180 </refsect1> | |
181 | |
20 | 182 <refsect1 id='readpst.author.1'> |
16 | 183 <title>Author</title> |
184 <para> | |
185 This manual page was originally written by Dave Smith | |
186 <dave.s@earthcorp.com>, and updated by Joe Nahmias <joe@nahmias.net> | |
187 for the Debian GNU/Linux system (but may be used by others). It was | |
20 | 188 subsequently updated by Brad Hards <bradh@frogmouth.net>, and converted to |
16 | 189 xml format by Carl Byington <carl@five-ten-sg.com>. |
190 </para> | |
191 </refsect1> | |
192 | |
20 | 193 <refsect1 id='readpst.copyright.1'> |
16 | 194 <title>Copyright</title> |
195 <para> | |
196 Copyright (C) 2002 by David Smith <dave.s@earthcorp.com>. | |
28 | 197 XML version Copyright (C) 2006 by 510 Software Group <carl@five-ten-sg.com>. |
16 | 198 </para> |
199 <para> | |
200 This program is free software; you can redistribute it and/or modify it | |
201 under the terms of the GNU General Public License as published by the | |
202 Free Software Foundation; either version 2, or (at your option) any | |
203 later version. | |
204 </para> | |
205 <para> | |
206 You should have received a copy of the GNU General Public License along | |
207 with this program; see the file COPYING. If not, please write to the | |
208 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
209 </para> | |
210 </refsect1> | |
211 | |
20 | 212 <refsect1 id='readpst.version.1'> |
52 | 213 <title>Version</title> |
16 | 214 <para> |
52 | 215 @VERSION@ |
16 | 216 </para> |
217 </refsect1> | |
218 </refentry> | |
219 | |
220 | |
43 | 221 <refentry id="lspst.1"> |
222 <refentryinfo> | |
52 | 223 <date>2008-01-27</date> |
43 | 224 </refentryinfo> |
225 | |
226 <refmeta> | |
227 <refentrytitle>lspst</refentrytitle> | |
228 <manvolnum>1</manvolnum> | |
229 <refmiscinfo>lspst @VERSION@</refmiscinfo> | |
230 </refmeta> | |
231 | |
232 <refnamediv id='lspst.name.1'> | |
233 <refname>lspst</refname> | |
234 <refpurpose>list PST (MS Outlook Personal Folders) file data</refpurpose> | |
235 </refnamediv> | |
236 | |
237 <refsynopsisdiv id='lspst.synopsis.1'> | |
238 <title>Synopsis</title> | |
239 <cmdsynopsis> | |
240 <command>lspst</command> | |
50 | 241 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> |
242 <arg><option>-h</option></arg> | |
243 <arg><option>-V</option></arg> | |
43 | 244 <arg choice='plain'>pstfile</arg> |
245 </cmdsynopsis> | |
246 </refsynopsisdiv> | |
247 | |
50 | 248 <refsect1 id='lspst.options.1'> |
249 <title>Options</title> | |
250 <variablelist> | |
251 <varlistentry> | |
252 <term>-d <replaceable class="parameter">debug-file</replaceable></term> | |
253 <listitem><para> | |
254 Specify name of debug log file. The | |
255 log file is not an ascii file, it is a binary file readable | |
256 by <command>readpstlog</command>. | |
257 </para></listitem> | |
258 </varlistentry> | |
259 <varlistentry> | |
260 <term>-h</term> | |
261 <listitem><para> | |
262 Show summary of options and exit. | |
263 </para></listitem> | |
264 </varlistentry> | |
265 <varlistentry> | |
266 <term>-V</term> | |
267 <listitem><para> | |
268 Show program version and exit. | |
269 </para></listitem> | |
270 </varlistentry> | |
271 </variablelist> | |
272 </refsect1> | |
273 | |
43 | 274 <refsect1 id='lspst.description.1'> |
275 <title>Description</title> | |
276 <para><command>lspst</command> is a program that can read an Outlook | |
277 PST (Personal Folders) file and produce a simple listing of the | |
278 data (contacts, email subjects, etc). | |
279 </para> | |
280 </refsect1> | |
281 | |
282 <refsect1 id='lspst.also.1'> | |
283 <title>See Also</title> | |
284 <para> | |
285 <citerefentry><refentrytitle>readpstlog</refentrytitle> <manvolnum>1</manvolnum> </citerefentry> | |
286 </para> | |
287 </refsect1> | |
288 | |
289 <refsect1 id='lspst.author.1'> | |
290 <title>Author</title> | |
291 <para> | |
292 lspst was written by Joe Nahmias <joe@nahmias.net> based on readpst. | |
293 This man page was written by 510 Software Group <carl@five-ten-sg.com>. | |
294 </para> | |
295 </refsect1> | |
296 | |
297 <refsect1 id='lspst.copyright.1'> | |
298 <title>Copyright</title> | |
299 <para> | |
300 Copyright (C) 2004 by Joe Nahmias <joe@nahmias.net>. | |
301 </para> | |
302 <para> | |
303 This program is free software; you can redistribute it and/or modify it | |
304 under the terms of the GNU General Public License as published by the | |
305 Free Software Foundation; either version 2, or (at your option) any | |
306 later version. | |
307 </para> | |
308 <para> | |
309 You should have received a copy of the GNU General Public License along | |
310 with this program; see the file COPYING. If not, please write to the | |
311 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
312 </para> | |
313 </refsect1> | |
314 | |
315 <refsect1 id='lspst.version.1'> | |
52 | 316 <title>Version</title> |
43 | 317 <para> |
52 | 318 @VERSION@ |
43 | 319 </para> |
320 </refsect1> | |
321 </refentry> | |
322 | |
323 | |
16 | 324 <refentry id="readpstlog.1"> |
325 <refentryinfo> | |
52 | 326 <date>2008-01-27</date> |
16 | 327 </refentryinfo> |
328 | |
329 <refmeta> | |
330 <refentrytitle>readpstlog</refentrytitle> | |
331 <manvolnum>1</manvolnum> | |
332 <refmiscinfo>readpstlog @VERSION@</refmiscinfo> | |
333 </refmeta> | |
334 | |
20 | 335 <refnamediv id='readpstlog.name.1'> |
16 | 336 <refname>readpstlog</refname> |
24 | 337 <refpurpose>convert a <command>readpst</command> logfile to text format</refpurpose> |
16 | 338 </refnamediv> |
339 | |
20 | 340 <refsynopsisdiv id='readpstlog.synopsis.1'> |
16 | 341 <title>Synopsis</title> |
342 <cmdsynopsis> | |
24 | 343 <command>readpstlog</command> |
16 | 344 <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg> |
345 <arg><option>-t <replaceable class="parameter">include-types</replaceable></option></arg> | |
346 <arg><option>-x <replaceable class="parameter">exclude-types</replaceable></option></arg> | |
24 | 347 <arg choice='plain'>logfile</arg> |
16 | 348 </cmdsynopsis> |
349 </refsynopsisdiv> | |
350 | |
20 | 351 <refsect1 id='readpstlog.description.1'> |
352 <title>Description</title> | |
21 | 353 <para><command>readpstlog</command> |
24 | 354 is a program that converts the binary logfile generated |
355 by <command>readpst</command> to a more desirable text format. | |
20 | 356 </para> |
357 </refsect1> | |
358 | |
359 <refsect1 id='readpstlog.options.1'> | |
16 | 360 <title>Options</title> |
361 <variablelist> | |
362 <varlistentry> | |
363 <term>-f <replaceable class="parameter">format</replaceable></term> | |
364 <listitem><para> | |
365 Sets the format of the text log output. Currently, the only valid output | |
36 | 366 formats are T, for single line text, D for the default default multi line |
367 format, and I for an indented style with single line text. | |
16 | 368 </para></listitem> |
369 </varlistentry> | |
370 <varlistentry> | |
371 <term>-t <replaceable class="parameter">include-types</replaceable></term> | |
372 <listitem><para> | |
373 Print only the specified types of log messages. | |
374 Types are specified in a comma-delimited list (e.g. 3,10,5,6). | |
375 </para></listitem> | |
376 </varlistentry> | |
377 <varlistentry> | |
378 <term>-x <replaceable class="parameter">exclude-types</replaceable></term> | |
379 <listitem><para> | |
380 Exclude the specified types of log messages. | |
381 Types are specified in a comma-delimited list (e.g. 3,10,5,6). | |
382 </para></listitem> | |
383 </varlistentry> | |
384 </variablelist> | |
385 </refsect1> | |
386 | |
20 | 387 <refsect1 id='readpstlog.message.types.1'> |
16 | 388 <title>Message Types</title> |
24 | 389 <para><command>readpstlog</command> understands the following types of log |
390 messages: | |
16 | 391 </para> |
392 <variablelist> | |
20 | 393 <varlistentry> |
394 <term>1</term> | |
395 <listitem><para> | |
396 File accesses | |
397 </para></listitem> | |
398 </varlistentry> | |
399 <varlistentry> | |
400 <term>2</term> | |
401 <listitem><para> | |
402 Index accesses | |
403 </para></listitem> | |
404 </varlistentry> | |
405 <varlistentry> | |
406 <term>3</term> | |
407 <listitem><para> | |
408 New email found | |
409 </para></listitem> | |
410 </varlistentry> | |
411 <varlistentry> | |
412 <term>4</term> | |
413 <listitem><para> | |
414 Warnings | |
415 </para></listitem> | |
416 </varlistentry> | |
417 <varlistentry> | |
418 <term>5</term> | |
419 <listitem><para> | |
420 Read accesses | |
421 </para></listitem> | |
422 </varlistentry> | |
423 <varlistentry> | |
424 <term>6</term> | |
425 <listitem><para> | |
426 Informational messages | |
427 </para></listitem> | |
428 </varlistentry> | |
429 <varlistentry> | |
430 <term>7</term> | |
431 <listitem><para> | |
432 Main function calls | |
433 </para></listitem> | |
434 </varlistentry> | |
435 <varlistentry> | |
436 <term>8</term> | |
437 <listitem><para> | |
438 Decrypting calls | |
439 </para></listitem> | |
440 </varlistentry> | |
441 <varlistentry> | |
36 | 442 <term>9</term> |
443 <listitem><para> | |
444 Function entries | |
445 </para></listitem> | |
446 </varlistentry> | |
447 <varlistentry> | |
20 | 448 <term>10</term> |
449 <listitem><para> | |
36 | 450 Function exits |
20 | 451 </para></listitem> |
452 </varlistentry> | |
453 <varlistentry> | |
454 <term>11</term> | |
455 <listitem><para> | |
456 HexDump calls | |
457 </para></listitem> | |
458 </varlistentry> | |
16 | 459 </variablelist> |
460 </refsect1> | |
461 | |
20 | 462 <refsect1 id='readpstlog.author.1'> |
16 | 463 <title>Author</title> |
464 <para> | |
465 This manual page was written by Joe Nahmias <joe@nahmias.net> | |
