Mercurial > libpst
annotate xml/libpst.in @ 57:de3753c3160a
add archive directory with history of alioth versions that have been merged here
| author | Carl Byington <carl@five-ten-sg.com> |
|---|---|
| date | Sat, 02 Feb 2008 12:54:07 -0800 |
| parents | 0cdbd066f65a |
| children | a8b772313ff4 |
| rev | line source |
|---|---|
| 16 | 1 <reference> |
| 2 <title>@PACKAGE@ Utilities - Version @VERSION@</title> | |
| 3 <partintro> | |
| 4 <title>Packages</title> | |
| 31 | 5 |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
6 <para>This is a fork of the libpst project at SourceForge. Another fork |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
7 is located at <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
8 url="http://alioth.debian.org/projects/libpst/">http://alioth.debian.org/projects/libpst/</ulink> |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
9 </para> |
| 31 | 10 |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
11 <para>The various source and binary packages are available at <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
12 url="http://www.five-ten-sg.com/@PACKAGE@/packages/">http://www.five-ten-sg.com/@PACKAGE@/packages/</ulink>. |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
13 The most recent documentation is available at <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
14 url="http://www.five-ten-sg.com/@PACKAGE@/">http://www.five-ten-sg.com/@PACKAGE@/</ulink>. |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
15 </para> |
| 31 | 16 |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
17 <para>A <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
18 url="http://www.selenic.com/mercurial/wiki/">Mercurial</ulink> source |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
19 code repository for this project is available at <ulink |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
20 url="http://hg.five-ten-sg.com/@PACKAGE@/">http://hg.five-ten-sg.com/@PACKAGE@/</ulink>. |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
21 </para> |
|
54
e109391424b5
some misc. cleanup and convert to mercurial source control
carl@ns.five-ten-sg.com
parents:
52
diff
changeset
|
22 |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
23 <para>This version can now convert both 32 bit Outlook files (pre 2003), and the |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
24 64 bit Outlook 2003 pst files. |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
25 </para> |
| 51 | 26 |
| 24 | 27 </partintro> |
| 16 | 28 |
| 29 | |
| 30 <refentry id="readpst.1"> | |
| 31 <refentryinfo> | |
| 52 | 32 <date>2008-01-27</date> |
| 16 | 33 </refentryinfo> |
| 34 | |
| 35 <refmeta> | |
| 36 <refentrytitle>readpst</refentrytitle> | |
| 37 <manvolnum>1</manvolnum> | |
| 38 <refmiscinfo>readpst @VERSION@</refmiscinfo> | |
| 39 </refmeta> | |
| 40 | |
| 20 | 41 <refnamediv id='readpst.name.1'> |
| 16 | 42 <refname>readpst</refname> |
| 51 | 43 <refpurpose>convert PST (MS Outlook Personal Folders) files to mbox and other formats</refpurpose> |
| 16 | 44 </refnamediv> |
| 45 | |
| 20 | 46 <refsynopsisdiv id='readpst.synopsis.1'> |
| 16 | 47 <title>Synopsis</title> |
| 48 <cmdsynopsis> | |
| 49 <command>readpst</command> | |
| 31 | 50 <arg><option>-b</option></arg> |
| 43 | 51 <arg><option>-C</option></arg> |
| 16 | 52 <arg><option>-c <replaceable class="parameter">format</replaceable></option></arg> |
| 53 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> | |
| 54 <arg><option>-h</option></arg> | |
| 55 <arg><option>-k</option></arg> | |
| 56 <arg><option>-o <replaceable class="parameter">output-directory</replaceable></option></arg> | |
| 57 <arg><option>-q</option></arg> | |
| 58 <arg><option>-r</option></arg> | |
| 59 <arg><option>-S</option></arg> | |
| 25 | 60 <arg><option>-M</option></arg> |
| 16 | 61 <arg><option>-V</option></arg> |
| 62 <arg><option>-w</option></arg> | |
| 43 | 63 <arg choice='plain'>pstfile</arg> |
| 16 | 64 </cmdsynopsis> |
| 65 </refsynopsisdiv> | |
| 66 | |
| 20 | 67 <refsect1 id='readpst.description.1'> |
| 68 <title>Description</title> | |
| 28 | 69 <para><command>readpst</command> is a program that can read an Outlook |
| 70 PST (Personal Folders) file and convert it into an mbox file, a format | |
| 71 suitable for KMail, a recursive mbox structure, or separate emails. | |
| 20 | 72 </para> |
| 73 </refsect1> | |
| 74 | |
| 75 <refsect1 id='readpst.options.1'> | |
| 16 | 76 <title>Options</title> |
| 77 <variablelist> | |
| 78 <varlistentry> | |
| 31 | 79 <term>-b</term> |
| 80 <listitem><para> | |
| 81 Do not save the attachments for the RTF format of the email body. | |
| 82 </para></listitem> | |
| 83 </varlistentry> | |
| 84 <varlistentry> | |
| 43 | 85 <term>-C</term> |
| 86 <listitem><para> | |
| 87 Decrypt the entire pst file and dump it to stdout. | |
| 88 </para></listitem> | |
| 89 </varlistentry> | |
| 90 <varlistentry> | |
| 16 | 91 <term>-c <replaceable class="parameter">format</replaceable></term> |
| 92 <listitem><para> | |
| 93 Set the Contact output mode. Use -cv for vcard format or -cl for an email list. | |
| 94 </para></listitem> | |
| 95 </varlistentry> | |
| 96 <varlistentry> | |
| 97 <term>-d <replaceable class="parameter">debug-file</replaceable></term> | |
| 98 <listitem><para> | |
|
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
99 Specify name of debug log file. The |
| 28 | 100 log file is not an ascii file, it is a binary file readable |
| 101 by <command>readpstlog</command>. | |
| 16 | 102 </para></listitem> |
| 103 </varlistentry> | |
| 104 <varlistentry> | |
| 105 <term>-h</term> | |
| 106 <listitem><para> | |
| 31 | 107 Show summary of options and exit. |
| 16 | 108 </para></listitem> |
| 109 </varlistentry> | |
| 110 <varlistentry> | |
| 111 <term>-k</term> | |
| 112 <listitem><para> | |
| 113 Changes the output format to KMail. | |
| 114 </para></listitem> | |
| 115 </varlistentry> | |
| 116 <varlistentry> | |
| 20 | 117 <term>-o <replaceable class="parameter">output-directory</replaceable></term> |
| 16 | 118 <listitem><para> |
| 119 Specifies the output directory. The directory must already exist, and | |
| 120 is entered after the PST file is opened, but before any processing of | |
| 121 files commences. | |
| 122 </para></listitem> | |
| 123 </varlistentry> | |
| 124 <varlistentry> | |
| 125 <term>-q</term> | |
| 126 <listitem><para> | |
| 127 Changes to silent mode. No feedback is printed to the screen, except | |
| 128 for error messages. | |
| 129 </para></listitem> | |
| 130 </varlistentry> | |
| 131 <varlistentry> | |
| 132 <term>-r</term> | |
| 133 <listitem><para> | |
| 134 Changes the output format to Recursive. This will create folders as | |
| 21 | 135 named in the PST file, and will put all emails in a file called "mbox" |
| 16 | 136 inside each folder. These files are then compatible with all |
| 137 mbox-compatible email clients. | |
| 138 </para></listitem> | |
| 139 </varlistentry> | |
| 140 <varlistentry> | |
| 141 <term>-S</term> | |
| 142 <listitem><para> | |
| 25 | 143 Output messages into separate files. This will create folders as named |
| 144 in the PST file, and will put each email in its own file. These files | |
| 28 | 145 will be numbered from 1 increasing in intervals of 1 (ie 1, 2, 3, ...). |
| 146 Any attachments are saved alongside each email as XXXXXXXXX-attach1, | |
| 147 XXXXXXXXX-attach2 and so on, or with the name of the attachment if one | |
| 148 is present. | |
| 16 | 149 </para></listitem> |
| 150 </varlistentry> | |
| 151 <varlistentry> | |
| 25 | 152 <term>-M</term> |
| 153 <listitem><para> | |
| 154 Output messages in MH format as separate files. This will create | |
| 28 | 155 folders as named in the PST file, and will put each email together with |
| 156 any attachments into its own file. These files will be numbered from 1 | |
| 157 to n with no leading zeros. | |
| 25 | 158 </para></listitem> |
| 159 </varlistentry> | |
| 160 <varlistentry> | |
| 16 | 161 <term>-V</term> |
| 162 <listitem><para> | |
| 31 | 163 Show program version and exit. |
| 16 | 164 </para></listitem> |
| 165 </varlistentry> | |
| 166 <varlistentry> | |
| 167 <term>-w</term> | |
| 168 <listitem><para> | |
| 20 | 169 Overwrite any previous output files. Beware: When used with the -S |
| 16 | 170 switch, this will remove all files from the target folder before |
| 171 writing. This is to keep the count of emails and attachments correct. | |
| 172 </para></listitem> | |
| 173 </varlistentry> | |
| 174 </variablelist> | |
| 175 </refsect1> | |
| 176 | |
| 20 | 177 <refsect1 id='readpst.also.1'> |
| 16 | 178 <title>See Also</title> |
| 179 <para> | |
| 25 | 180 <citerefentry><refentrytitle>readpstlog</refentrytitle> <manvolnum>1</manvolnum> </citerefentry> |
| 16 | 181 </para> |
| 182 </refsect1> | |
| 183 | |
| 20 | 184 <refsect1 id='readpst.author.1'> |
| 16 | 185 <title>Author</title> |
| 186 <para> | |
| 187 This manual page was originally written by Dave Smith | |
| 188 <dave.s@earthcorp.com>, and updated by Joe Nahmias <joe@nahmias.net> | |
| 189 for the Debian GNU/Linux system (but may be used by others). It was | |
| 20 | 190 subsequently updated by Brad Hards <bradh@frogmouth.net>, and converted to |
| 16 | 191 xml format by Carl Byington <carl@five-ten-sg.com>. |
| 192 </para> | |
| 193 </refsect1> | |
| 194 | |
| 20 | 195 <refsect1 id='readpst.copyright.1'> |
| 16 | 196 <title>Copyright</title> |
| 197 <para> | |
| 198 Copyright (C) 2002 by David Smith <dave.s@earthcorp.com>. | |
| 28 | 199 XML version Copyright (C) 2006 by 510 Software Group <carl@five-ten-sg.com>. |
| 16 | 200 </para> |
| 201 <para> | |
| 202 This program is free software; you can redistribute it and/or modify it | |
| 203 under the terms of the GNU General Public License as published by the | |
| 204 Free Software Foundation; either version 2, or (at your option) any | |
| 205 later version. | |
| 206 </para> | |
| 207 <para> | |