466 for the Debian GNU/Linux system (but may be used by others). It was | |
467 converted to xml format by Carl Byington <carl@five-ten-sg.com>. | |
468 </para> | |
469 </refsect1> | |
470 | |
20 | 471 <refsect1 id='readpstlog.copyright.1'> |
16 | 472 <title>Copyright</title> |
473 <para> | |
474 Copyright (C) 2002 by David Smith <dave.s@earthcorp.com>. | |
475 XML version Copyright (C) 2005 by 510 Software Group <carl@five-ten-sg.com>. | |
476 </para> | |
477 <para> | |
478 This program is free software; you can redistribute it and/or modify it | |
479 under the terms of the GNU General Public License as published by the | |
480 Free Software Foundation; either version 2, or (at your option) any | |
481 later version. | |
482 </para> | |
483 <para> | |
484 You should have received a copy of the GNU General Public License along | |
485 with this program; see the file COPYING. If not, please write to the | |
486 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
487 </para> | |
488 </refsect1> | |
489 | |
20 | 490 <refsect1 id='readpstlog.version.1'> |
52 | 491 <title>Version</title> |
16 | 492 <para> |
52 | 493 @VERSION@ |
16 | 494 </para> |
495 </refsect1> | |
496 </refentry> | |
24 | 497 |
498 | |
499 <refentry id="pst2ldif.1"> | |
500 <refentryinfo> | |
52 | 501 <date>2008-01-27</date> |
24 | 502 </refentryinfo> |
503 | |
504 <refmeta> | |
505 <refentrytitle>pst2ldif</refentrytitle> | |
506 <manvolnum>1</manvolnum> | |
507 <refmiscinfo>pst2ldif @VERSION@</refmiscinfo> | |
508 </refmeta> | |
509 | |
510 <refnamediv id='pst2ldif.name.1'> | |
511 <refname>pst2ldif</refname> | |
512 <refpurpose>extract contacts from a MS Outlook .pst file in .ldif format</refpurpose> | |
513 </refnamediv> | |
514 | |
515 <refsynopsisdiv id='pst2ldif.synopsis.1'> | |
516 <title>Synopsis</title> | |
517 <cmdsynopsis> | |
518 <command>pst2ldif</command> | |
519 <arg><option>-h</option></arg> | |
520 <arg><option>-V</option></arg> | |
521 <arg><option>-b <replaceable class="parameter">ldap-base</replaceable></option></arg> | |
522 <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg> | |
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
523 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> |
24 | 524 <arg choice='plain'>pstfilename</arg> |
525 </cmdsynopsis> | |
526 </refsynopsisdiv> | |
527 | |
528 <refsect1 id='pst2ldif.options.1'> | |
529 <title>Options</title> | |
530 <variablelist> | |
531 <varlistentry> | |
532 <term>-h</term> | |
533 <listitem><para> | |
534 Show summary of options. Subsequent options are then ignored. | |
535 </para></listitem> | |
536 </varlistentry> | |
537 <varlistentry> | |
538 <term>-V <replaceable class="parameter">include-types</replaceable></term> | |
539 <listitem><para> | |
540 Show program version. Subsequent options are then ignored. | |
541 </para></listitem> | |
542 </varlistentry> | |
543 <varlistentry> | |
544 <term>-b <replaceable class="parameter">ldap-base</replaceable></term> | |
545 <listitem><para> | |
546 Sets the ldap base value used in the dn records. You probably want to | |
547 use something like "o=organization, c=US". | |
548 </para></listitem> | |
549 </varlistentry> | |
550 <varlistentry> | |
551 <term>-c <replaceable class="parameter">class</replaceable></term> | |
552 <listitem><para> | |
553 Sets the objectClass values for the contact items. This class needs to be | |
554 defined in the schema used by your LDAP server, and at a minimum it must | |
555 contain the ldap attributes given below. | |
556 </para></listitem> | |
557 </varlistentry> | |
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
558 <varlistentry> |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
559 <term>-d <replaceable class="parameter">debug-file</replaceable></term> |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
560 <listitem><para> |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
561 Specify name of debug log file. The |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
562 log file is not an ascii file, it is a binary file readable |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
563 by <command>readpstlog</command>. |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
564 </para></listitem> |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
565 </varlistentry> |
24 | 566 </variablelist> |
567 </refsect1> | |
568 | |
569 <refsect1 id='pst2ldif.description.1'> | |
570 <title>Description</title> | |
571 <para><command>pst2ldif</command> | |
572 reads the contact information from a MS Outlook .pst file | |
573 and produces a .ldif file that may be used to import those contacts | |
574 into an LDAP database. The following ldap attributes are generated: | |
575 <simplelist> | |
576 <member>cn </member> | |
577 <member>givenName </member> | |
578 <member>sn </member> | |
579 <member>personalTitle </member> | |
580 <member>company </member> | |
581 <member>mail </member> | |
582 <member>postalAddress </member> | |
583 <member>l </member> | |
584 <member>st </member> | |
585 <member>postalCode </member> | |
586 <member>c </member> | |
587 <member>homePhone </member> | |
588 <member>telephoneNumber </member> | |
589 <member>facsimileTelephoneNumber </member> | |
590 <member>mobile </member> | |
591 <member>description </member> | |
592 </simplelist> | |
593 </para> | |
594 </refsect1> | |
595 | |
596 <refsect1 id='pst2ldif.copyright.1'> | |
597 <title>Copyright</title> | |
598 <para> | |
599 Copyright (C) 2006 by 510 Software Group <carl@five-ten-sg.com> | |
600 </para> | |
601 <para> | |
602 This program is free software; you can redistribute it and/or modify it | |
603 under the terms of the GNU General Public License as published by the | |
604 Free Software Foundation; either version 2, or (at your option) any | |
605 later version. | |
606 </para> | |
607 <para> | |
608 You should have received a copy of the GNU General Public License along | |
609 with this program; see the file COPYING. If not, please write to the | |
610 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
611 </para> | |
612 </refsect1> | |
613 | |
614 <refsect1 id='pst2ldif.version.1'> | |
52 | 615 <title>Version</title> |
24 | 616 <para> |
52 | 617 @VERSION@ |
24 | 618 </para> |
619 </refsect1> | |
620 </refentry> | |
621 | |
622 | |
623 <refentry id="pst.5"> | |
624 <refentryinfo> | |
52 | 625 <date>2008-01-27</date> |
24 | 626 </refentryinfo> |
627 | |
628 <refmeta> | |
629 <refentrytitle>outlook.pst</refentrytitle> | |
630 <manvolnum>5</manvolnum> | |
631 </refmeta> | |
632 | |
633 <refnamediv id='pst.name.1'> | |
634 <refname>outlook.pst</refname> | |
635 <refpurpose>format of MS Outlook .pst file</refpurpose> | |
636 </refnamediv> | |
637 | |
638 <refsynopsisdiv id='pst.synopsis.1'> | |
639 <title>Synopsis</title> | |
640 <cmdsynopsis> | |
641 <command>outlook.pst</command> | |
642 </cmdsynopsis> | |
643 </refsynopsisdiv> | |
644 | |
645 <refsect1 id='pst.file.overview.5'> | |
646 <title>Overview</title> | |
647 <para> | |
648 Each item in a .pst file is identified by two id values ID1 and ID2. | |
649 There are two separate b-trees indexed by these ID1 and ID2 values. | |
44 | 650 Starting with Outlook 2003, the file format changed from one with 32 |
651 bit pointers, to one with 64 bit pointers. We describe both formats | |
652 here. | |
24 | 653 </para> |
654 </refsect1> | |
655 | |
44 | 656 <refsect1 id='pst.file.header.32.5'> |
657 <title>32 bit File Header</title> | |
24 | 658 <para> |
44 | 659 The 32 bit file header is located at offset 0 in the .pst file. |
24 | 660 </para> |
661 <literallayout class="monospaced"><![CDATA[ | |
662 0000 21 42 44 4e 49 f8 64 d9 53 4d 0e 00 13 00 01 01 | |
663 0010 00 00 00 00 00 00 00 00 50 d6 03 00 bd 1e 02 00 | |
664 0020 08 4c 00 00 00 04 00 00 00 04 00 00 0f 04 00 00 | |
665 0030 0d 40 00 00 99 0a 01 00 18 04 00 00 0d 40 00 00 | |
666 0040 0d 40 00 00 11 80 00 00 02 04 00 00 0a 04 00 00 | |
667 0050 00 04 00 00 00 04 00 00 0f 04 00 00 0f 04 00 00 | |
668 0060 0f 04 00 00 0d 40 00 00 00 04 00 00 00 04 00 00 | |
669 0070 04 40 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
670 0080 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
671 0090 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
672 00a0 0c 09 00 00 00 00 00 00 00 04 27 00 00 24 23 00 | |
673 00b0 c0 09 0a 00 00 c8 00 00 bc 1e 02 00 00 7e 0c 00 | |
674 00c0 b4 1e 02 00 00 54 00 00 01 00 00 00 23 55 44 d1 | |
675 00d0 5a 4f ce 6b 80 ff ff ff 00 00 00 00 00 00 00 00 | |
676 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
677 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
678 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
679 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
680 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
681 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
682 0140 00 00 00 00 00 00 00 00 00 00 00 00 3f ff ff ff | |
683 0150 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
684 0160 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
685 0170 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
686 0180 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
687 0190 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
688 01a0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
689 01b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
690 01c0 ff ff ff ff ff ff ff ff ff ff ff ff 80 01 00 00 | |
691 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
692 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
693 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
694 | |
695 0000 signature [4 bytes] 0x4e444221 constant | |
28 | 696 000a indexType [1 byte] 0x0e constant |
44 | 697 01cd encryptionType [1 byte] 0x01 in this case |
24 | 698 00a8 total file size [4 bytes] 0x270400 in this case |
28 | 699 00c0 backPointer1 [4 bytes] 0x021eb4 in this case |
700 00c4 offsetIndex1 [4 bytes] 0x005400 in this case | |
701 00b8 backPointer2 [4 bytes] 0x021ebc in this case | |
702 00bc offsetIndex2 [4 bytes] 0x0c7e00 in this case | |
24 | 703 ]]></literallayout> |
704 <para> | |
44 | 705 We only support index types 0x0e and 0x17, and encryption types |
706 0x00 and 0x01. Index type 0x0e is the older 32 bit Outlook format. | |
707 Index type 0x17 is the newer 64 bit Outlook format. Encryption | |
708 type 0x00 is no encryption, and type 0x01 is the only other supported | |
709 encryption type. | |
24 | 710 </para> |
711 <para> | |
28 | 712 offsetIndex1 is the file offset of the root of the |
24 | 713 index1 b-tree, which contains (ID1, offset, size, unknown) tuples |
28 | 714 for each item in the file. backPointer1 is the value that should |
24 | 715 appear in the parent pointer of that root node. |
716 </para> | |
717 <para> | |
28 | 718 offsetIndex2 is the file offset of the root of the |
24 | 719 index2 b-tree, which contains (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) |
28 | 720 tuples for each item in the file. backPointer2 is the value that should |
24 | 721 appear in the parent pointer of that root node. |
722 </para> | |
723 </refsect1> | |
724 | |
44 | 725 <refsect1 id='pst.file.header.64.5'> |
726 <title>64 bit File Header</title> | |
24 | 727 <para> |
44 | 728 The 64 bit file header is located at offset 0 in the .pst file. |
729 </para> | |
730 <literallayout class="monospaced"><![CDATA[ | |
731 0000 21 42 44 4e 03 02 23 b2 53 4d 17 00 13 00 01 01 | |
732 0010 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 | |
733 0020 8b 00 00 00 00 00 00 00 1d 00 00 00 00 04 00 00 | |
734 0030 00 04 00 00 04 04 00 00 00 40 00 00 02 00 01 00 | |
735 0040 00 04 00 00 00 04 00 00 00 04 00 00 00 80 00 00 | |
736 0050 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
737 0060 04 04 00 00 04 04 00 00 04 04 00 00 00 04 00 00 | |
738 0070 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
739 0080 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
740 0090 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
741 00a0 00 04 00 00 00 04 00 00 02 04 00 00 00 00 00 00 | |
742 00b0 00 00 00 00 00 00 00 00 00 24 04 00 00 00 00 00 | |
743 00c0 00 44 00 00 00 00 00 00 00 71 03 00 00 00 00 00 | |
744 00d0 00 22 00 00 00 00 00 00 83 00 00 00 00 00 00 00 | |
745 00e0 00 6a 00 00 00 00 00 00 8a 00 00 00 00 00 00 00 | |
746 00f0 00 60 00 00 00 00 00 00 01 00 00 00 00 00 00 00 | |
747 0100 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
748 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
749 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
750 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
751 0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
752 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
753 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
754 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
755 0180 7f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
756 0190 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
757 01a0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
758 01b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
759 01c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
760 01d0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
761 01e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
762 01f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
763 0200 80 00 00 00 e8 00 00 00 00 00 00 00 c4 68 cb 89 | |
764 | |
765 0000 signature [4 bytes] 0x4e444221 constant | |
766 000a indexType [1 byte] 0x17 constant | |
767 0201 encryptionType [1 byte] 0x00 in this case | |
768 00b8 total file size [8 bytes] 0x042400 in this case | |
769 00e8 backPointer1 [8 bytes] 0x00008a in this case | |
770 00f0 offsetIndex1 [8 bytes] 0x006000 in this case | |
771 00d8 backPointer2 [8 bytes] 0x000083 in this case | |
772 00e0 offsetIndex2 [8 bytes] 0x006a00 in this case | |
773 ]]></literallayout> | |
774 </refsect1> | |
775 | |
776 <refsect1 id='pst.file.node1.32.5'> | |
777 <title>32 bit Index 1 Node</title> | |
778 <para> | |
52 | 779 The 32 bit index1 b-tree nodes are 512 byte blocks with the |
44 | 780 following format. |
24 | 781 </para> |
782 <literallayout class="monospaced"><![CDATA[ | |
783 0000 04 00 00 00 8a 1e 02 00 00 1c 0b 00 | |
784 000c 58 27 03 00 b3 1e 02 00 00 52 00 00 | |
785 0018 00 00 00 00 00 00 00 00 00 00 00 00 | |
786 0024 00 00 00 00 00 00 00 00 00 00 00 00 | |
787 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
788 003c 00 00 00 00 00 00 00 00 00 00 00 00 | |
789 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
790 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
791 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
792 006c 00 00 00 00 00 00 00 00 00 00 00 00 | |
793 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
794 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
795 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
796 009c 00 00 00 00 00 00 00 00 00 00 00 00 | |
797 00a8 00 00 00 00 00 00 00 00 00 00 00 00 | |
798 00b4 00 00 00 00 00 00 00 00 00 00 00 00 | |
799 00c0 00 00 00 00 00 00 00 00 00 00 00 00 | |
800 00cc 00 00 00 00 00 00 00 00 00 00 00 00 | |
801 00d8 00 00 00 00 00 00 00 00 00 00 00 00 | |
802 00e4 00 00 00 00 00 00 00 00 00 00 00 00 | |
803 00f0 00 00 00 00 00 00 00 00 00 00 00 00 | |
804 00fc 00 00 00 00 00 00 00 00 00 00 00 00 | |
805 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
806 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
807 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
808 012c 00 00 00 00 00 00 00 00 00 00 00 00 | |
809 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
810 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
811 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
812 015c 00 00 00 00 00 00 00 00 00 00 00 00 | |
813 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
814 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
815 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
816 018c 00 00 00 00 00 00 00 00 00 00 00 00 | |
817 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
818 01a4 00 00 00 00 00 00 00 00 00 00 00 00 | |
819 01b0 00 00 00 00 00 00 00 00 00 00 00 00 | |
820 01bc 00 00 00 00 00 00 00 00 00 00 00 00 | |
821 01c8 00 00 00 00 00 00 00 00 00 00 00 00 | |
822 01d4 00 00 00 00 00 00 00 00 00 00 00 00 | |
823 01e0 00 00 00 00 00 00 00 00 00 00 00 00 | |
824 01ec 00 00 00 00 02 29 0c 02 80 80 b6 4a | |
52 | 825 01f8 b4 1e 02 00 27 9c cc 56 |
24 | 826 |
28 | 827 01f0 itemCount [1 byte] 0x02 in this case |
828 01f1 maxItemCount [1 byte] 0x29 constant | |
829 01f3 nodeLevel [1 byte] 0x02 in this case | |
830 01f8 backPointer [4 bytes] 0x021eb4 in this case | |
24 | 831 ]]></literallayout> |
832 <para> | |
28 | 833 The itemCount specifies the number of 12 byte records that |
834 are active. The nodeLevel is non-zero for this style of nodes. | |
835 The leaf nodes have a different format. The backPointer must | |
836 match the backPointer from the triple that pointed to this node. | |
24 | 837 </para> |
838 <para> | |
35 | 839 Each item in this node is a triple of (ID1, backPointer, offset) |
24 | 840 where the offset points to the next deeper node in the tree, the |
28 | 841 backPointer value must match the backPointer in that deeper node, |
35 | 842 and ID1 is the lowest ID1 value in the subtree. |
24 | 843 </para> |
844 </refsect1> | |
845 | |
44 | 846 <refsect1 id='pst.file.node1.64.5'> |
847 <title>64 bit Index 1 Node</title> | |
24 | 848 <para> |
44 | 849 The 64 bit index1 b-tree nodes are 512 byte blocks with the |
850 following format. | |
851 </para> | |
852 <literallayout class="monospaced"><![CDATA[ | |
853 0000 04 00 00 00 00 00 00 00 88 00 00 00 | |
854 000C 00 00 00 00 00 48 00 00 00 00 00 00 | |
855 0018 74 00 00 00 00 00 00 00 86 00 00 00 | |
856 0024 00 00 00 00 00 54 00 00 00 00 00 00 | |
857 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
858 003C 00 00 00 00 00 00 00 00 00 00 00 00 | |
859 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
860 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
861 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
862 006C 00 00 00 00 00 00 00 00 00 00 00 00 | |
863 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
864 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
865 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
866 009C 00 00 00 00 00 00 00 00 00 00 00 00 | |
867 00A8 00 00 00 00 00 00 00 00 00 00 00 00 | |
868 00B4 00 00 00 00 00 00 00 00 00 00 00 00 | |
869 00C0 00 00 00 00 00 00 00 00 00 00 00 00 | |
870 00CC 00 00 00 00 00 00 00 00 00 00 00 00 | |
871 00D8 00 00 00 00 00 00 00 00 00 00 00 00 | |
872 00E4 00 00 00 00 00 00 00 00 00 00 00 00 | |
873 00F0 00 00 00 00 00 00 00 00 00 00 00 00 | |
874 00FC 00 00 00 00 00 00 00 00 00 00 00 00 | |
875 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
876 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
877 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
878 012C 00 00 00 00 00 00 00 00 00 00 00 00 | |
879 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
880 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
881 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
882 015C 00 00 00 00 00 00 00 00 00 00 00 00 | |
883 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
884 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
885 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