| 208 You should have received a copy of the GNU General Public License along | |
| 209 with this program; see the file COPYING. If not, please write to the | |
| 210 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
| 211 </para> | |
| 212 </refsect1> | |
| 213 | |
| 20 | 214 <refsect1 id='readpst.version.1'> |
| 52 | 215 <title>Version</title> |
| 16 | 216 <para> |
| 52 | 217 @VERSION@ |
| 16 | 218 </para> |
| 219 </refsect1> | |
| 220 </refentry> | |
| 221 | |
| 222 | |
| 43 | 223 <refentry id="lspst.1"> |
| 224 <refentryinfo> | |
| 52 | 225 <date>2008-01-27</date> |
| 43 | 226 </refentryinfo> |
| 227 | |
| 228 <refmeta> | |
| 229 <refentrytitle>lspst</refentrytitle> | |
| 230 <manvolnum>1</manvolnum> | |
| 231 <refmiscinfo>lspst @VERSION@</refmiscinfo> | |
| 232 </refmeta> | |
| 233 | |
| 234 <refnamediv id='lspst.name.1'> | |
| 235 <refname>lspst</refname> | |
| 236 <refpurpose>list PST (MS Outlook Personal Folders) file data</refpurpose> | |
| 237 </refnamediv> | |
| 238 | |
| 239 <refsynopsisdiv id='lspst.synopsis.1'> | |
| 240 <title>Synopsis</title> | |
| 241 <cmdsynopsis> | |
| 242 <command>lspst</command> | |
| 50 | 243 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> |
| 244 <arg><option>-h</option></arg> | |
| 245 <arg><option>-V</option></arg> | |
| 43 | 246 <arg choice='plain'>pstfile</arg> |
| 247 </cmdsynopsis> | |
| 248 </refsynopsisdiv> | |
| 249 | |
| 50 | 250 <refsect1 id='lspst.options.1'> |
| 251 <title>Options</title> | |
| 252 <variablelist> | |
| 253 <varlistentry> | |
| 254 <term>-d <replaceable class="parameter">debug-file</replaceable></term> | |
| 255 <listitem><para> | |
| 256 Specify name of debug log file. The | |
| 257 log file is not an ascii file, it is a binary file readable | |
| 258 by <command>readpstlog</command>. | |
| 259 </para></listitem> | |
| 260 </varlistentry> | |
| 261 <varlistentry> | |
| 262 <term>-h</term> | |
| 263 <listitem><para> | |
| 264 Show summary of options and exit. | |
| 265 </para></listitem> | |
| 266 </varlistentry> | |
| 267 <varlistentry> | |
| 268 <term>-V</term> | |
| 269 <listitem><para> | |
| 270 Show program version and exit. | |
| 271 </para></listitem> | |
| 272 </varlistentry> | |
| 273 </variablelist> | |
| 274 </refsect1> | |
| 275 | |
| 43 | 276 <refsect1 id='lspst.description.1'> |
| 277 <title>Description</title> | |
| 278 <para><command>lspst</command> is a program that can read an Outlook | |
| 279 PST (Personal Folders) file and produce a simple listing of the | |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
280 data (contacts, email subjects, etc). |
| 43 | 281 </para> |
| 282 </refsect1> | |
| 283 | |
| 284 <refsect1 id='lspst.also.1'> | |
| 285 <title>See Also</title> | |
| 286 <para> | |
| 287 <citerefentry><refentrytitle>readpstlog</refentrytitle> <manvolnum>1</manvolnum> </citerefentry> | |
| 288 </para> | |
| 289 </refsect1> | |
| 290 | |
| 291 <refsect1 id='lspst.author.1'> | |
| 292 <title>Author</title> | |
| 293 <para> | |
| 294 lspst was written by Joe Nahmias <joe@nahmias.net> based on readpst. | |
| 295 This man page was written by 510 Software Group <carl@five-ten-sg.com>. | |
| 296 </para> | |
| 297 </refsect1> | |
| 298 | |
| 299 <refsect1 id='lspst.copyright.1'> | |
| 300 <title>Copyright</title> | |
| 301 <para> | |
| 302 Copyright (C) 2004 by Joe Nahmias <joe@nahmias.net>. | |
| 303 </para> | |
| 304 <para> | |
| 305 This program is free software; you can redistribute it and/or modify it | |
| 306 under the terms of the GNU General Public License as published by the | |
| 307 Free Software Foundation; either version 2, or (at your option) any | |
| 308 later version. | |
| 309 </para> | |
| 310 <para> | |
| 311 You should have received a copy of the GNU General Public License along | |
| 312 with this program; see the file COPYING. If not, please write to the | |
| 313 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
| 314 </para> | |
| 315 </refsect1> | |
| 316 | |
| 317 <refsect1 id='lspst.version.1'> | |
| 52 | 318 <title>Version</title> |
| 43 | 319 <para> |
| 52 | 320 @VERSION@ |
| 43 | 321 </para> |
| 322 </refsect1> | |
| 323 </refentry> | |
| 324 | |
| 325 | |
| 16 | 326 <refentry id="readpstlog.1"> |
| 327 <refentryinfo> | |
| 52 | 328 <date>2008-01-27</date> |
| 16 | 329 </refentryinfo> |
| 330 | |
| 331 <refmeta> | |
| 332 <refentrytitle>readpstlog</refentrytitle> | |
| 333 <manvolnum>1</manvolnum> | |
| 334 <refmiscinfo>readpstlog @VERSION@</refmiscinfo> | |
| 335 </refmeta> | |
| 336 | |
| 20 | 337 <refnamediv id='readpstlog.name.1'> |
| 16 | 338 <refname>readpstlog</refname> |
| 24 | 339 <refpurpose>convert a <command>readpst</command> logfile to text format</refpurpose> |
| 16 | 340 </refnamediv> |
| 341 | |
| 20 | 342 <refsynopsisdiv id='readpstlog.synopsis.1'> |
| 16 | 343 <title>Synopsis</title> |
| 344 <cmdsynopsis> | |
| 24 | 345 <command>readpstlog</command> |
| 16 | 346 <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg> |
| 347 <arg><option>-t <replaceable class="parameter">include-types</replaceable></option></arg> | |
| 348 <arg><option>-x <replaceable class="parameter">exclude-types</replaceable></option></arg> | |
| 24 | 349 <arg choice='plain'>logfile</arg> |
| 16 | 350 </cmdsynopsis> |
| 351 </refsynopsisdiv> | |
| 352 | |
| 20 | 353 <refsect1 id='readpstlog.description.1'> |
| 354 <title>Description</title> | |
| 21 | 355 <para><command>readpstlog</command> |
| 24 | 356 is a program that converts the binary logfile generated |
| 357 by <command>readpst</command> to a more desirable text format. | |
| 20 | 358 </para> |
| 359 </refsect1> | |
| 360 | |
| 361 <refsect1 id='readpstlog.options.1'> | |
| 16 | 362 <title>Options</title> |
| 363 <variablelist> | |
| 364 <varlistentry> | |
| 365 <term>-f <replaceable class="parameter">format</replaceable></term> | |
| 366 <listitem><para> | |
| 367 Sets the format of the text log output. Currently, the only valid output | |
| 36 | 368 formats are T, for single line text, D for the default default multi line |
| 369 format, and I for an indented style with single line text. | |
| 16 | 370 </para></listitem> |
| 371 </varlistentry> | |
| 372 <varlistentry> | |
| 373 <term>-t <replaceable class="parameter">include-types</replaceable></term> | |
| 374 <listitem><para> | |
| 375 Print only the specified types of log messages. | |
| 376 Types are specified in a comma-delimited list (e.g. 3,10,5,6). | |
| 377 </para></listitem> | |
| 378 </varlistentry> | |
| 379 <varlistentry> | |
| 380 <term>-x <replaceable class="parameter">exclude-types</replaceable></term> | |
| 381 <listitem><para> | |
| 382 Exclude the specified types of log messages. | |
| 383 Types are specified in a comma-delimited list (e.g. 3,10,5,6). | |
| 384 </para></listitem> | |
| 385 </varlistentry> | |
| 386 </variablelist> | |
| 387 </refsect1> | |
| 388 | |
| 20 | 389 <refsect1 id='readpstlog.message.types.1'> |
| 16 | 390 <title>Message Types</title> |
| 24 | 391 <para><command>readpstlog</command> understands the following types of log |
| 392 messages: | |
| 16 | 393 </para> |
| 394 <variablelist> | |
| 20 | 395 <varlistentry> |
| 396 <term>1</term> | |
| 397 <listitem><para> | |
| 398 File accesses | |
| 399 </para></listitem> | |
| 400 </varlistentry> | |
| 401 <varlistentry> | |
| 402 <term>2</term> | |
| 403 <listitem><para> | |
| 404 Index accesses | |
| 405 </para></listitem> | |
| 406 </varlistentry> | |
| 407 <varlistentry> | |
| 408 <term>3</term> | |
| 409 <listitem><para> | |
| 410 New email found | |
| 411 </para></listitem> | |
| 412 </varlistentry> | |
| 413 <varlistentry> | |
| 414 <term>4</term> | |
| 415 <listitem><para> | |
| 416 Warnings | |
| 417 </para></listitem> | |
| 418 </varlistentry> | |
| 419 <varlistentry> | |
| 420 <term>5</term> | |
| 421 <listitem><para> | |
| 422 Read accesses | |
| 423 </para></listitem> | |
| 424 </varlistentry> | |
| 425 <varlistentry> | |
| 426 <term>6</term> | |
| 427 <listitem><para> | |
| 428 Informational messages | |
| 429 </para></listitem> | |
| 430 </varlistentry> | |
| 431 <varlistentry> | |
| 432 <term>7</term> | |
| 433 <listitem><para> | |
| 434 Main function calls | |
| 435 </para></listitem> | |
| 436 </varlistentry> | |
| 437 <varlistentry> | |
| 438 <term>8</term> | |
| 439 <listitem><para> | |
| 440 Decrypting calls | |
| 441 </para></listitem> | |
| 442 </varlistentry> | |
| 443 <varlistentry> | |
| 36 | 444 <term>9</term> |
| 445 <listitem><para> | |
| 446 Function entries | |
| 447 </para></listitem> | |
| 448 </varlistentry> | |
| 449 <varlistentry> | |
| 20 | 450 <term>10</term> |
| 451 <listitem><para> | |
| 36 | 452 Function exits |
| 20 | 453 </para></listitem> |
| 454 </varlistentry> | |
| 455 <varlistentry> | |
| 456 <term>11</term> | |
| 457 <listitem><para> | |
| 458 HexDump calls | |
| 459 </para></listitem> | |
| 460 </varlistentry> | |
| 16 | 461 </variablelist> |
| 462 </refsect1> | |
| 463 | |
| 20 | 464 <refsect1 id='readpstlog.author.1'> |
| 16 | 465 <title>Author</title> |
| 466 <para> | |
| 467 This manual page was written by Joe Nahmias <joe@nahmias.net> | |
| 468 for the Debian GNU/Linux system (but may be used by others). It was | |
| 469 converted to xml format by Carl Byington <carl@five-ten-sg.com>. | |
| 470 </para> | |
| 471 </refsect1> | |
| 472 | |
| 20 | 473 <refsect1 id='readpstlog.copyright.1'> |
| 16 | 474 <title>Copyright</title> |
| 475 <para> | |
| 476 Copyright (C) 2002 by David Smith <dave.s@earthcorp.com>. | |
| 477 XML version Copyright (C) 2005 by 510 Software Group <carl@five-ten-sg.com>. | |
| 478 </para> | |
| 479 <para> | |
| 480 This program is free software; you can redistribute it and/or modify it | |
| 481 under the terms of the GNU General Public License as published by the | |
| 482 Free Software Foundation; either version 2, or (at your option) any | |
| 483 later version. | |
| 484 </para> | |
| 485 <para> | |
| 486 You should have received a copy of the GNU General Public License along | |
| 487 with this program; see the file COPYING. If not, please write to the | |
| 488 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
| 489 </para> | |
| 490 </refsect1> | |
| 491 | |
| 20 | 492 <refsect1 id='readpstlog.version.1'> |
| 52 | 493 <title>Version</title> |
| 16 | 494 <para> |
| 52 | 495 @VERSION@ |
| 16 | 496 </para> |
| 497 </refsect1> | |
| 498 </refentry> | |
| 24 | 499 |
| 500 | |
| 501 <refentry id="pst2ldif.1"> | |
| 502 <refentryinfo> | |
| 52 | 503 <date>2008-01-27</date> |
| 24 | 504 </refentryinfo> |
| 505 | |
| 506 <refmeta> | |
| 507 <refentrytitle>pst2ldif</refentrytitle> | |
| 508 <manvolnum>1</manvolnum> | |
| 509 <refmiscinfo>pst2ldif @VERSION@</refmiscinfo> | |
| 510 </refmeta> | |
| 511 | |
| 512 <refnamediv id='pst2ldif.name.1'> | |
| 513 <refname>pst2ldif</refname> | |
| 514 <refpurpose>extract contacts from a MS Outlook .pst file in .ldif format</refpurpose> | |
| 515 </refnamediv> | |
| 516 | |
| 517 <refsynopsisdiv id='pst2ldif.synopsis.1'> | |
| 518 <title>Synopsis</title> | |
| 519 <cmdsynopsis> | |
| 520 <command>pst2ldif</command> | |
| 521 <arg><option>-h</option></arg> | |
| 522 <arg><option>-V</option></arg> | |
| 523 <arg><option>-b <replaceable class="parameter">ldap-base</replaceable></option></arg> | |
| 524 <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg> | |
|
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
525 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> |
| 24 | 526 <arg choice='plain'>pstfilename</arg> |
| 527 </cmdsynopsis> | |
| 528 </refsynopsisdiv> | |
| 529 | |
| 530 <refsect1 id='pst2ldif.options.1'> | |
| 531 <title>Options</title> | |
| 532 <variablelist> | |
| 533 <varlistentry> | |
| 534 <term>-h</term> | |
| 535 <listitem><para> | |
| 536 Show summary of options. Subsequent options are then ignored. | |
| 537 </para></listitem> | |
| 538 </varlistentry> | |
| 539 <varlistentry> | |
| 540 <term>-V <replaceable class="parameter">include-types</replaceable></term> | |
| 541 <listitem><para> | |
| 542 Show program version. Subsequent options are then ignored. | |
| 543 </para></listitem> | |
| 544 </varlistentry> | |
| 545 <varlistentry> | |
| 546 <term>-b <replaceable class="parameter">ldap-base</replaceable></term> | |
| 547 <listitem><para> | |
| 548 Sets the ldap base value used in the dn records. You probably want to | |
| 549 use something like "o=organization, c=US". | |
| 550 </para></listitem> | |
| 551 </varlistentry> | |
| 552 <varlistentry> | |
| 553 <term>-c <replaceable class="parameter">class</replaceable></term> | |
| 554 <listitem><para> | |
| 555 Sets the objectClass values for the contact items. This class needs to be | |
| 556 defined in the schema used by your LDAP server, and at a minimum it must | |
| 557 contain the ldap attributes given below. | |
| 558 </para></listitem> | |
| 559 </varlistentry> | |
|
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
560 <varlistentry> |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
561 <term>-d <replaceable class="parameter">debug-file</replaceable></term> |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
562 <listitem><para> |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
563 Specify name of debug log file. The |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
564 log file is not an ascii file, it is a binary file readable |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
565 by <command>readpstlog</command>. |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
566 </para></listitem> |
|
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
567 </varlistentry> |
| 24 | 568 </variablelist> |
| 569 </refsect1> | |
| 570 | |
| 571 <refsect1 id='pst2ldif.description.1'> | |
| 572 <title>Description</title> | |
| 573 <para><command>pst2ldif</command> | |
| 574 reads the contact information from a MS Outlook .pst file | |
| 575 and produces a .ldif file that may be used to import those contacts | |
| 576 into an LDAP database. The following ldap attributes are generated: | |
| 577 <simplelist> | |
| 578 <member>cn </member> | |
| 579 <member>givenName </member> | |
| 580 <member>sn </member> | |
| 581 <member>personalTitle </member> | |
| 582 <member>company </member> | |
| 583 <member>mail </member> | |
| 584 <member>postalAddress </member> | |
| 585 <member>l </member> | |
| 586 <member>st </member> | |
| 587 <member>postalCode </member> | |
| 588 <member>c </member> | |
| 589 <member>homePhone </member> | |
| 590 <member>telephoneNumber </member> | |
| 591 <member>facsimileTelephoneNumber </member> | |
| 592 <member>mobile </member> | |
| 593 <member>description </member> | |
| 594 </simplelist> | |
| 595 </para> | |
| 596 </refsect1> | |
| 597 | |
| 598 <refsect1 id='pst2ldif.copyright.1'> | |
| 599 <title>Copyright</title> | |
| 600 <para> | |
| 601 Copyright (C) 2006 by 510 Software Group <carl@five-ten-sg.com> | |
| 602 </para> | |
| 603 <para> | |
| 604 This program is free software; you can redistribute it and/or modify it | |
| 605 under the terms of the GNU General Public License as published by the | |
| 606 Free Software Foundation; either version 2, or (at your option) any | |
| 607 later version. | |
| 608 </para> | |
| 609 <para> | |
| 610 You should have received a copy of the GNU General Public License along | |
| 611 with this program; see the file COPYING. If not, please write to the | |
| 612 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
| 613 </para> | |
| 614 </refsect1> | |
| 615 | |
| 616 <refsect1 id='pst2ldif.version.1'> | |
| 52 | 617 <title>Version</title> |
| 24 | 618 <para> |
| 52 | 619 @VERSION@ |
| 24 | 620 </para> |
| 621 </refsect1> | |
| 622 </refentry> | |
| 623 | |
| 624 | |
| 625 <refentry id="pst.5"> | |
| 626 <refentryinfo> | |
| 52 | 627 <date>2008-01-27</date> |
| 24 | 628 </refentryinfo> |
| 629 | |
| 630 <refmeta> | |
| 631 <refentrytitle>outlook.pst</refentrytitle> | |
| 632 <manvolnum>5</manvolnum> | |
| 633 </refmeta> | |
| 634 | |
| 635 <refnamediv id='pst.name.1'> | |
| 636 <refname>outlook.pst</refname> | |
| 637 <refpurpose>format of MS Outlook .pst file</refpurpose> | |
| 638 </refnamediv> | |
| 639 | |
| 640 <refsynopsisdiv id='pst.synopsis.1'> | |
| 641 <title>Synopsis</title> | |
| 642 <cmdsynopsis> | |
| 643 <command>outlook.pst</command> | |
| 644 </cmdsynopsis> | |
| 645 </refsynopsisdiv> | |
| 646 | |
| 647 <refsect1 id='pst.file.overview.5'> | |
| 648 <title>Overview</title> | |
| 649 <para> | |
| 650 Each item in a .pst file is identified by two id values ID1 and ID2. | |
| 651 There are two separate b-trees indexed by these ID1 and ID2 values. | |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
652 Starting with Outlook 2003, the file format changed from one with 32 |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
653 bit pointers, to one with 64 bit pointers. We describe both formats |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
654 here. |
| 24 | 655 </para> |
| 656 </refsect1> | |
| 657 | |
| 44 | 658 <refsect1 id='pst.file.header.32.5'> |
| 659 <title>32 bit File Header</title> | |
| 24 | 660 <para> |
| 44 | 661 The 32 bit file header is located at offset 0 in the .pst file. |
| 24 | 662 </para> |
| 663 <literallayout class="monospaced"><![CDATA[ | |
| 664 0000 21 42 44 4e 49 f8 64 d9 53 4d 0e 00 13 00 01 01 | |
| 665 0010 00 00 00 00 00 00 00 00 50 d6 03 00 bd 1e 02 00 | |
| 666 0020 08 4c 00 00 00 04 00 00 00 04 00 00 0f 04 00 00 | |
| 667 0030 0d 40 00 00 99 0a 01 00 18 04 00 00 0d 40 00 00 | |
| 668 0040 0d 40 00 00 11 80 00 00 02 04 00 00 0a 04 00 00 | |
| 669 0050 00 04 00 00 00 04 00 00 0f 04 00 00 0f 04 00 00 | |
| 670 0060 0f 04 00 00 0d 40 00 00 00 04 00 00 00 04 00 00 | |
| 671 0070 04 40 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 672 0080 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 673 0090 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 674 00a0 0c 09 00 00 00 00 00 00 00 04 27 00 00 24 23 00 | |
| 675 00b0 c0 09 0a 00 00 c8 00 00 bc 1e 02 00 00 7e 0c 00 | |
| 676 00c0 b4 1e 02 00 00 54 00 00 01 00 00 00 23 55 44 d1 | |
| 677 00d0 5a 4f ce 6b 80 ff ff ff 00 00 00 00 00 00 00 00 | |
| 678 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 679 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 680 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 681 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 682 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 683 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 684 0140 00 00 00 00 00 00 00 00 00 00 00 00 3f ff ff ff | |
| 685 0150 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 686 0160 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 687 0170 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 688 0180 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 689 0190 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 690 01a0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 691 01b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 692 01c0 ff ff ff ff ff ff ff ff ff ff ff ff 80 01 00 00 | |
| 693 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 694 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 695 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 696 | |
| 697 0000 signature [4 bytes] 0x4e444221 constant | |
| 28 | 698 000a indexType [1 byte] 0x0e constant |
| 44 | 699 01cd encryptionType [1 byte] 0x01 in this case |
| 24 | 700 00a8 total file size [4 bytes] 0x270400 in this case |
| 28 | 701 00c0 backPointer1 [4 bytes] 0x021eb4 in this case |
| 702 00c4 offsetIndex1 [4 bytes] 0x005400 in this case | |
| 703 00b8 backPointer2 [4 bytes] 0x021ebc in this case | |
| 704 00bc offsetIndex2 [4 bytes] 0x0c7e00 in this case | |
| 24 | 705 ]]></literallayout> |
| 706 <para> | |
| 44 | 707 We only support index types 0x0e and 0x17, and encryption types |
| 708 0x00 and 0x01. Index type 0x0e is the older 32 bit Outlook format. | |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