886 018C 00 00 00 00 00 00 00 00 00 00 00 00 | |
887 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
888 01A4 00 00 00 00 00 00 00 00 00 00 00 00 | |
889 01B0 00 00 00 00 00 00 00 00 00 00 00 00 | |
890 01BC 00 00 00 00 00 00 00 00 00 00 00 00 | |
891 01C8 00 00 00 00 00 00 00 00 00 00 00 00 | |
892 01D4 00 00 00 00 00 00 00 00 00 00 00 00 | |
893 01E0 00 00 00 00 00 00 00 00 02 14 18 01 | |
894 01EC 00 00 00 00 80 80 8a 60 68 e5 b5 19 | |
895 01F8 8a 00 00 00 00 00 00 00 | |
896 | |
897 01e8 itemCount [1 byte] 0x02 in this case | |
898 01e9 maxItemCount [1 byte] 0x14 constant | |
899 01eb nodeLevel [1 byte] 0x01 in this case | |
900 01f8 backPointer [8 bytes] 0x00008a in this case | |
901 ]]></literallayout> | |
902 <para> | |
903 The itemCount specifies the number of 24 byte records that | |
904 are active. The nodeLevel is non-zero for this style of nodes. | |
905 The leaf nodes have a different format. The backPointer must | |
906 match the backPointer from the triple that pointed to this node. | |
907 </para> | |
908 <para> | |
909 Each item in this node is a triple of (ID1, backPointer, offset) | |
910 where the offset points to the next deeper node in the tree, the | |
911 backPointer value must match the backPointer in that deeper node, | |
912 and ID1 is the lowest ID1 value in the subtree. | |
913 </para> | |
914 </refsect1> | |
915 | |
916 <refsect1 id='pst.file.leaf1.32.5'> | |
917 <title>32 bit Index 1 Leaf Node</title> | |
918 <para> | |
52 | 919 The 32 bit index1 b-tree leaf nodes are 512 byte blocks with the |
44 | 920 following format. |
24 | 921 </para> |
922 <literallayout class="monospaced"><![CDATA[ | |
923 0000 04 00 00 00 00 58 00 00 64 00 0f 00 | |
924 000c 08 00 00 00 80 58 00 00 ac 00 06 00 | |
925 0018 0c 00 00 00 40 59 00 00 ac 00 06 00 | |
926 0024 10 00 00 00 00 5a 00 00 bc 00 03 00 | |
927 0030 14 00 00 00 00 5b 00 00 a4 00 02 00 | |
928 003c 18 00 00 00 c0 5b 00 00 64 00 02 00 | |
929 0048 1c 00 00 00 40 5c 00 00 5c 00 02 00 | |
930 0054 50 00 00 00 80 62 00 00 60 00 02 00 | |
931 0060 74 00 00 00 00 77 00 00 5e 00 02 00 | |
932 006c 7c 00 00 00 80 77 00 00 66 00 02 00 | |
933 0078 84 00 00 00 00 76 00 00 ca 00 02 00 | |
934 0084 88 00 00 00 00 63 00 00 52 00 02 00 | |
935 0090 90 00 00 00 00 79 00 00 58 00 02 00 | |
936 009c cc 00 00 00 c0 61 00 00 76 00 02 00 | |
937 00a8 e0 00 00 00 00 61 00 00 74 00 02 00 | |
938 00b4 f4 00 00 00 80 65 00 00 6e 00 02 00 | |
939 00c0 8c 01 00 00 40 60 00 00 70 00 02 00 | |
940 00cc ea 01 00 00 80 61 00 00 10 00 02 00 | |
941 00d8 ec 01 00 00 40 8a 00 00 f3 01 02 00 | |
942 00e4 f0 01 00 00 80 93 00 00 f4 1f 02 00 | |
943 00f0 fa 01 00 00 c0 7f 00 00 10 00 02 00 | |
944 00fc 00 02 00 00 00 89 00 00 34 01 02 00 | |
945 0108 1c 02 00 00 40 ec 00 00 12 06 02 00 | |
946 0114 22 02 00 00 00 84 00 00 10 00 02 00 | |
947 0120 24 02 00 00 c0 ea 00 00 3c 01 02 00 | |
948 012c 40 02 00 00 00 f4 00 00 0a 06 02 00 | |
949 0138 46 02 00 00 40 8c 00 00 10 00 02 00 | |
950 0144 48 02 00 00 80 f2 00 00 36 01 02 00 | |
951 0150 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
952 015c 6a 02 00 00 80 63 00 00 10 00 02 00 | |
953 0168 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
954 0174 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
955 0180 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
956 018c 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
957 0198 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
958 01a4 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
959 01b0 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
960 01bc 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
961 01c8 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
962 01d4 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
963 01e0 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
964 01ec 00 00 00 00 1f 29 0c 00 80 80 5b b3 | |
52 | 965 01f8 5a 67 01 00 4f ae 70 a7 |
24 | 966 |
28 | 967 01f0 itemCount [1 byte] 0x1f in this case |
968 01f1 maxItemCount [1 byte] 0x29 constant | |
44 | 969 01f3 nodeLevel [1 byte] 0x00 defines a leaf node |
28 | 970 01f8 backPointer [4 bytes] 0x01675a in this case |
24 | 971 ]]></literallayout> |
972 <para> | |
28 | 973 The itemCount specifies the number of 12 byte records that |
974 are active. The nodeLevel is zero for these leaf nodes. | |
975 The backPointer must match the backPointer from the triple | |
24 | 976 that pointed to this node. |
977 </para> | |
978 <para> | |
979 Each item in this node is a tuple of (ID1, offset, size, unknown) | |
35 | 980 The two low order bits of the ID1 value seem to be flags. I have |
981 never seen a case with bit zero set. Bit one indicates that the | |
982 item is <emphasis>not</emphasis> encrypted. Note that references | |
983 to these ID1 values elsewhere may have the low order bit set (and | |
984 I don't know what that means), but when we do the search in this | |
985 tree we need to clear that bit so that we can find the correct item. | |
24 | 986 </para> |
987 </refsect1> | |
988 | |
44 | 989 <refsect1 id='pst.file.leaf1.64.5'> |
990 <title>64 bit Index 1 Leaf Node</title> | |
24 | 991 <para> |
44 | 992 The 64 bit index1 b-tree leaf nodes are 512 byte blocks with the |
993 following format. | |
994 </para> | |
995 <literallayout class="monospaced"><![CDATA[ | |
996 0000 04 00 00 00 00 00 00 00 00 58 00 00 | |
997 000C 00 00 00 00 6c 00 05 00 00 00 00 00 | |
998 0018 08 00 00 00 00 00 00 00 80 58 00 00 | |
999 0024 00 00 00 00 b4 00 06 00 d8 22 37 08 | |
1000 0030 0c 00 00 00 00 00 00 00 80 59 00 00 | |
1001 003C 00 00 00 00 ac 00 07 00 d8 22 37 08 | |
1002 0048 10 00 00 00 00 00 00 00 40 5a 00 00 | |
1003 0054 00 00 00 00 bc 00 03 00 d8 22 37 08 | |
1004 0060 14 00 00 00 00 00 00 00 40 5b 00 00 | |
1005 006C 00 00 00 00 a4 00 02 00 d8 22 37 08 | |
1006 0078 18 00 00 00 00 00 00 00 00 5c 00 00 | |
1007 0084 00 00 00 00 64 00 02 00 d8 22 37 08 | |
1008 0090 1c 00 00 00 00 00 00 00 80 5c 00 00 | |
1009 009C 00 00 00 00 5c 00 02 00 d8 22 37 08 | |
1010 00A8 24 00 00 00 00 00 00 00 80 5d 00 00 | |
1011 00B4 00 00 00 00 72 00 02 00 d8 22 37 08 | |
1012 00C0 34 00 00 00 00 00 00 00 00 70 00 00 | |
1013 00CC 00 00 00 00 8c 00 02 00 00 0d 00 00 | |
1014 00D8 38 00 00 00 00 00 00 00 c0 71 00 00 | |
1015 00E4 00 00 00 00 5c 00 02 00 d8 22 9c 00 | |
1016 00F0 40 00 00 00 00 00 00 00 40 72 00 00 | |
1017 00FC 00 00 00 00 26 00 02 00 d8 22 9c 00 | |
1018 0108 4c 00 00 00 00 00 00 00 80 5f 00 00 | |
1019 0114 00 00 00 00 3e 00 02 00 d8 22 9c 00 | |
1020 0120 5c 00 00 00 00 00 00 00 c0 76 00 00 | |
1021 012C 00 00 00 00 8c 00 02 00 d8 22 9c 00 | |
1022 0138 64 00 00 00 00 00 00 00 40 75 00 00 | |
1023 0144 00 00 00 00 76 00 02 00 d8 22 9c 00 | |
1024 0150 6c 00 00 00 00 00 00 00 c0 73 00 00 | |
1025 015C 00 00 00 00 5e 00 02 00 d8 22 9c 00 | |
1026 0168 70 00 00 00 00 00 00 00 80 72 00 00 | |
1027 0174 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
1028 0180 70 00 00 00 00 00 00 00 80 72 00 00 | |
1029 018C 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
1030 0198 70 00 00 00 00 00 00 00 80 72 00 00 | |
1031 01A4 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
1032 01B0 74 00 00 00 00 00 00 00 40 74 00 00 | |
1033 01BC 00 00 00 00 e0 00 02 00 d8 22 9c 00 | |
1034 01C8 7c 00 00 00 00 00 00 00 80 77 00 00 | |
1035 01D4 00 00 00 00 dc 00 02 00 d8 22 9c 00 | |
1036 01E0 00 00 00 00 00 00 00 00 10 14 18 00 | |
1037 01EC 00 00 00 00 80 80 88 48 3f 50 0b 04 | |
1038 01F8 88 00 00 00 00 00 00 00 | |
1039 | |
1040 01e8 itemCount [1 byte] 0x10 in this case | |
1041 01e9 maxItemCount [1 byte] 0x14 constant | |
1042 01eb nodeLevel [1 byte] 0x00 defines a leaf node | |
1043 01f8 backPointer [8 bytes] 0x000088 in this case | |
1044 ]]></literallayout> | |
1045 <para> | |
1046 The itemCount specifies the number of 24 byte records that | |
1047 are active. The nodeLevel is zero for these leaf nodes. | |
1048 The backPointer must match the backPointer from the triple | |
1049 that pointed to this node. | |
1050 </para> | |
1051 <para> | |
1052 Each item in this node is a tuple of (ID1, offset, size, unknown) | |
1053 The two low order bits of the ID1 value seem to be flags. I have | |
1054 never seen a case with bit zero set. Bit one indicates that the | |
1055 item is <emphasis>not</emphasis> encrypted. Note that references | |
1056 to these ID1 values elsewhere may have the low order bit set (and | |
1057 I don't know what that means), but when we do the search in this | |
1058 tree we need to clear that bit so that we can find the correct item. | |
1059 </para> | |
1060 </refsect1> | |
1061 | |
1062 <refsect1 id='pst.file.node2.32.5'> | |
1063 <title>32 bit Index 2 Node</title> | |
1064 <para> | |
52 | 1065 The 32 bit index2 b-tree nodes are 512 byte blocks with the |
44 | 1066 following format. |
24 | 1067 </para> |
1068 <literallayout class="monospaced"><![CDATA[ | |
1069 0000 21 00 00 00 bb 1e 02 00 00 e2 0b 00 | |
1070 000c 64 78 20 00 8c 1e 02 00 00 dc 0b 00 | |
1071 0018 00 00 00 00 00 00 00 00 00 00 00 00 | |
1072 0024 00 00 00 00 00 00 00 00 00 00 00 00 | |
1073 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
1074 003c 00 00 00 00 00 00 00 00 00 00 00 00 | |
1075 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
1076 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
1077 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
1078 006c 00 00 00 00 00 00 00 00 00 00 00 00 | |
1079 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
1080 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
1081 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
1082 009c 00 00 00 00 00 00 00 00 00 00 00 00 | |