709 Index type 0x17 is the newer 64 bit Outlook format. Encryption |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
710 type 0x00 is no encryption, and type 0x01 is the only other supported |
|
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
711 encryption type. |
| 24 | 712 </para> |
| 713 <para> | |
| 28 | 714 offsetIndex1 is the file offset of the root of the |
| 24 | 715 index1 b-tree, which contains (ID1, offset, size, unknown) tuples |
| 28 | 716 for each item in the file. backPointer1 is the value that should |
| 24 | 717 appear in the parent pointer of that root node. |
| 718 </para> | |
| 719 <para> | |
| 28 | 720 offsetIndex2 is the file offset of the root of the |
| 24 | 721 index2 b-tree, which contains (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) |
| 28 | 722 tuples for each item in the file. backPointer2 is the value that should |
| 24 | 723 appear in the parent pointer of that root node. |
| 724 </para> | |
| 725 </refsect1> | |
| 726 | |
| 44 | 727 <refsect1 id='pst.file.header.64.5'> |
| 728 <title>64 bit File Header</title> | |
| 24 | 729 <para> |
| 44 | 730 The 64 bit file header is located at offset 0 in the .pst file. |
| 731 </para> | |
| 732 <literallayout class="monospaced"><![CDATA[ | |
| 733 0000 21 42 44 4e 03 02 23 b2 53 4d 17 00 13 00 01 01 | |
| 734 0010 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 | |
| 735 0020 8b 00 00 00 00 00 00 00 1d 00 00 00 00 04 00 00 | |
| 736 0030 00 04 00 00 04 04 00 00 00 40 00 00 02 00 01 00 | |
| 737 0040 00 04 00 00 00 04 00 00 00 04 00 00 00 80 00 00 | |
| 738 0050 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 739 0060 04 04 00 00 04 04 00 00 04 04 00 00 00 04 00 00 | |
| 740 0070 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 741 0080 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 742 0090 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
| 743 00a0 00 04 00 00 00 04 00 00 02 04 00 00 00 00 00 00 | |
| 744 00b0 00 00 00 00 00 00 00 00 00 24 04 00 00 00 00 00 | |
| 745 00c0 00 44 00 00 00 00 00 00 00 71 03 00 00 00 00 00 | |
| 746 00d0 00 22 00 00 00 00 00 00 83 00 00 00 00 00 00 00 | |
| 747 00e0 00 6a 00 00 00 00 00 00 8a 00 00 00 00 00 00 00 | |
| 748 00f0 00 60 00 00 00 00 00 00 01 00 00 00 00 00 00 00 | |
| 749 0100 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 750 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 751 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 752 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 753 0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 754 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 755 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 756 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 757 0180 7f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 758 0190 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 759 01a0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 760 01b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 761 01c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 762 01d0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 763 01e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 764 01f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
| 765 0200 80 00 00 00 e8 00 00 00 00 00 00 00 c4 68 cb 89 | |
| 766 | |
| 767 0000 signature [4 bytes] 0x4e444221 constant | |
| 768 000a indexType [1 byte] 0x17 constant | |
| 769 0201 encryptionType [1 byte] 0x00 in this case | |
| 770 00b8 total file size [8 bytes] 0x042400 in this case | |
| 771 00e8 backPointer1 [8 bytes] 0x00008a in this case | |
| 772 00f0 offsetIndex1 [8 bytes] 0x006000 in this case | |
| 773 00d8 backPointer2 [8 bytes] 0x000083 in this case | |
| 774 00e0 offsetIndex2 [8 bytes] 0x006a00 in this case | |
| 775 ]]></literallayout> | |
| 776 </refsect1> | |
| 777 | |
| 778 <refsect1 id='pst.file.node1.32.5'> | |
| 779 <title>32 bit Index 1 Node</title> | |
| 780 <para> | |
| 52 | 781 The 32 bit index1 b-tree nodes are 512 byte blocks with the |
| 44 | 782 following format. |
| 24 | 783 </para> |
| 784 <literallayout class="monospaced"><![CDATA[ | |
| 785 0000 04 00 00 00 8a 1e 02 00 00 1c 0b 00 | |
| 786 000c 58 27 03 00 b3 1e 02 00 00 52 00 00 | |
| 787 0018 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 788 0024 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 789 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 790 003c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 791 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 792 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 793 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 794 006c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 795 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 796 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 797 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 798 009c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 799 00a8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 800 00b4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 801 00c0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 802 00cc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 803 00d8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 804 00e4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 805 00f0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 806 00fc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 807 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 808 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 809 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 810 012c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 811 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 812 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 813 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 814 015c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 815 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 816 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 817 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 818 018c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 819 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 820 01a4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 821 01b0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 822 01bc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 823 01c8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 824 01d4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 825 01e0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 826 01ec 00 00 00 00 02 29 0c 02 80 80 b6 4a | |
| 52 | 827 01f8 b4 1e 02 00 27 9c cc 56 |
| 24 | 828 |
| 28 | 829 01f0 itemCount [1 byte] 0x02 in this case |
| 830 01f1 maxItemCount [1 byte] 0x29 constant | |
| 831 01f3 nodeLevel [1 byte] 0x02 in this case | |
| 832 01f8 backPointer [4 bytes] 0x021eb4 in this case | |
| 24 | 833 ]]></literallayout> |
| 834 <para> | |
| 28 | 835 The itemCount specifies the number of 12 byte records that |
| 836 are active. The nodeLevel is non-zero for this style of nodes. | |
| 837 The leaf nodes have a different format. The backPointer must | |
| 838 match the backPointer from the triple that pointed to this node. | |
| 24 | 839 </para> |
| 840 <para> | |
| 35 | 841 Each item in this node is a triple of (ID1, backPointer, offset) |
| 24 | 842 where the offset points to the next deeper node in the tree, the |
| 28 | 843 backPointer value must match the backPointer in that deeper node, |
| 35 | 844 and ID1 is the lowest ID1 value in the subtree. |
| 24 | 845 </para> |
| 846 </refsect1> | |
| 847 | |
| 44 | 848 <refsect1 id='pst.file.node1.64.5'> |
| 849 <title>64 bit Index 1 Node</title> | |
| 24 | 850 <para> |
| 44 | 851 The 64 bit index1 b-tree nodes are 512 byte blocks with the |
| 852 following format. | |
| 853 </para> | |
| 854 <literallayout class="monospaced"><![CDATA[ | |
| 855 0000 04 00 00 00 00 00 00 00 88 00 00 00 | |
| 856 000C 00 00 00 00 00 48 00 00 00 00 00 00 | |
| 857 0018 74 00 00 00 00 00 00 00 86 00 00 00 | |
| 858 0024 00 00 00 00 00 54 00 00 00 00 00 00 | |
| 859 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 860 003C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 861 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 862 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 863 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 864 006C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 865 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 866 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 867 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 868 009C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 869 00A8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 870 00B4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 871 00C0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 872 00CC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 873 00D8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 874 00E4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 875 00F0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 876 00FC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 877 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 878 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 879 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 880 012C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 881 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 882 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 883 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 884 015C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 885 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 886 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 887 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 888 018C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 889 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 890 01A4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 891 01B0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 892 01BC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 893 01C8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 894 01D4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 895 01E0 00 00 00 00 00 00 00 00 02 14 18 01 | |
| 896 01EC 00 00 00 00 80 80 8a 60 68 e5 b5 19 | |
| 897 01F8 8a 00 00 00 00 00 00 00 | |
| 898 | |
| 899 01e8 itemCount [1 byte] 0x02 in this case | |
| 900 01e9 maxItemCount [1 byte] 0x14 constant | |
| 901 01eb nodeLevel [1 byte] 0x01 in this case | |
| 902 01f8 backPointer [8 bytes] 0x00008a in this case | |
| 903 ]]></literallayout> | |
| 904 <para> | |
| 905 The itemCount specifies the number of 24 byte records that | |
| 906 are active. The nodeLevel is non-zero for this style of nodes. | |
| 907 The leaf nodes have a different format. The backPointer must | |
| 908 match the backPointer from the triple that pointed to this node. | |
| 909 </para> | |
| 910 <para> | |
| 911 Each item in this node is a triple of (ID1, backPointer, offset) | |
| 912 where the offset points to the next deeper node in the tree, the | |
| 913 backPointer value must match the backPointer in that deeper node, | |
| 914 and ID1 is the lowest ID1 value in the subtree. | |
| 915 </para> | |
| 916 </refsect1> | |
| 917 | |
| 918 <refsect1 id='pst.file.leaf1.32.5'> | |
| 919 <title>32 bit Index 1 Leaf Node</title> | |
| 920 <para> | |
| 52 | 921 The 32 bit index1 b-tree leaf nodes are 512 byte blocks with the |
| 44 | 922 following format. |
| 24 | 923 </para> |
| 924 <literallayout class="monospaced"><![CDATA[ | |
| 925 0000 04 00 00 00 00 58 00 00 64 00 0f 00 | |
| 926 000c 08 00 00 00 80 58 00 00 ac 00 06 00 | |
| 927 0018 0c 00 00 00 40 59 00 00 ac 00 06 00 | |
| 928 0024 10 00 00 00 00 5a 00 00 bc 00 03 00 | |
| 929 0030 14 00 00 00 00 5b 00 00 a4 00 02 00 | |
| 930 003c 18 00 00 00 c0 5b 00 00 64 00 02 00 | |
| 931 0048 1c 00 00 00 40 5c 00 00 5c 00 02 00 | |
| 932 0054 50 00 00 00 80 62 00 00 60 00 02 00 | |
| 933 0060 74 00 00 00 00 77 00 00 5e 00 02 00 | |
| 934 006c 7c 00 00 00 80 77 00 00 66 00 02 00 | |
| 935 0078 84 00 00 00 00 76 00 00 ca 00 02 00 | |
| 936 0084 88 00 00 00 00 63 00 00 52 00 02 00 | |
| 937 0090 90 00 00 00 00 79 00 00 58 00 02 00 | |
| 938 009c cc 00 00 00 c0 61 00 00 76 00 02 00 | |
| 939 00a8 e0 00 00 00 00 61 00 00 74 00 02 00 | |
| 940 00b4 f4 00 00 00 80 65 00 00 6e 00 02 00 | |
| 941 00c0 8c 01 00 00 40 60 00 00 70 00 02 00 | |
| 942 00cc ea 01 00 00 80 61 00 00 10 00 02 00 | |
| 943 00d8 ec 01 00 00 40 8a 00 00 f3 01 02 00 | |
| 944 00e4 f0 01 00 00 80 93 00 00 f4 1f 02 00 | |
| 945 00f0 fa 01 00 00 c0 7f 00 00 10 00 02 00 | |
| 946 00fc 00 02 00 00 00 89 00 00 34 01 02 00 | |
| 947 0108 1c 02 00 00 40 ec 00 00 12 06 02 00 | |
| 948 0114 22 02 00 00 00 84 00 00 10 00 02 00 | |
| 949 0120 24 02 00 00 c0 ea 00 00 3c 01 02 00 | |
| 950 012c 40 02 00 00 00 f4 00 00 0a 06 02 00 | |
| 951 0138 46 02 00 00 40 8c 00 00 10 00 02 00 | |
| 952 0144 48 02 00 00 80 f2 00 00 36 01 02 00 | |
| 953 0150 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 954 015c 6a 02 00 00 80 63 00 00 10 00 02 00 | |
| 955 0168 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 956 0174 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 957 0180 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 958 018c 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 959 0198 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 960 01a4 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
| 961 01b0 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 962 01bc 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 963 01c8 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 964 01d4 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 965 01e0 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
| 966 01ec 00 00 00 00 1f 29 0c 00 80 80 5b b3 | |
| 52 | 967 01f8 5a 67 01 00 4f ae 70 a7 |
| 24 | 968 |
| 28 | 969 01f0 itemCount [1 byte] 0x1f in this case |
| 970 01f1 maxItemCount [1 byte] 0x29 constant | |
| 44 | 971 01f3 nodeLevel [1 byte] 0x00 defines a leaf node |
| 28 | 972 01f8 backPointer [4 bytes] 0x01675a in this case |
| 24 | 973 ]]></literallayout> |
| 974 <para> | |
| 28 | 975 The itemCount specifies the number of 12 byte records that |
| 976 are active. The nodeLevel is zero for these leaf nodes. | |
| 977 The backPointer must match the backPointer from the triple | |
| 24 | 978 that pointed to this node. |
| 979 </para> | |
| 980 <para> | |
| 981 Each item in this node is a tuple of (ID1, offset, size, unknown) | |
| 35 | 982 The two low order bits of the ID1 value seem to be flags. I have |
| 983 never seen a case with bit zero set. Bit one indicates that the | |
| 984 item is <emphasis>not</emphasis> encrypted. Note that references | |
| 985 to these ID1 values elsewhere may have the low order bit set (and | |
| 986 I don't know what that means), but when we do the search in this | |
| 987 tree we need to clear that bit so that we can find the correct item. | |
| 24 | 988 </para> |
| 989 </refsect1> | |
| 990 | |
| 44 | 991 <refsect1 id='pst.file.leaf1.64.5'> |
| 992 <title>64 bit Index 1 Leaf Node</title> | |
| 24 | 993 <para> |
| 44 | 994 The 64 bit index1 b-tree leaf nodes are 512 byte blocks with the |
| 995 following format. | |
| 996 </para> | |
| 997 <literallayout class="monospaced"><![CDATA[ | |
| 998 0000 04 00 00 00 00 00 00 00 00 58 00 00 | |
| 999 000C 00 00 00 00 6c 00 05 00 00 00 00 00 | |
| 1000 0018 08 00 00 00 00 00 00 00 80 58 00 00 | |
| 1001 0024 00 00 00 00 b4 00 06 00 d8 22 37 08 | |
| 1002 0030 0c 00 00 00 00 00 00 00 80 59 00 00 | |
| 1003 003C 00 00 00 00 ac 00 07 00 d8 22 37 08 | |
| 1004 0048 10 00 00 00 00 00 00 00 40 5a 00 00 | |
| 1005 0054 00 00 00 00 bc 00 03 00 d8 22 37 08 | |
| 1006 0060 14 00 00 00 00 00 00 00 40 5b 00 00 | |
| 1007 006C 00 00 00 00 a4 00 02 00 d8 22 37 08 | |
| 1008 0078 18 00 00 00 00 00 00 00 00 5c 00 00 | |
| 1009 0084 00 00 00 00 64 00 02 00 d8 22 37 08 | |
| 1010 0090 1c 00 00 00 00 00 00 00 80 5c 00 00 | |
| 1011 009C 00 00 00 00 5c 00 02 00 d8 22 37 08 | |
| 1012 00A8 24 00 00 00 00 00 00 00 80 5d 00 00 | |
| 1013 00B4 00 00 00 00 72 00 02 00 d8 22 37 08 | |
| 1014 00C0 34 00 00 00 00 00 00 00 00 70 00 00 | |
| 1015 00CC 00 00 00 00 8c 00 02 00 00 0d 00 00 | |
| 1016 00D8 38 00 00 00 00 00 00 00 c0 71 00 00 | |
| 1017 00E4 00 00 00 00 5c 00 02 00 d8 22 9c 00 | |
| 1018 00F0 40 00 00 00 00 00 00 00 40 72 00 00 | |
| 1019 00FC 00 00 00 00 26 00 02 00 d8 22 9c 00 | |
| 1020 0108 4c 00 00 00 00 00 00 00 80 5f 00 00 | |
| 1021 0114 00 00 00 00 3e 00 02 00 d8 22 9c 00 | |
| 1022 0120 5c 00 00 00 00 00 00 00 c0 76 00 00 | |
| 1023 012C 00 00 00 00 8c 00 02 00 d8 22 9c 00 | |
| 1024 0138 64 00 00 00 00 00 00 00 40 75 00 00 | |
| 1025 0144 00 00 00 00 76 00 02 00 d8 22 9c 00 | |
| 1026 0150 6c 00 00 00 00 00 00 00 c0 73 00 00 | |
| 1027 015C 00 00 00 00 5e 00 02 00 d8 22 9c 00 | |
| 1028 0168 70 00 00 00 00 00 00 00 80 72 00 00 | |
| 1029 0174 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
| 1030 0180 70 00 00 00 00 00 00 00 80 72 00 00 | |
| 1031 018C 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
| 1032 0198 70 00 00 00 00 00 00 00 80 72 00 00 | |
| 1033 01A4 00 00 00 00 1e 01 02 00 d8 22 9c 00 | |
| 1034 01B0 74 00 00 00 00 00 00 00 40 74 00 00 | |
| 1035 01BC 00 00 00 00 e0 00 02 00 d8 22 9c 00 | |
| 1036 01C8 7c 00 00 00 00 00 00 00 80 77 00 00 | |
| 1037 01D4 00 00 00 00 dc 00 02 00 d8 22 9c 00 | |
| 1038 01E0 00 00 00 00 00 00 00 00 10 14 18 00 | |
| 1039 01EC 00 00 00 00 80 80 88 48 3f 50 0b 04 | |
| 1040 01F8 88 00 00 00 00 00 00 00 | |
| 1041 | |
| 1042 01e8 itemCount [1 byte] 0x10 in this case | |
| 1043 01e9 maxItemCount [1 byte] 0x14 constant | |
| 1044 01eb nodeLevel [1 byte] 0x00 defines a leaf node | |
| 1045 01f8 backPointer [8 bytes] 0x000088 in this case | |
| 1046 ]]></literallayout> | |
| 1047 <para> | |
| 1048 The itemCount specifies the number of 24 byte records that | |
| 1049 are active. The nodeLevel is zero for these leaf nodes. | |
| 1050 The backPointer must match the backPointer from the triple | |
| 1051 that pointed to this node. | |
| 1052 </para> | |
| 1053 <para> | |
| 1054 Each item in this node is a tuple of (ID1, offset, size, unknown) | |
| 1055 The two low order bits of the ID1 value seem to be flags. I have | |
| 1056 never seen a case with bit zero set. Bit one indicates that the | |
| 1057 item is <emphasis>not</emphasis> encrypted. Note that references | |
| 1058 to these ID1 values elsewhere may have the low order bit set (and | |
| 1059 I don't know what that means), but when we do the search in this | |
| 1060 tree we need to clear that bit so that we can find the correct item. | |
| 1061 </para> | |
| 1062 </refsect1> | |
| 1063 | |
| 1064 <refsect1 id='pst.file.node2.32.5'> | |
| 1065 <title>32 bit Index 2 Node</title> | |
| 1066 <para> | |
| 52 | 1067 The 32 bit index2 b-tree nodes are 512 byte blocks with the |
| 44 | 1068 following format. |
| 24 | 1069 </para> |
| 1070 <literallayout class="monospaced"><![CDATA[ | |
| 1071 0000 21 00 00 00 bb 1e 02 00 00 e2 0b 00 | |
| 1072 000c 64 78 20 00 8c 1e 02 00 00 dc 0b 00 | |