1083 00a8 00 00 00 00 00 00 00 00 00 00 00 00 | |
1084 00b4 00 00 00 00 00 00 00 00 00 00 00 00 | |
1085 00c0 00 00 00 00 00 00 00 00 00 00 00 00 | |
1086 00cc 00 00 00 00 00 00 00 00 00 00 00 00 | |
1087 00d8 00 00 00 00 00 00 00 00 00 00 00 00 | |
1088 00e4 00 00 00 00 00 00 00 00 00 00 00 00 | |
1089 00f0 00 00 00 00 00 00 00 00 00 00 00 00 | |
1090 00fc 00 00 00 00 00 00 00 00 00 00 00 00 | |
1091 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
1092 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
1093 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
1094 012c 00 00 00 00 00 00 00 00 00 00 00 00 | |
1095 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
1096 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
1097 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
1098 015c 00 00 00 00 00 00 00 00 00 00 00 00 | |
1099 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
1100 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
1101 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
1102 018c 00 00 00 00 00 00 00 00 00 00 00 00 | |
1103 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
1104 01a4 00 00 00 00 00 00 00 00 00 00 00 00 | |
1105 01b0 00 00 00 00 00 00 00 00 00 00 00 00 | |
1106 01bc 00 00 00 00 00 00 00 00 00 00 00 00 | |
1107 01c8 00 00 00 00 00 00 00 00 00 00 00 00 | |
1108 01d4 00 00 00 00 00 00 00 00 00 00 00 00 | |
1109 01e0 00 00 00 00 00 00 00 00 00 00 00 00 | |
1110 01ec 00 00 00 00 02 29 0c 02 81 81 b2 60 | |
52 | 1111 01f8 bc 1e 02 00 7e 70 dc e3 |
24 | 1112 |
28 | 1113 01f0 itemCount [1 byte] 0x02 in this case |
1114 01f1 maxItemCount [1 byte] 0x29 constant | |
1115 01f3 nodeLevel [1 byte] 0x02 in this case | |
1116 01f8 backPointer [4 bytes] 0x021ebc in this case | |
24 | 1117 ]]></literallayout> |
1118 <para> | |
28 | 1119 The itemCount specifies the number of 12 byte records that |
1120 are active. The nodeLevel is non-zero for this style of nodes. | |
1121 The leaf nodes have a different format. The backPointer must | |
1122 match the backPointer from the triple that pointed to this node. | |
24 | 1123 </para> |
1124 <para> | |
28 | 1125 Each item in this node is a triple of (ID2, backPointer, offset) |
24 | 1126 where the offset points to the next deeper node in the tree, the |
28 | 1127 backPointer value must match the backPointer in that deeper node, |
24 | 1128 and ID2 is the lowest ID2 value in the subtree. |
1129 </para> | |
1130 </refsect1> | |
1131 | |
44 | 1132 <refsect1 id='pst.file.node2.64.5'> |
1133 <title>64 bit Index 2 Node</title> | |
24 | 1134 <para> |
44 | 1135 The 64 bit index2 b-tree nodes are 512 byte blocks with the |
1136 following format. | |
1137 </para> | |
1138 <literallayout class="monospaced"><![CDATA[ | |
1139 0000 21 00 00 00 00 00 00 00 77 00 00 00 | |
1140 000C 00 00 00 00 00 56 00 00 00 00 00 00 | |
1141 0018 4c 06 00 00 00 00 00 00 82 00 00 00 | |
1142 0024 00 00 00 00 00 68 00 00 00 00 00 00 | |
1143 0030 4f 80 00 00 00 00 00 00 84 00 00 00 | |
1144 003C 00 00 00 00 00 6e 00 00 00 00 00 00 | |
1145 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
1146 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
1147 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
1148 006C 00 00 00 00 00 00 00 00 00 00 00 00 | |
1149 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
1150 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
1151 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
1152 009C 00 00 00 00 00 00 00 00 00 00 00 00 | |
1153 00A8 00 00 00 00 00 00 00 00 00 00 00 00 | |
1154 00B4 00 00 00 00 00 00 00 00 00 00 00 00 | |
1155 00C0 00 00 00 00 00 00 00 00 00 00 00 00 | |
1156 00CC 00 00 00 00 00 00 00 00 00 00 00 00 | |
1157 00D8 00 00 00 00 00 00 00 00 00 00 00 00 | |
1158 00E4 00 00 00 00 00 00 00 00 00 00 00 00 | |
1159 00F0 00 00 00 00 00 00 00 00 00 00 00 00 | |
1160 00FC 00 00 00 00 00 00 00 00 00 00 00 00 | |
1161 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
1162 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
1163 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
1164 012C 00 00 00 00 00 00 00 00 00 00 00 00 | |
1165 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
1166 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
1167 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
1168 015C 00 00 00 00 00 00 00 00 00 00 00 00 | |
1169 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
1170 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
1171 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
1172 018C 00 00 00 00 00 00 00 00 00 00 00 00 | |
1173 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
1174 01A4 00 00 00 00 00 00 00 00 00 00 00 00 | |
1175 01B0 00 00 00 00 00 00 00 00 00 00 00 00 | |
1176 01BC 00 00 00 00 00 00 00 00 00 00 00 00 | |
1177 01C8 00 00 00 00 00 00 00 00 00 00 00 00 | |
1178 01D4 00 00 00 00 00 00 00 00 00 00 00 00 | |
1179 01E0 00 00 00 00 00 00 00 00 03 14 18 01 | |
1180 01EC 00 00 00 00 81 81 83 6a 49 da f3 d3 | |
1181 01F8 83 00 00 00 00 00 00 00 | |
1182 | |
1183 01e8 itemCount [1 byte] 0x03 in this case | |
1184 01e9 maxItemCount [1 byte] 0x14 constant | |
1185 01eb nodeLevel [1 byte] 0x01 in this case | |
1186 01f8 backPointer [4 bytes] 0x000083 in this case | |
1187 ]]></literallayout> | |
1188 <para> | |
1189 The itemCount specifies the number of 24 byte records that | |
1190 are active. The nodeLevel is non-zero for this style of nodes. | |
1191 The leaf nodes have a different format. The backPointer must | |
1192 match the backPointer from the triple that pointed to this node. | |
1193 </para> | |
1194 <para> | |
1195 Each item in this node is a triple of (ID2, backPointer, offset) | |
1196 where the offset points to the next deeper node in the tree, the | |
1197 backPointer value must match the backPointer in that deeper node, | |
1198 and ID2 is the lowest ID2 value in the subtree. | |
1199 </para> | |
1200 </refsect1> | |
1201 | |
1202 <refsect1 id='pst.file.leaf2.32.5'> | |
1203 <title>32 bit Index 2 Leaf Node</title> | |
1204 <para> | |
52 | 1205 The 32 bit index2 b-tree leaf nodes are 512 byte blocks with the |
44 | 1206 following format. |
24 | 1207 </para> |
1208 <literallayout class="monospaced"><![CDATA[ | |
1209 0000 21 00 00 00 38 e6 00 00 00 00 00 00 00 00 00 00 | |
1210 0010 61 00 00 00 2c a8 02 00 36 a8 02 00 00 00 00 00 | |
1211 0020 22 01 00 00 20 a2 02 00 00 00 00 00 22 01 00 00 | |
1212 0030 2d 01 00 00 88 7b 03 00 00 00 00 00 00 00 00 00 | |
1213 0040 2e 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
1214 0050 2f 01 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 | |
1215 0060 e1 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
1216 0070 01 02 00 00 b4 e4 02 00 00 00 00 00 00 00 00 00 | |
1217 0080 61 02 00 00 a0 e4 02 00 00 00 00 00 00 00 00 00 | |
1218 0090 0d 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 | |
1219 00A0 0e 06 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
1220 00B0 0f 06 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 | |
1221 00C0 10 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 | |
1222 00D0 2b 06 00 00 84 00 00 00 00 00 00 00 00 00 00 00 | |
1223 00E0 4c 06 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 | |
1224 00F0 71 06 00 00 18 00 00 00 00 00 00 00 00 00 00 00 | |
1225 0100 92 06 00 00 14 00 00 00 00 00 00 00 00 00 00 00 | |
1226 0110 23 22 00 00 14 a0 02 00 00 00 00 00 22 01 00 00 | |
1227 0120 26 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
1228 0130 27 22 00 00 1c a0 02 00 00 00 00 00 00 00 00 00 | |
1229 0140 22 80 00 00 50 00 00 00 00 00 00 00 22 01 00 00 | |
1230 0150 2d 80 00 00 f8 9f 02 00 00 00 00 00 00 00 00 00 | |
1231 0160 2e 80 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
1232 0170 2f 80 00 00 34 e6 00 00 00 00 00 00 00 00 00 00 | |
1233 0180 42 80 00 00 3c 6d 02 00 00 00 00 00 22 80 00 00 | |
1234 0190 4d 80 00 00 04 00 00 00 00 00 00 00 00 00 00 00 | |
1235 01A0 4e 80 00 00 10 6d 02 00 00 00 00 00 00 00 00 00 | |
1236 01B0 4f 80 00 00 ec 23 00 00 00 00 00 00 00 00 00 00 | |
1237 01C0 62 80 00 00 38 78 02 00 00 00 00 00 22 01 00 00 | |
1238 01D0 6d 80 00 00 34 78 02 00 00 00 00 00 00 00 00 00 | |
1239 01E0 6e 80 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
1240 01F0 10 1f 10 00 81 81 a0 9a ae 1e 02 00 89 44 6a 0f | |
1241 | |
28 | 1242 01f0 itemCount [1 byte] 0x10 in this case |
1243 01f1 maxItemCount [1 byte] 0x1f constant | |
1244 01f3 nodeLevel [1 byte] 0x00 in this case | |
1245 01f8 backPointer [4 bytes] 0x021eae in this case | |
24 | 1246 ]]></literallayout> |
1247 <para> | |
28 | 1248 The itemCount specifies the number of 16 byte records that |
1249 are active. The nodeLevel is zero for these leaf nodes. | |
1250 The backPointer must match the backPointer from the triple | |
24 | 1251 that pointed to this node. |
1252 </para> | |
1253 <para> | |
1254 Each item in this node is a tuple of (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) | |
1255 </para> | |
1256 </refsect1> | |
1257 | |
44 | 1258 <refsect1 id='pst.file.leaf2.64.5'> |
1259 <title>64 bit Index 2 Leaf Node</title> | |
1260 <para> | |
1261 The 64 bit index2 b-tree leaf nodes are 512 byte blocks with the | |
1262 following format. | |
1263 </para> | |
1264 <literallayout class="monospaced"><![CDATA[ | |
1265 0000 21 00 00 00 00 00 00 00 74 00 00 00 00 00 00 00 | |
1266 0010 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1267 0020 61 00 00 00 00 00 00 00 34 00 00 00 00 00 00 00 | |
1268 0030 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1269 0040 22 01 00 00 00 00 00 00 4c 00 00 00 00 00 00 00 | |
1270 0050 00 00 00 00 00 00 00 00 22 01 00 00 02 00 00 00 | |