| 1073 0018 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1074 0024 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1075 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1076 003c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1077 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1078 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1079 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1080 006c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1081 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1082 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1083 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1084 009c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1085 00a8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1086 00b4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1087 00c0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1088 00cc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1089 00d8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1090 00e4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1091 00f0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1092 00fc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1093 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1094 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1095 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1096 012c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1097 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1098 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1099 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1100 015c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1101 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1102 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1103 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1104 018c 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1105 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1106 01a4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1107 01b0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1108 01bc 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1109 01c8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1110 01d4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1111 01e0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1112 01ec 00 00 00 00 02 29 0c 02 81 81 b2 60 | |
| 52 | 1113 01f8 bc 1e 02 00 7e 70 dc e3 |
| 24 | 1114 |
| 28 | 1115 01f0 itemCount [1 byte] 0x02 in this case |
| 1116 01f1 maxItemCount [1 byte] 0x29 constant | |
| 1117 01f3 nodeLevel [1 byte] 0x02 in this case | |
| 1118 01f8 backPointer [4 bytes] 0x021ebc in this case | |
| 24 | 1119 ]]></literallayout> |
| 1120 <para> | |
| 28 | 1121 The itemCount specifies the number of 12 byte records that |
| 1122 are active. The nodeLevel is non-zero for this style of nodes. | |
| 1123 The leaf nodes have a different format. The backPointer must | |
| 1124 match the backPointer from the triple that pointed to this node. | |
| 24 | 1125 </para> |
| 1126 <para> | |
| 28 | 1127 Each item in this node is a triple of (ID2, backPointer, offset) |
| 24 | 1128 where the offset points to the next deeper node in the tree, the |
| 28 | 1129 backPointer value must match the backPointer in that deeper node, |
| 24 | 1130 and ID2 is the lowest ID2 value in the subtree. |
| 1131 </para> | |
| 1132 </refsect1> | |
| 1133 | |
| 44 | 1134 <refsect1 id='pst.file.node2.64.5'> |
| 1135 <title>64 bit Index 2 Node</title> | |
| 24 | 1136 <para> |
| 44 | 1137 The 64 bit index2 b-tree nodes are 512 byte blocks with the |
| 1138 following format. | |
| 1139 </para> | |
| 1140 <literallayout class="monospaced"><![CDATA[ | |
| 1141 0000 21 00 00 00 00 00 00 00 77 00 00 00 | |
| 1142 000C 00 00 00 00 00 56 00 00 00 00 00 00 | |
| 1143 0018 4c 06 00 00 00 00 00 00 82 00 00 00 | |
| 1144 0024 00 00 00 00 00 68 00 00 00 00 00 00 | |
| 1145 0030 4f 80 00 00 00 00 00 00 84 00 00 00 | |
| 1146 003C 00 00 00 00 00 6e 00 00 00 00 00 00 | |
| 1147 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1148 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1149 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1150 006C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1151 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1152 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1153 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1154 009C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1155 00A8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1156 00B4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1157 00C0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1158 00CC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1159 00D8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1160 00E4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1161 00F0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1162 00FC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1163 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1164 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1165 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1166 012C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1167 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1168 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1169 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1170 015C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1171 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1172 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1173 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1174 018C 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1175 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1176 01A4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1177 01B0 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1178 01BC 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1179 01C8 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1180 01D4 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1181 01E0 00 00 00 00 00 00 00 00 03 14 18 01 | |
| 1182 01EC 00 00 00 00 81 81 83 6a 49 da f3 d3 | |
| 1183 01F8 83 00 00 00 00 00 00 00 | |
| 1184 | |
| 1185 01e8 itemCount [1 byte] 0x03 in this case | |
| 1186 01e9 maxItemCount [1 byte] 0x14 constant | |
| 1187 01eb nodeLevel [1 byte] 0x01 in this case | |
| 1188 01f8 backPointer [4 bytes] 0x000083 in this case | |
| 1189 ]]></literallayout> | |
| 1190 <para> | |
| 1191 The itemCount specifies the number of 24 byte records that | |
| 1192 are active. The nodeLevel is non-zero for this style of nodes. | |
| 1193 The leaf nodes have a different format. The backPointer must | |
| 1194 match the backPointer from the triple that pointed to this node. | |
| 1195 </para> | |
| 1196 <para> | |
| 1197 Each item in this node is a triple of (ID2, backPointer, offset) | |
| 1198 where the offset points to the next deeper node in the tree, the | |
| 1199 backPointer value must match the backPointer in that deeper node, | |
| 1200 and ID2 is the lowest ID2 value in the subtree. | |
| 1201 </para> | |
| 1202 </refsect1> | |
| 1203 | |
| 1204 <refsect1 id='pst.file.leaf2.32.5'> | |
| 1205 <title>32 bit Index 2 Leaf Node</title> | |
| 1206 <para> | |
| 52 | 1207 The 32 bit index2 b-tree leaf nodes are 512 byte blocks with the |
| 44 | 1208 following format. |
| 24 | 1209 </para> |
| 1210 <literallayout class="monospaced"><![CDATA[ | |
| 1211 0000 21 00 00 00 38 e6 00 00 00 00 00 00 00 00 00 00 | |
| 1212 0010 61 00 00 00 2c a8 02 00 36 a8 02 00 00 00 00 00 | |
| 1213 0020 22 01 00 00 20 a2 02 00 00 00 00 00 22 01 00 00 | |
| 1214 0030 2d 01 00 00 88 7b 03 00 00 00 00 00 00 00 00 00 | |
| 1215 0040 2e 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
| 1216 0050 2f 01 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 | |
| 1217 0060 e1 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1218 0070 01 02 00 00 b4 e4 02 00 00 00 00 00 00 00 00 00 | |
| 1219 0080 61 02 00 00 a0 e4 02 00 00 00 00 00 00 00 00 00 | |
| 1220 0090 0d 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 | |
| 1221 00A0 0e 06 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
| 1222 00B0 0f 06 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 | |
| 1223 00C0 10 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 | |
| 1224 00D0 2b 06 00 00 84 00 00 00 00 00 00 00 00 00 00 00 | |
| 1225 00E0 4c 06 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 | |
| 1226 00F0 71 06 00 00 18 00 00 00 00 00 00 00 00 00 00 00 | |
| 1227 0100 92 06 00 00 14 00 00 00 00 00 00 00 00 00 00 00 | |
| 1228 0110 23 22 00 00 14 a0 02 00 00 00 00 00 22 01 00 00 | |
| 1229 0120 26 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1230 0130 27 22 00 00 1c a0 02 00 00 00 00 00 00 00 00 00 | |
| 1231 0140 22 80 00 00 50 00 00 00 00 00 00 00 22 01 00 00 | |
| 1232 0150 2d 80 00 00 f8 9f 02 00 00 00 00 00 00 00 00 00 | |
| 1233 0160 2e 80 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
| 1234 0170 2f 80 00 00 34 e6 00 00 00 00 00 00 00 00 00 00 | |
| 1235 0180 42 80 00 00 3c 6d 02 00 00 00 00 00 22 80 00 00 | |
| 1236 0190 4d 80 00 00 04 00 00 00 00 00 00 00 00 00 00 00 | |
| 1237 01A0 4e 80 00 00 10 6d 02 00 00 00 00 00 00 00 00 00 | |
| 1238 01B0 4f 80 00 00 ec 23 00 00 00 00 00 00 00 00 00 00 | |
| 1239 01C0 62 80 00 00 38 78 02 00 00 00 00 00 22 01 00 00 | |
| 1240 01D0 6d 80 00 00 34 78 02 00 00 00 00 00 00 00 00 00 | |
| 1241 01E0 6e 80 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
| 1242 01F0 10 1f 10 00 81 81 a0 9a ae 1e 02 00 89 44 6a 0f | |
| 1243 | |
| 28 | 1244 01f0 itemCount [1 byte] 0x10 in this case |
| 1245 01f1 maxItemCount [1 byte] 0x1f constant | |
| 1246 01f3 nodeLevel [1 byte] 0x00 in this case | |
| 1247 01f8 backPointer [4 bytes] 0x021eae in this case | |
| 24 | 1248 ]]></literallayout> |
| 1249 <para> | |
| 28 | 1250 The itemCount specifies the number of 16 byte records that |
| 1251 are active. The nodeLevel is zero for these leaf nodes. | |
| 1252 The backPointer must match the backPointer from the triple | |
| 24 | 1253 that pointed to this node. |
| 1254 </para> | |
| 1255 <para> | |
| 1256 Each item in this node is a tuple of (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) | |
| 1257 </para> | |
| 1258 </refsect1> | |
| 1259 | |
| 44 | 1260 <refsect1 id='pst.file.leaf2.64.5'> |
| 1261 <title>64 bit Index 2 Leaf Node</title> | |
| 1262 <para> | |
| 1263 The 64 bit index2 b-tree leaf nodes are 512 byte blocks with the | |
| 1264 following format. | |
| 1265 </para> | |
| 1266 <literallayout class="monospaced"><![CDATA[ | |
| 1267 0000 21 00 00 00 00 00 00 00 74 00 00 00 00 00 00 00 | |
| 1268 0010 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1269 0020 61 00 00 00 00 00 00 00 34 00 00 00 00 00 00 00 | |
| 1270 0030 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1271 0040 22 01 00 00 00 00 00 00 4c 00 00 00 00 00 00 00 | |
| 1272 0050 00 00 00 00 00 00 00 00 22 01 00 00 02 00 00 00 | |
| 1273 0060 2d 01 00 00 00 00 00 00 70 00 00 00 00 00 00 00 | |
| 1274 0070 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1275 0080 2e 01 00 00 00 00 00 00 08 00 00 00 00 00 00 00 | |
| 1276 0090 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1277 00A0 2f 01 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 | |
| 1278 00B0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1279 00C0 e1 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1280 00D0 00 00 00 00 00 00 00 00 00 00 00 00 d8 e3 13 00 | |
| 1281 00E0 01 02 00 00 00 00 00 00 8c 00 00 00 00 00 00 00 | |
| 1282 00F0 00 00 00 00 00 00 00 00 00 00 00 00 b0 e3 13 00 | |
| 1283 0100 61 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1284 0110 00 00 00 00 00 00 00 00 00 00 00 00 d8 e3 13 00 | |
| 1285 0120 0d 06 00 00 00 00 00 00 04 00 00 00 00 00 00 00 | |
| 1286 0130 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1287 0140 0e 06 00 00 00 00 00 00 08 00 00 00 00 00 00 00 | |
| 1288 0150 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1289 0160 0f 06 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 | |
| 1290 0170 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1291 0180 10 06 00 00 00 00 00 00 10 00 00 00 00 00 00 00 | |
| 1292 0190 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1293 01A0 2b 06 00 00 00 00 00 00 24 00 00 00 00 00 00 00 | |
| 1294 01B0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1295 01C0 71 06 00 00 00 00 00 00 18 00 00 00 00 00 00 00 | |
| 1296 01D0 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 | |
| 1297 01E0 00 00 00 00 00 00 00 00 0e 0f 20 00 00 00 00 00 | |
| 1298 01F0 81 81 77 56 f8 32 43 49 77 00 00 00 00 00 00 00 | |
| 1299 | |
| 1300 01e8 itemCount [1 byte] 0x0e in this case | |
| 1301 01e9 maxItemCount [1 byte] 0x0f constant | |
| 1302 01eb nodeLevel [1 byte] 0x00 defines a leaf node | |
| 1303 01f8 backPointer [4 bytes] 0x000077 in this case | |
| 1304 ]]></literallayout> | |
| 1305 <para> | |
| 1306 The itemCount specifies the number of 32 byte records that | |
| 1307 are active. The nodeLevel is zero for these leaf nodes. | |
| 1308 The backPointer must match the backPointer from the triple | |
| 1309 that pointed to this node. | |
| 1310 </para> | |
| 1311 <para> | |
| 1312 Each item in this node is a tuple of (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) | |
| 1313 </para> | |
| 1314 </refsect1> | |
| 1315 | |
| 46 | 1316 <refsect1 id='pst.file.list.32.5'> |
| 48 | 1317 <title>32 bit Associated List Item 0x0002</title> |
| 24 | 1318 <para> |
| 1319 Contains associations between id1 and id2 for the items controlled by the record. | |
| 44 | 1320 In the above 32 bit leaf node, we have a tuple of (0x61, 0x02a82c, 0x02a836, 0) |
| 24 | 1321 0x02a836 is the ID1 of the associated list, and we can lookup that ID1 value |
| 1322 in the index1 b-tree to find the (offset,size) of the data in the .pst file. | |
| 1323 </para> | |
| 1324 <literallayout class="monospaced"><![CDATA[ | |
| 1325 0000 02 00 01 00 9f 81 00 00 30 a8 02 00 00 00 00 00 | |
| 1326 | |
| 48 | 1327 0000 signature [2 bytes] 0x0002 constant |
| 24 | 1328 0002 count [2 bytes] 0x0001 in this case |
| 1329 repeating | |
| 1330 0004 id2 [4 bytes] 0x00819f in this case | |
| 1331 0008 id [4 bytes] 0x02a830 in this case | |
| 46 | 1332 000c table2 [4 bytes] 0 in this case |
| 1333 ]]></literallayout> | |
| 1334 </refsect1> | |
| 1335 | |
| 1336 <refsect1 id='pst.file.list.64.5'> | |
| 48 | 1337 <title>64 bit Associated List Item 0x0002</title> |
| 46 | 1338 <para> |
| 1339 Contains associations between id1 and id2 for the items controlled by the record. | |
| 1340 </para> | |
| 1341 <literallayout class="monospaced"><![CDATA[ | |
| 1342 0000 02 00 02 00 00 00 00 00 92 06 00 00 00 00 00 00 | |
| 1343 0010 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1344 0020 3f 80 00 00 00 00 00 00 98 00 00 00 00 00 00 00 | |
| 1345 0030 00 00 00 00 00 00 00 00 | |
| 1346 | |
| 48 | 1347 0000 signature [2 bytes] 0x0002 constant |
| 46 | 1348 0002 count [2 bytes] 0x0002 in this case |
|
57
de3753c3160a
add archive directory with history of alioth versions that have been merged here
Carl Byington <carl@five-ten-sg.com>
parents:
55
diff
changeset
|
1349 0004 unknown [4 bytes] 0 possibly constant |
| 46 | 1350 repeating |
| 48 | 1351 0008 id2 [4 bytes] 0x000692 in this case |
| 1352 000c unknown1 [2 bytes] 0 may be a count or size | |
| 1353 000e unknown2 [2 bytes] 0 may be a count or size | |
| 1354 0010 id [8 bytes] 0x0000a8 in this case | |
| 1355 0018 table2 [8 bytes] 0 in this case | |
| 24 | 1356 ]]></literallayout> |
| 1357 </refsect1> | |
| 1358 | |
| 1359 <refsect1 id='pst.file.desc.5'> | |
| 28 | 1360 <title>Associated Descriptor Item 0xbcec</title> |
| 24 | 1361 <para> |
| 28 | 1362 Contains information about the item, which may be email, contact, or |
| 1363 other outlook types. In the above leaf node, we have a tuple of (0x21, | |
| 1364 0x00e638, 0, 0) 0x00e638 is the ID1 of the associated descriptor, and we | |
| 1365 can lookup that ID1 value in the index1 b-tree to find the (offset,size) | |
| 1366 of the data in the .pst file. | |
| 24 | 1367 </para> |
| 1368 <literallayout class="monospaced"><![CDATA[ | |
| 1369 0000 3c 01 ec bc 20 00 00 00 00 00 00 00 b5 02 06 00 | |
| 1370 0010 40 00 00 00 f9 0f 02 01 60 00 00 00 01 30 1e 00 | |
| 1371 0020 80 00 00 00 04 30 1e 00 00 00 00 00 df 35 03 00 | |
| 1372 0030 ff 00 00 00 e0 35 02 01 a0 00 00 00 e2 35 02 01 | |
| 1373 0040 e0 00 00 00 e3 35 02 01 c0 00 00 00 e4 35 02 01 | |
| 1374 0050 00 01 00 00 e5 35 02 01 20 01 00 00 e6 35 02 01 | |
| 1375 0060 40 01 00 00 e7 35 02 01 60 01 00 00 1e 66 0b 00 | |
| 1376 0070 00 00 00 00 ff 67 03 00 00 00 00 00 d2 7f 17 d8 | |
| 1377 0080 64 8c d5 11 83 24 00 50 04 86 95 45 53 74 61 6e | |
| 1378 0090 6c 65 79 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
| 1379 00A0 24 00 50 04 86 95 45 22 80 00 00 00 00 00 00 d2 | |
| 1380 00B0 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 42 | |
| 1381 00C0 80 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
| 1382 00D0 24 00 50 04 86 95 45 a2 80 00 00 00 00 00 00 d2 | |
| 1383 00E0 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 c2 | |
| 1384 00F0 80 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
| 1385 0100 24 00 50 04 86 95 45 e2 80 00 00 00 00 00 00 d2 | |
| 1386 0110 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 02 | |
| 1387 0120 81 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
| 1388 0130 24 00 50 04 86 95 45 62 80 00 00 00 0b 00 00 00 | |
| 1389 0140 0c 00 14 00 7c 00 8c 00 93 00 ab 00 c3 00 db 00 | |
| 1390 0150 f3 00 0b 01 23 01 3b 01 | |
| 1391 | |
| 28 | 1392 0000 indexOffset [2 bytes] 0x013c in this case |
| 24 | 1393 0002 signature [2 bytes] 0xbcec constant |
| 35 | 1394 0004 b5offset [4 bytes] 0x0020 index reference |
| 24 | 1395 ]]></literallayout> |
| 1396 <para> | |
| 35 | 1397 Note the signature of 0xbcec. There are other descriptor block formats |
| 1398 with other signatures. Note the indexOffset of 0x013c - starting at | |
| 1399 that position in the descriptor block, we have an array of two byte | |
| 1400 integers. The first integer (0x000b) is a (count-1) of the number of | |
| 1401 overlapping pairs following the count. The first pair is (0, 0xc), the | |
| 1402 next pair is (0xc, 0x14) and the last (12th) pair is (0x123, 0x13b). | |
| 1403 These pairs are (start,end+1) offsets of items in this block. So we | |
| 1404 have count+2 integers following the count value. | |
| 24 | 1405 </para> |
| 1406 <para> | |
| 35 | 1407 Note the b5offset of 0x0020, which is a type that I will call an index |
| 49 | 1408 reference. Such index references have at least two different forms, |
| 1409 and may point to data either in this block, or in some other block. | |
| 35 | 1410 External pointer references have the low order 4 bits all set, and are |
| 1411 ID2 values that can be used to fetch data. This value of 0x0020 is an | |
| 49 | 1412 internal pointer reference, which needs to be right shifted by 4 bits |
| 1413 to become 0x0002, which is then a byte offset to be added to the above | |
| 35 | 1414 indexOffset plus two (to skip the count), so it points to the (0xc, |
| 1415 0x14) pair. | |
| 1416 </para> | |
| 1417 <para> | |
| 49 | 1418 So far we have only described internal index references where the high |
| 1419 order 16 bits are zero. That suffices for single descriptor | |
| 1420 blocks. But in the case of the type 0x0101 descriptor block, we have | |
| 1421 an array of subblocks. In this case, the high order 16 bits of an | |
| 1422 internal index reference are used to select the subblock. Each | |
| 1423 subblock starts with a 16 bit indexOffset which points to the count | |
| 1424 and array of 16 bit integer pairs which are offsets in the current | |
| 1425 subblock. | |
| 1426 </para> | |
| 1427 <para> | |
| 35 | 1428 Finally, we have the offset and size of the "b5" block located at offset 0xc |
| 24 | 1429 with a size of 8 bytes in this descriptor block. The "b5" block has the |
| 1430 following format: | |
| 1431 </para> | |
| 1432 <literallayout class="monospaced"><![CDATA[ | |
| 1433 0000 signature [2 bytes] 0x02b5 constant | |
| 1434 0002 unknown [2 bytes] 0x0006 in this case | |
| 35 | 1435 0004 descoffset [4 bytes] 0x0040 index reference |
| 24 | 1436 ]]></literallayout> |
| 1437 <para> | |
| 35 | 1438 Note the descoffset of 0x0040, which again is an index reference. In this |
| 1439 case, it is an internal pointer reference, which needs to be right shifted by 4 bits | |
| 24 | 1440 to become 0x0004, which is then a byte offset to be added to the above |