1271 0060 2d 01 00 00 00 00 00 00 70 00 00 00 00 00 00 00 | |
1272 0070 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1273 0080 2e 01 00 00 00 00 00 00 08 00 00 00 00 00 00 00 | |
1274 0090 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1275 00A0 2f 01 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 | |
1276 00B0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1277 00C0 e1 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
1278 00D0 00 00 00 00 00 00 00 00 00 00 00 00 d8 e3 13 00 | |
1279 00E0 01 02 00 00 00 00 00 00 8c 00 00 00 00 00 00 00 | |
1280 00F0 00 00 00 00 00 00 00 00 00 00 00 00 b0 e3 13 00 | |
1281 0100 61 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
1282 0110 00 00 00 00 00 00 00 00 00 00 00 00 d8 e3 13 00 | |
1283 0120 0d 06 00 00 00 00 00 00 04 00 00 00 00 00 00 00 | |
1284 0130 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1285 0140 0e 06 00 00 00 00 00 00 08 00 00 00 00 00 00 00 | |
1286 0150 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1287 0160 0f 06 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 | |
1288 0170 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1289 0180 10 06 00 00 00 00 00 00 10 00 00 00 00 00 00 00 | |
1290 0190 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1291 01A0 2b 06 00 00 00 00 00 00 24 00 00 00 00 00 00 00 | |
1292 01B0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1293 01C0 71 06 00 00 00 00 00 00 18 00 00 00 00 00 00 00 | |
1294 01D0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
1295 01E0 00 00 00 00 00 00 00 00 0e 0f 20 00 00 00 00 00 | |
1296 01F0 81 81 77 56 f8 32 43 49 77 00 00 00 00 00 00 00 | |
1297 | |
1298 01e8 itemCount [1 byte] 0x0e in this case | |
1299 01e9 maxItemCount [1 byte] 0x0f constant | |
1300 01eb nodeLevel [1 byte] 0x00 defines a leaf node | |
1301 01f8 backPointer [4 bytes] 0x000077 in this case | |
1302 ]]></literallayout> | |
1303 <para> | |
1304 The itemCount specifies the number of 32 byte records that | |
1305 are active. The nodeLevel is zero for these leaf nodes. | |
1306 The backPointer must match the backPointer from the triple | |
1307 that pointed to this node. | |
1308 </para> | |
1309 <para> | |
1310 Each item in this node is a tuple of (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) | |
1311 </para> | |
1312 </refsect1> | |
1313 | |
46 | 1314 <refsect1 id='pst.file.list.32.5'> |
48 | 1315 <title>32 bit Associated List Item 0x0002</title> |
24 | 1316 <para> |
1317 Contains associations between id1 and id2 for the items controlled by the record. | |
44 | 1318 In the above 32 bit leaf node, we have a tuple of (0x61, 0x02a82c, 0x02a836, 0) |
24 | 1319 0x02a836 is the ID1 of the associated list, and we can lookup that ID1 value |
1320 in the index1 b-tree to find the (offset,size) of the data in the .pst file. | |
1321 </para> | |
1322 <literallayout class="monospaced"><![CDATA[ | |
1323 0000 02 00 01 00 9f 81 00 00 30 a8 02 00 00 00 00 00 | |
1324 | |
48 | 1325 0000 signature [2 bytes] 0x0002 constant |
24 | 1326 0002 count [2 bytes] 0x0001 in this case |
1327 repeating | |
1328 0004 id2 [4 bytes] 0x00819f in this case | |
1329 0008 id [4 bytes] 0x02a830 in this case | |
46 | 1330 000c table2 [4 bytes] 0 in this case |
1331 ]]></literallayout> | |
1332 </refsect1> | |
1333 | |
1334 <refsect1 id='pst.file.list.64.5'> | |
48 | 1335 <title>64 bit Associated List Item 0x0002</title> |
46 | 1336 <para> |
1337 Contains associations between id1 and id2 for the items controlled by the record. | |
1338 </para> | |
1339 <literallayout class="monospaced"><![CDATA[ | |
1340 0000 02 00 02 00 00 00 00 00 92 06 00 00 00 00 00 00 | |
1341 0010 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
1342 0020 3f 80 00 00 00 00 00 00 98 00 00 00 00 00 00 00 | |
1343 0030 00 00 00 00 00 00 00 00 | |
1344 | |
48 | 1345 0000 signature [2 bytes] 0x0002 constant |
46 | 1346 0002 count [2 bytes] 0x0002 in this case |
1347 0004 unknown [4 bytes] 0 possibly constant | |
1348 repeating | |
48 | 1349 0008 id2 [4 bytes] 0x000692 in this case |
1350 000c unknown1 [2 bytes] 0 may be a count or size | |
1351 000e unknown2 [2 bytes] 0 may be a count or size | |
1352 0010 id [8 bytes] 0x0000a8 in this case | |
1353 0018 table2 [8 bytes] 0 in this case | |
24 | 1354 ]]></literallayout> |
1355 </refsect1> | |
1356 | |
1357 <refsect1 id='pst.file.desc.5'> | |
28 | 1358 <title>Associated Descriptor Item 0xbcec</title> |
24 | 1359 <para> |
28 | 1360 Contains information about the item, which may be email, contact, or |
1361 other outlook types. In the above leaf node, we have a tuple of (0x21, | |
1362 0x00e638, 0, 0) 0x00e638 is the ID1 of the associated descriptor, and we | |
1363 can lookup that ID1 value in the index1 b-tree to find the (offset,size) | |
1364 of the data in the .pst file. | |
24 | 1365 </para> |
1366 <literallayout class="monospaced"><![CDATA[ | |
1367 0000 3c 01 ec bc 20 00 00 00 00 00 00 00 b5 02 06 00 | |
1368 0010 40 00 00 00 f9 0f 02 01 60 00 00 00 01 30 1e 00 | |
1369 0020 80 00 00 00 04 30 1e 00 00 00 00 00 df 35 03 00 | |
1370 0030 ff 00 00 00 e0 35 02 01 a0 00 00 00 e2 35 02 01 | |
1371 0040 e0 00 00 00 e3 35 02 01 c0 00 00 00 e4 35 02 01 | |
1372 0050 00 01 00 00 e5 35 02 01 20 01 00 00 e6 35 02 01 | |
1373 0060 40 01 00 00 e7 35 02 01 60 01 00 00 1e 66 0b 00 | |
1374 0070 00 00 00 00 ff 67 03 00 00 00 00 00 d2 7f 17 d8 | |
1375 0080 64 8c d5 11 83 24 00 50 04 86 95 45 53 74 61 6e | |
1376 0090 6c 65 79 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
1377 00A0 24 00 50 04 86 95 45 22 80 00 00 00 00 00 00 d2 | |
1378 00B0 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 42 | |
1379 00C0 80 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
1380 00D0 24 00 50 04 86 95 45 a2 80 00 00 00 00 00 00 d2 | |
1381 00E0 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 c2 | |
1382 00F0 80 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
1383 0100 24 00 50 04 86 95 45 e2 80 00 00 00 00 00 00 d2 | |
1384 0110 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 02 | |
1385 0120 81 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
1386 0130 24 00 50 04 86 95 45 62 80 00 00 00 0b 00 00 00 | |
1387 0140 0c 00 14 00 7c 00 8c 00 93 00 ab 00 c3 00 db 00 | |
1388 0150 f3 00 0b 01 23 01 3b 01 | |
1389 | |
28 | 1390 0000 indexOffset [2 bytes] 0x013c in this case |
24 | 1391 0002 signature [2 bytes] 0xbcec constant |
35 | 1392 0004 b5offset [4 bytes] 0x0020 index reference |
24 | 1393 ]]></literallayout> |
1394 <para> | |
35 | 1395 Note the signature of 0xbcec. There are other descriptor block formats |
1396 with other signatures. Note the indexOffset of 0x013c - starting at | |
1397 that position in the descriptor block, we have an array of two byte | |
1398 integers. The first integer (0x000b) is a (count-1) of the number of | |
1399 overlapping pairs following the count. The first pair is (0, 0xc), the | |
1400 next pair is (0xc, 0x14) and the last (12th) pair is (0x123, 0x13b). | |
1401 These pairs are (start,end+1) offsets of items in this block. So we | |
1402 have count+2 integers following the count value. | |
24 | 1403 </para> |
1404 <para> | |
35 | 1405 Note the b5offset of 0x0020, which is a type that I will call an index |
49 | 1406 reference. Such index references have at least two different forms, |
1407 and may point to data either in this block, or in some other block. | |
35 | 1408 External pointer references have the low order 4 bits all set, and are |
1409 ID2 values that can be used to fetch data. This value of 0x0020 is an | |
49 | 1410 internal pointer reference, which needs to be right shifted by 4 bits |
1411 to become 0x0002, which is then a byte offset to be added to the above | |
35 | 1412 indexOffset plus two (to skip the count), so it points to the (0xc, |
1413 0x14) pair. | |
1414 </para> | |
1415 <para> | |
49 | 1416 So far we have only described internal index references where the high |
1417 order 16 bits are zero. That suffices for single descriptor | |
1418 blocks. But in the case of the type 0x0101 descriptor block, we have | |
1419 an array of subblocks. In this case, the high order 16 bits of an | |
1420 internal index reference are used to select the subblock. Each | |
1421 subblock starts with a 16 bit indexOffset which points to the count | |
1422 and array of 16 bit integer pairs which are offsets in the current | |
1423 subblock. | |
1424 </para> | |
1425 <para> | |
35 | 1426 Finally, we have the offset and size of the "b5" block located at offset 0xc |
24 | 1427 with a size of 8 bytes in this descriptor block. The "b5" block has the |
1428 following format: | |
1429 </para> | |
1430 <literallayout class="monospaced"><![CDATA[ | |
1431 0000 signature [2 bytes] 0x02b5 constant | |
1432 0002 unknown [2 bytes] 0x0006 in this case | |
35 | 1433 0004 descoffset [4 bytes] 0x0040 index reference |
24 | 1434 ]]></literallayout> |
1435 <para> | |
35 | 1436 Note the descoffset of 0x0040, which again is an index reference. In this |
1437 case, it is an internal pointer reference, which needs to be right shifted by 4 bits | |
24 | 1438 to become 0x0004, which is then a byte offset to be added to the above |
28 | 1439 indexOffset plus two (to skip the count), so it points to the (0x14, 0x7c) |
24 | 1440 pair. We now have the offset 0x14 of the descriptor array, composed of 8 byte |
1441 entries. Each descriptor entry has the following format: | |
1442 </para> | |
1443 <literallayout class="monospaced"><![CDATA[ | |
28 | 1444 0000 itemType [2 bytes] |
1445 0002 referenceType [2 bytes] | |
24 | 1446 0004 value [4 bytes] |
1447 ]]></literallayout> | |
1448 <para> | |
1449 For some reference types (2, 3, 0xb) the value is used directly. Otherwise, | |
35 | 1450 the value is an index reference, which is either an ID2 value, or an |
1451 offset, to be right shifted by 4 bits and used to fetch a pair from the | |
1452 index table to find the offset and size of the item in this descriptor block. | |
24 | 1453 </para> |
1454 <para> | |
1455 The following reference types are known, but not all of these | |
1456 are implemented in the code yet. | |
1457 </para> | |
1458 <literallayout class="monospaced"><![CDATA[ | |
1459 0x0002 - Signed 16bit value | |
1460 0x0003 - Signed 32bit value | |
1461 0x0004 - 4-byte floating point | |
1462 0x0005 - Floating point double | |
1463 0x0006 - Signed 64-bit int | |
1464 0x0007 - Application Time | |
1465 0x000A - 32-bit error value | |
1466 0x000B - Boolean (non-zero = true) | |
1467 0x000D - Embedded Object | |
1468 0x0014 - 8-byte signed integer (64-bit) | |
1469 0x001E - Null terminated String | |
1470 0x001F - Unicode string | |
1471 0x0040 - Systime - Filetime structure | |
1472 0x0048 - OLE Guid | |
1473 0x0102 - Binary data | |
1474 0x1003 - Array of 32bit values | |
1475 0x1014 - Array of 64bit values | |
1476 0x101E - Array of Strings | |
1477 0x1102 - Array of Binary data | |
1478 ]]></literallayout> | |
1479 <para> | |
1480 The following item types are known, but not all of these | |
1481 are implemented in the code yet. | |
1482 </para> | |
1483 <literallayout class="monospaced"><![CDATA[ | |
51 | 1484 0002 Alternate recipient allowed |
24 | 1485 0003 Extended Attributes Table |
1486 0017 Importance Level | |
51 | 1487 001a IPM Context, message class |
1488 0023 Global delivery report requested | |
24 | 1489 0026 Priority |
1490 0029 Read Receipt | |
1491 002b Reassignment Prohibited | |
1492 002e Original Sensitivity | |
1493 0036 Sensitivity | |
51 | 1494 0037 Email Subject |
24 | 1495 0039 Date. This is likely to be the arrival date |
1496 003b Outlook Address of Sender | |
1497 003f Outlook structure describing the recipient | |
1498 0040 Name of the Outlook recipient structure | |
1499 0041 Outlook structure describing the sender | |
1500 0042 Name of the Outlook sender structure | |
1501 0043 Another structure describing the recipient | |
1502 0044 Name of the second recipient structure | |
1503 004f Reply-To Outlook Structure | |
1504 0050 Name of the Reply-To structure | |
1505 0051 Outlook Name of recipient | |
1506 0052 Second Outlook name of recipient | |
1507 0057 My address in TO field | |
1508 0058 My address in CC field | |
1509 0059 Message addressed to me | |
1510 0063 Response requested | |
1511 0064 Sender's Address access method (SMTP, EX) | |
1512 0065 Sender's Address | |
1513 0070 Processed Subject (with Fwd:, Re, ... removed) | |
1514 0071 Date. Another date | |
1515 0075 Recipient Address Access Method (SMTP, EX) | |
1516 0076 Recipient's Address | |
1517 0077 Second Recipient Access Method (SMTP, EX) | |
1518 0078 Second Recipient Address | |
1519 007d Email Header. This is the header that was attached to the email | |
1520 0c17 Reply Requested | |
52 | 1521 0c19 Second sender structure |
1522 0c1a Name of second sender structure | |
24 | 1523 0c1d Second outlook name of sender |
1524 0c1e Second sender access method (SMTP, EX) | |
1525 0c1f Second Sender Address | |
1526 0e01 Delete after submit | |
1527 0e03 CC Address? | |
1528 0e04 SentTo Address | |
1529 0e06 Date. | |
1530 0e07 Flag - contains IsSeen value | |
1531 0e08 Message Size | |
1532 0e0a Sentmail EntryID | |
1533 0e1f Compressed RTF in Sync | |
1534 0e20 Attachment Size | |
1535 0ff9 binary record header | |
1536 1000 Plain Text Email Body. Does not exist if the email doesn't have a plain text version | |
1537 1006 RTF Sync Body CRC | |
1538 1007 RTF Sync Body character count | |
1539 1008 RTF Sync body tag | |
1540 1009 RTF Compressed body | |
1541 1010 RTF whitespace prefix count | |
1542 1011 RTF whitespace tailing count | |
36 | 1543 1013 HTML Email Body. Does not exist if the email doesn't have an HTML version |
24 | 1544 1035 Message ID |
1545 1042 In-Reply-To or Parent's Message ID | |
1546 1046 Return Path | |
1547 3001 Folder Name? I have seen this value used for the contacts record aswell | |
1548 3002 Address Type | |
1549 3003 Contact Address | |
1550 3004 Comment | |
1551 3007 Date item creation | |
1552 3008 Date item modification | |
1553 300b binary record header | |
1554 35df Valid Folder Mask | |
51 | 1555 35e0 binary record contains a reference to "Top of Personal Folder" item |
1556 35e2 binary record contains a reference to default outbox item | |
1557 35e3 binary record contains a reference to "Deleted Items" item | |
1558 35e4 binary record contains a reference to sent items folder item | |
1559 35e5 binary record contains a reference to user views folder item | |
1560 35e6 binary record contains a reference to common views folder item | |
1561 35e7 binary record contains a reference to "Search Root" item | |
24 | 1562 3602 the number of emails stored in a folder |
1563 3603 the number of unread emails in a folder | |
1564 360a Has Subfolders | |
1565 3613 the folder content description | |
1566 3617 Associate Content count | |
1567 3701 Binary Data attachment | |
1568 3704 Attachment Filename | |
1569 3705 Attachement method | |
1570 3707 Attachment Filename long | |
1571 370b Attachment Position | |
1572 370e Attachment mime encoding | |
51 | 1573 3710 Attachment mime Sequence |
24 | 1574 3a00 Contact's Account name |
1575 3a01 Contact Alternate Recipient | |
1576 3a02 Callback telephone number | |
1577 3a03 Message Conversion Prohibited | |
1578 3a05 Contacts Suffix | |
1579 3a06 Contacts First Name | |
1580 3a07 Contacts Government ID Number | |
1581 3a08 Business Telephone Number | |
1582 3a09 Home Telephone Number | |
1583 3a0a Contacts Initials | |
1584 3a0b Keyword | |
1585 3a0c Contact's Language | |
1586 3a0d Contact's Location | |
1587 3a0e Mail Permission | |
1588 3a0f MHS Common Name | |
1589 3a10 Organizational ID # | |
1590 3a11 Contacts Surname | |
1591 3a12 original entry id | |
1592 3a13 original display name | |
1593 3a14 original search key | |
1594 3a15 Default Postal Address | |
1595 3a16 Company Name | |
1596 3a17 Job Title | |
1597 3a18 Department Name | |
1598 3a19 Office Location | |
1599 3a1a Primary Telephone | |
1600 3a1b Business Phone Number 2 | |
1601 3a1c Mobile Phone Number | |
1602 3a1d Radio Phone Number | |
1603 3a1e Car Phone Number | |
1604 3a1f Other Phone Number | |
1605 3a20 Transmittable Display Name | |
1606 3a21 Pager Phone Number | |
1607 3a22 user certificate | |
1608 3a23 Primary Fax Number | |
1609 3a24 Business Fax Number | |
1610 3a25 Home Fax Number | |
1611 3a26 Business Address Country | |
1612 3a27 Business Address City | |
1613 3a28 Business Address State | |
1614 3a29 Business Address Street | |
1615 3a2a Business Postal Code | |
1616 3a2b Business PO Box | |
1617 3a2c Telex Number | |
1618 3a2d ISDN Number | |
1619 3a2e Assistant Phone Number | |
1620 3a2f Home Phone 2 | |
1621 3a30 Assistant's Name | |
1622 3a40 Can receive Rich Text | |
1623 3a41 Wedding Anniversary | |
1624 3a42 Birthday | |
1625 3a43 Hobbies | |
1626 3a44 Middle Name | |
1627 3a45 Display Name Prefix (Title) | |
1628 3a46 Profession | |
1629 3a47 Preferred By Name | |
1630 3a48 Spouse's Name | |
1631 3a49 Computer Network Name | |
1632 3a4a Customer ID | |
1633 3a4b TTY/TDD Phone | |
1634 3a4c Ftp Site | |
1635 3a4d Gender | |
1636 3a4e Manager's Name | |
1637 3a4f Nickname | |
1638 3a50 Personal Home Page | |
1639 3a51 Business Home Page | |
1640 3a57 Company Main Phone | |
1641 3a58 childrens names | |
1642 3a59 Home Address City | |
1643 3a5a Home Address Country | |
1644 3a5b Home Address Postal Code | |
1645 3a5c Home Address State or Province | |
1646 3a5d Home Address Street | |
1647 3a5e Home Address Post Office Box | |
1648 3a5f Other Address City | |
1649 3a60 Other Address Country | |
1650 3a61 Other Address Postal Code | |
1651 3a62 Other Address State | |
1652 3a63 Other Address Street | |
1653 3a64 Other Address Post Office box | |
1654 65e3 Entry ID | |
1655 67f2 Attachment ID2 value | |
36 | 1656 67ff Password checksum |
24 | 1657 6f02 Secure HTML Body |
1658 6f04 Secure Text Body | |
36 | 1659 7c07 Top of folders RecID |
24 | 1660 8005 Contact Fullname |
1661 801a Home Address | |
1662 801b Business Address | |
1663 801c Other Address | |
51 | 1664 8045 Work Address Street |
1665 8046 Work Address City | |
1666 8047 Work Address State | |
1667 8048 Work Address Postal Code | |
1668 8049 Work Address Country | |
1669 804a Work Address Post Office Box | |
24 | 1670 8082 Email Address 1 Transport |
1671 8083 Email Address 1 Address | |
1672 8084 Email Address 1 Description | |
1673 8085 Email Address 1 Record | |
1674 8092 Email Address 2 Transport | |
1675 8093 Email Address 2 Address | |
36 | 1676 8094 Email Address 2 Description |
24 | 1677 8095 Email Address 2 Record |
36 | 1678 80a2 Email Address 3 Transport |
24 | 1679 80a3 Email Address 3 Address |
1680 80a4 Email Address 3 Description | |
1681 80a5 Email Address 3 Record | |
1682 80d8 Internet Free/Busy | |
1683 8205 Appointment shows as | |
1684 8208 Appointment Location | |
51 | 1685 820d Appointment start |
1686 820e Appointment end | |
24 | 1687 8214 Label for appointment |
32 | 1688 8215 All day appointment flag |
51 | 1689 8231 Recurrence type |
1690 8232 Recurrence description | |
24 | 1691 8234 TimeZone of times |
51 | 1692 8235 Recurrence Start Time |
1693 8236 Recurrence End Time | |
1694 8501 Reminder minutes before appointment start | |
1695 8503 Reminder alarm | |
1696 8516 Common Time Start | |
1697 8517 Common Time End | |
1698 851f Play reminder sound filename | |
24 | 1699 8530 Followup String |
1700 8534 Mileage | |
1701 8535 Billing Information | |
1702 8554 Outlook Version | |
1703 8560 Appointment Reminder Time | |
1704 8700 Journal Entry Type | |
1705 8706 Start Timestamp | |
1706 8708 End Timestamp | |
51 | 1707 8712 Journal Entry Type - duplicate? |
24 | 1708 ]]></literallayout> |
1709 </refsect1> | |
1710 | |
28 | 1711 <refsect1 id='pst.file.desc2.5'> |
1712 <title>Associated Descriptor Item 0x7cec</title> | |
1713 <para> | |
35 | 1714 This style of descriptor block is similar to the 0xbcec format. |
28 | 1715 </para> |
1716 <literallayout class="monospaced"><![CDATA[ | |
1717 0000 7a 01 ec 7c 40 00 00 00 00 00 00 00 b5 04 02 00 | |
1718 0010 60 00 00 00 7c 18 60 00 60 00 62 00 65 00 20 00 | |
1719 0020 00 00 80 00 00 00 00 00 00 00 03 00 20 0e 0c 00 | |
1720 0030 04 03 1e 00 01 30 2c 00 04 0b 1e 00 03 37 28 00 | |
1721 0040 04 0a 1e 00 04 37 14 00 04 05 03 00 05 37 10 00 | |
1722 0050 04 04 1e 00 07 37 24 00 04 09 1e 00 08 37 20 00 | |
1723 0060 04 08 02 01 0a 37 18 00 04 06 03 00 0b 37 08 00 | |
1724 0070 04 02 1e 00 0d 37 1c 00 04 07 1e 00 0e 37 40 00 | |
1725 0080 04 10 02 01 0f 37 30 00 04 0c 1e 00 11 37 34 00 | |
1726 0090 04 0d 1e 00 12 37 3c 00 04 0f 1e 00 13 37 38 00 | |
1727 00A0 04 0e 03 00 f2 67 00 00 04 00 03 00 f3 67 04 00 | |
1728 00B0 04 01 03 00 09 69 44 00 04 11 03 00 fa 7f 5c 00 | |
1729 00C0 04 15 40 00 fb 7f 4c 00 08 13 40 00 fc 7f 54 00 | |
1730 00D0 08 14 03 00 fd 7f 48 00 04 12 0b 00 fe 7f 60 00 | |
1731 00E0 01 16 0b 00 ff 7f 61 00 01 17 45 82 00 00 00 00 | |
1732 00F0 45 82 00 00 78 3c 00 00 ff ff ff ff 49 1e 00 00 | |
1733 0100 06 00 00 00 00 00 00 00 a0 00 00 00 00 00 00 00 | |
1734 0110 00 00 00 00 00 00 00 00 00 00 00 00 c0 00 00 00 | |
1735 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
1736 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 40 dd a3 | |
1737 0140 57 45 b3 0c 00 40 dd a3 57 45 b3 0c 02 00 00 00 | |
1738 0150 00 00 fa 10 3e 2a 86 48 86 f7 14 03 0a 03 02 01 | |
1739 0160 4a 2e 20 44 61 76 69 64 20 4b 61 72 61 6d 27 73 | |
1740 0170 20 42 69 72 74 68 64 61 79 00 06 00 00 00 0c 00 | |
1741 0180 14 00 ea 00 f0 00 55 01 60 01 79 01 | |
1742 | |
1743 0000 indexOffset [2 bytes] 0x017a in this case | |
1744 0002 signature [2 bytes] 0x7cec constant | |
35 | 1745 0004 7coffset [4 bytes] 0x0040 index reference |
28 | 1746 ]]></literallayout> |
1747 <para> | |
1748 Note the signature of 0x7cec. There are other descriptor block | |
1749 formats with other signatures. | |
1750 Note the indexOffset of 0x017a - starting at that position in the | |
1751 descriptor block, we have an array of two byte integers. The first | |
1752 integer (0x0006) is a (count-1) of the number of overlapping pairs | |
1753 following the count. The first pair is (0, 0xc), the next pair is (0xc, 0x14) | |
1754 and the last (7th) pair is (0x160, 0x179). These pairs are (start,end+1) | |
1755 offsets of items in this block. So we have count+2 integers following | |
1756 the count value. | |
1757 </para> | |
1758 <para> | |
35 | 1759 Note the 7coffset of 0x0040, which is an index reference. In this case, |
1760 it is an internal reference pointer, which needs to be right shifted by 4 bits | |
28 | 1761 to become 0x0004, which is then a byte offset to be added to the above |
1762 indexOffset plus two (to skip the count), so it points to the (0x14, 0xea) | |
1763 pair. We have the offset and size of the "7c" block located at offset 0x14 | |
1764 with a size of 214 bytes in this case. The "7c" block starts with | |
1765 a header with the following format: | |
1766 </para> | |
1767 <literallayout class="monospaced"><![CDATA[ | |
1768 0000 signature [1 bytes] 0x7c constant | |
1769 0001 itemCount [1 bytes] 0x18 in this case | |
1770 0002 unknown [2 bytes] 0x0060 in this case | |
1771 0004 unknown [2 bytes] 0x0060 in this case | |
1772 0006 unknown [2 bytes] 0x0062 in this case | |
1773 0008 recordSize [2 bytes] 0x0065 in this case | |
35 | 1774 000a b5Offset [4 bytes] 0x0020 index reference |
1775 000e index2Offset [4 bytes] 0x0080 index reference | |
28 | 1776 0010 unknown [2 bytes] 0x0000 in this case |
1777 0012 unknown [2 bytes] 0x0000 in this case | |
1778 0014 unknown [2 bytes] 0x0000 in this case | |
1779 ]]></literallayout> | |
1780 <para> | |
35 | 1781 Note the b5Offset of 0x0020, which is an index reference. In this case, |
1782 it is an internal reference pointer, which needs to be right shifted by 4 bits | |
28 | 1783 to become 0x0002, which is then a byte offset to be added to the above |
1784 indexOffset plus two (to skip the count), so it points to the (0xc, | |
1785 0x14) pair. Finally, we have the offset and size of the "b5" block | |
1786 located at offset 0xc with a size of 8 bytes in this descriptor block. | |
1787 The "b5" block has the following format: | |
1788 </para> | |
1789 <literallayout class="monospaced"><![CDATA[ | |
1790 0000 signature [2 bytes] 0x04b5 constant | |
1791 0002 unknown [2 bytes] 0x0002 in this case | |
35 | 1792 0004 descoffset [4 bytes] 0x0060 index reference |
28 | 1793 ]]></literallayout> |
1794 <para> | |
35 | 1795 Note the descoffset of 0x0060, which again is an index reference. In this |
1796 case, it is an internal pointer reference, which needs to be right shifted by 4 | |
28 | 1797 bits to become 0x0006, which is then a byte offset to be added to the |
1798 above indexOffset plus two (to skip the count), so it points to the | |
1799 (0xea, 0xf0) pair. That gives us (0xf0 - 0xea)/6 = 1, so we have a | |
1800 recordCount of one. The actual data between 0xea and 0xf0 is unknown | |
1801 and unused here. | |
1802 </para> | |
1803 <para> | |
35 | 1804 Note the index2Offset above of 0x0080, which again is an index reference. In this |
1805 case, it is an internal pointer reference, which needs to be right shifted | |
28 | 1806 by 4 bits to become 0x0008, which is then a byte offset to be added to |
1807 the above indexOffset plus two (to skip the count), so it points to the | |
1808 (0xf0, 0x155) pair. This is an array of tables of four byte integers. | |
1809 We will call these the IND2 tables. The size of each of these tables is | |
1810 specified by the recordSize field of the "7c" header. The number of | |
1811 these tables is the above recordCount value derived from the "b5" block. | |
1812 </para> | |
1813 <para> | |
1814 Now the remaining data in the "7c" block after the header starts at | |
1815 offset 0x2a. There should be itemCount 8 byte items here, with the | |
1816 following format: | |
1817 </para> | |
1818 <literallayout class="monospaced"><![CDATA[ | |
1819 0000 referenceType [2 bytes] | |
1820 0002 itemType [2 bytes] | |
1821 0004 ind2Offset [2 bytes] | |
35 | 1822 0006 size [1 byte] |
1823 0007 unknown [1 byte] | |
28 | 1824 ]]></literallayout> |
1825 <para> | |
35 | 1826 The ind2Offset is a byte offset into the current IND2 table of some value. |
1827 If that is a four byte integer value, then once we fetch that, we have | |
1828 the same triple (item type, reference type, value) as we find in the | |
1829 0xbcec style descriptor blocks. If not, then this value is used directly. | |
1830 These 8 byte descriptors are processed recordCount times, each | |
28 | 1831 time using the next IND2 table. The item and reference types are as |
1832 described above for the 0xbcec format descriptor block. | |
1833 </para> | |
1834 </refsect1> | |
1835 | |
48 | 1836 <refsect1 id='pst.file.desc3.32.5'> |
1837 <title>32 bit Associated Descriptor Item 0x0101</title> | |
35 | 1838 <para> |
49 | 1839 This descriptor block contains a list of ID1 values. It is used when |
1840 an ID1 (that would normally point to a type 0x7cec or 0xbcec | |
1841 descriptor block) contains more data than can fit in any single | |
1842 descriptor of those types. In this case, it points to a type 0x0101 | |
1843 block, which contains a list of ID1 values that themselves point to | |
1844 the actual descriptor blocks. The total length value in the 0x0101 | |
1845 header is the sum of the lengths of the blocks pointed to by the list | |
1846 of ID1 values. The result is an array of subblocks, that may contain | |
1847 index references where the high order 16 bits specify which descriptor | |
1848 subblock to use. Only the first descriptor subblock contains the | |
1849 signature (0xbcec or 0x7cec). | |
35 | 1850 </para> |
1851 <literallayout class="monospaced"><![CDATA[ | |
1852 0000 01 01 02 00 26 28 00 00 18 77 0c 00 b8 04 00 00 | |
1853 | |
1854 0000 signature [2 bytes] 0x0101 constant | |
1855 0002 count [2 bytes] 0x0002 in this case | |
49 | 1856 0004 total length [4 bytes] 0x002826 in this case |
35 | 1857 repeating |
49 | 1858 0008 id1 [4 bytes] 0x0c7718 in this case |
1859 000c id1 [4 bytes] 0x0004b8 in this case | |
35 | 1860 ]]></literallayout> |
1861 </refsect1> | |
1862 | |
48 | 1863 <refsect1 id='pst.file.desc3.64.5'> |
1864 <title>64 bit Associated Descriptor Item 0x0101</title> | |
1865 <para> | |
1866 This descriptor block contains a list of ID1 values. | |
1867 </para> | |
1868 <literallayout class="monospaced"><![CDATA[ | |
1869 0000 01 01 02 00 ea 29 00 00 10 83 00 00 00 00 00 00 | |
1870 0010 1c 83 00 00 00 00 00 00 | |
1871 | |
1872 0000 signature [2 bytes] 0x0101 constant | |
1873 0002 count [2 bytes] 0x0002 in this case | |
49 | 1874 0004 total length [4 bytes] 0x0029ea in this case |
48 | 1875 repeating |
49 | 1876 0008 id1 [8 bytes] 0x008310 in this case |
1877 0010 id1 [8 bytes] 0x00831c in this case | |
48 | 1878 ]]></literallayout> |
1879 </refsect1> | |
1880 | |
24 | 1881 </refentry> |
16 | 1882 </reference> |