| 28 | 1441 indexOffset plus two (to skip the count), so it points to the (0x14, 0x7c) |
| 24 | 1442 pair. We now have the offset 0x14 of the descriptor array, composed of 8 byte |
| 1443 entries. Each descriptor entry has the following format: | |
| 1444 </para> | |
| 1445 <literallayout class="monospaced"><![CDATA[ | |
| 28 | 1446 0000 itemType [2 bytes] |
| 1447 0002 referenceType [2 bytes] | |
| 24 | 1448 0004 value [4 bytes] |
| 1449 ]]></literallayout> | |
| 1450 <para> | |
| 1451 For some reference types (2, 3, 0xb) the value is used directly. Otherwise, | |
| 35 | 1452 the value is an index reference, which is either an ID2 value, or an |
| 1453 offset, to be right shifted by 4 bits and used to fetch a pair from the | |
| 1454 index table to find the offset and size of the item in this descriptor block. | |
| 24 | 1455 </para> |
| 1456 <para> | |
| 1457 The following reference types are known, but not all of these | |
| 1458 are implemented in the code yet. | |
| 1459 </para> | |
| 1460 <literallayout class="monospaced"><![CDATA[ | |
| 1461 0x0002 - Signed 16bit value | |
| 1462 0x0003 - Signed 32bit value | |
| 1463 0x0004 - 4-byte floating point | |
| 1464 0x0005 - Floating point double | |
| 1465 0x0006 - Signed 64-bit int | |
| 1466 0x0007 - Application Time | |
| 1467 0x000A - 32-bit error value | |
| 1468 0x000B - Boolean (non-zero = true) | |
| 1469 0x000D - Embedded Object | |
| 1470 0x0014 - 8-byte signed integer (64-bit) | |
| 1471 0x001E - Null terminated String | |
| 1472 0x001F - Unicode string | |
| 1473 0x0040 - Systime - Filetime structure | |
| 1474 0x0048 - OLE Guid | |
| 1475 0x0102 - Binary data | |
| 1476 0x1003 - Array of 32bit values | |
| 1477 0x1014 - Array of 64bit values | |
| 1478 0x101E - Array of Strings | |
| 1479 0x1102 - Array of Binary data | |
| 1480 ]]></literallayout> | |
| 1481 <para> | |
| 1482 The following item types are known, but not all of these | |
| 1483 are implemented in the code yet. | |
| 1484 </para> | |
| 1485 <literallayout class="monospaced"><![CDATA[ | |
| 51 | 1486 0002 Alternate recipient allowed |
| 24 | 1487 0003 Extended Attributes Table |
| 1488 0017 Importance Level | |
| 51 | 1489 001a IPM Context, message class |
| 1490 0023 Global delivery report requested | |
| 24 | 1491 0026 Priority |
| 1492 0029 Read Receipt | |
| 1493 002b Reassignment Prohibited | |
| 1494 002e Original Sensitivity | |
| 1495 0036 Sensitivity | |
| 51 | 1496 0037 Email Subject |
| 24 | 1497 0039 Date. This is likely to be the arrival date |
| 1498 003b Outlook Address of Sender | |
| 1499 003f Outlook structure describing the recipient | |
| 1500 0040 Name of the Outlook recipient structure | |
| 1501 0041 Outlook structure describing the sender | |
| 1502 0042 Name of the Outlook sender structure | |
| 1503 0043 Another structure describing the recipient | |
| 1504 0044 Name of the second recipient structure | |
| 1505 004f Reply-To Outlook Structure | |
| 1506 0050 Name of the Reply-To structure | |
| 1507 0051 Outlook Name of recipient | |
| 1508 0052 Second Outlook name of recipient | |
| 1509 0057 My address in TO field | |
| 1510 0058 My address in CC field | |
| 1511 0059 Message addressed to me | |
| 1512 0063 Response requested | |
| 1513 0064 Sender's Address access method (SMTP, EX) | |
| 1514 0065 Sender's Address | |
| 1515 0070 Processed Subject (with Fwd:, Re, ... removed) | |
| 1516 0071 Date. Another date | |
| 1517 0075 Recipient Address Access Method (SMTP, EX) | |
| 1518 0076 Recipient's Address | |
| 1519 0077 Second Recipient Access Method (SMTP, EX) | |
| 1520 0078 Second Recipient Address | |
| 1521 007d Email Header. This is the header that was attached to the email | |
| 1522 0c17 Reply Requested | |
| 52 | 1523 0c19 Second sender structure |
| 1524 0c1a Name of second sender structure | |
| 24 | 1525 0c1d Second outlook name of sender |
| 1526 0c1e Second sender access method (SMTP, EX) | |
| 1527 0c1f Second Sender Address | |
| 1528 0e01 Delete after submit | |
| 1529 0e03 CC Address? | |
| 1530 0e04 SentTo Address | |
| 1531 0e06 Date. | |
| 1532 0e07 Flag - contains IsSeen value | |
| 1533 0e08 Message Size | |
| 1534 0e0a Sentmail EntryID | |
| 1535 0e1f Compressed RTF in Sync | |
| 1536 0e20 Attachment Size | |
| 1537 0ff9 binary record header | |
| 1538 1000 Plain Text Email Body. Does not exist if the email doesn't have a plain text version | |
| 1539 1006 RTF Sync Body CRC | |
| 1540 1007 RTF Sync Body character count | |
| 1541 1008 RTF Sync body tag | |
| 1542 1009 RTF Compressed body | |
| 1543 1010 RTF whitespace prefix count | |
| 1544 1011 RTF whitespace tailing count | |
| 36 | 1545 1013 HTML Email Body. Does not exist if the email doesn't have an HTML version |
| 24 | 1546 1035 Message ID |
| 1547 1042 In-Reply-To or Parent's Message ID | |
| 1548 1046 Return Path | |
| 1549 3001 Folder Name? I have seen this value used for the contacts record aswell | |
| 1550 3002 Address Type | |
| 1551 3003 Contact Address | |
| 1552 3004 Comment | |
| 1553 3007 Date item creation | |
| 1554 3008 Date item modification | |
| 1555 300b binary record header | |
| 1556 35df Valid Folder Mask | |
| 51 | 1557 35e0 binary record contains a reference to "Top of Personal Folder" item |
| 1558 35e2 binary record contains a reference to default outbox item | |
| 1559 35e3 binary record contains a reference to "Deleted Items" item | |
| 1560 35e4 binary record contains a reference to sent items folder item | |
| 1561 35e5 binary record contains a reference to user views folder item | |
| 1562 35e6 binary record contains a reference to common views folder item | |
| 1563 35e7 binary record contains a reference to "Search Root" item | |
| 24 | 1564 3602 the number of emails stored in a folder |
| 1565 3603 the number of unread emails in a folder | |
| 1566 360a Has Subfolders | |
| 1567 3613 the folder content description | |
| 1568 3617 Associate Content count | |
| 1569 3701 Binary Data attachment | |
| 1570 3704 Attachment Filename | |
| 1571 3705 Attachement method | |
| 1572 3707 Attachment Filename long | |
| 1573 370b Attachment Position | |
| 1574 370e Attachment mime encoding | |
| 51 | 1575 3710 Attachment mime Sequence |
| 24 | 1576 3a00 Contact's Account name |
| 1577 3a01 Contact Alternate Recipient | |
| 1578 3a02 Callback telephone number | |
| 1579 3a03 Message Conversion Prohibited | |
| 1580 3a05 Contacts Suffix | |
| 1581 3a06 Contacts First Name | |
| 1582 3a07 Contacts Government ID Number | |
| 1583 3a08 Business Telephone Number | |
| 1584 3a09 Home Telephone Number | |
| 1585 3a0a Contacts Initials | |
| 1586 3a0b Keyword | |
| 1587 3a0c Contact's Language | |
| 1588 3a0d Contact's Location | |
| 1589 3a0e Mail Permission | |
| 1590 3a0f MHS Common Name | |
| 1591 3a10 Organizational ID # | |
| 1592 3a11 Contacts Surname | |
| 1593 3a12 original entry id | |
| 1594 3a13 original display name | |
| 1595 3a14 original search key | |
| 1596 3a15 Default Postal Address | |
| 1597 3a16 Company Name | |
| 1598 3a17 Job Title | |
| 1599 3a18 Department Name | |
| 1600 3a19 Office Location | |
| 1601 3a1a Primary Telephone | |
| 1602 3a1b Business Phone Number 2 | |
| 1603 3a1c Mobile Phone Number | |
| 1604 3a1d Radio Phone Number | |
| 1605 3a1e Car Phone Number | |
| 1606 3a1f Other Phone Number | |
| 1607 3a20 Transmittable Display Name | |
| 1608 3a21 Pager Phone Number | |
| 1609 3a22 user certificate | |
| 1610 3a23 Primary Fax Number | |
| 1611 3a24 Business Fax Number | |
| 1612 3a25 Home Fax Number | |
| 1613 3a26 Business Address Country | |
| 1614 3a27 Business Address City | |
| 1615 3a28 Business Address State | |
| 1616 3a29 Business Address Street | |
| 1617 3a2a Business Postal Code | |
| 1618 3a2b Business PO Box | |
| 1619 3a2c Telex Number | |
| 1620 3a2d ISDN Number | |
| 1621 3a2e Assistant Phone Number | |
| 1622 3a2f Home Phone 2 | |
| 1623 3a30 Assistant's Name | |
| 1624 3a40 Can receive Rich Text | |
| 1625 3a41 Wedding Anniversary | |
| 1626 3a42 Birthday | |
| 1627 3a43 Hobbies | |
| 1628 3a44 Middle Name | |
| 1629 3a45 Display Name Prefix (Title) | |
| 1630 3a46 Profession | |
| 1631 3a47 Preferred By Name | |
| 1632 3a48 Spouse's Name | |
| 1633 3a49 Computer Network Name | |
| 1634 3a4a Customer ID | |
| 1635 3a4b TTY/TDD Phone | |
| 1636 3a4c Ftp Site | |
| 1637 3a4d Gender | |
| 1638 3a4e Manager's Name | |
| 1639 3a4f Nickname | |
| 1640 3a50 Personal Home Page | |
| 1641 3a51 Business Home Page | |
| 1642 3a57 Company Main Phone | |
| 1643 3a58 childrens names | |
| 1644 3a59 Home Address City | |
| 1645 3a5a Home Address Country | |
| 1646 3a5b Home Address Postal Code | |
| 1647 3a5c Home Address State or Province | |
| 1648 3a5d Home Address Street | |
| 1649 3a5e Home Address Post Office Box | |
| 1650 3a5f Other Address City | |
| 1651 3a60 Other Address Country | |
| 1652 3a61 Other Address Postal Code | |
| 1653 3a62 Other Address State | |
| 1654 3a63 Other Address Street | |
| 1655 3a64 Other Address Post Office box | |
| 1656 65e3 Entry ID | |
| 1657 67f2 Attachment ID2 value | |
| 36 | 1658 67ff Password checksum |
| 24 | 1659 6f02 Secure HTML Body |
| 1660 6f04 Secure Text Body | |
| 36 | 1661 7c07 Top of folders RecID |
| 24 | 1662 8005 Contact Fullname |
| 1663 801a Home Address | |
| 1664 801b Business Address | |
| 1665 801c Other Address | |
| 51 | 1666 8045 Work Address Street |
| 1667 8046 Work Address City | |
| 1668 8047 Work Address State | |
| 1669 8048 Work Address Postal Code | |
| 1670 8049 Work Address Country | |
| 1671 804a Work Address Post Office Box | |
| 24 | 1672 8082 Email Address 1 Transport |
| 1673 8083 Email Address 1 Address | |
| 1674 8084 Email Address 1 Description | |
| 1675 8085 Email Address 1 Record | |
| 1676 8092 Email Address 2 Transport | |
| 1677 8093 Email Address 2 Address | |
| 36 | 1678 8094 Email Address 2 Description |
| 24 | 1679 8095 Email Address 2 Record |
| 36 | 1680 80a2 Email Address 3 Transport |
| 24 | 1681 80a3 Email Address 3 Address |
| 1682 80a4 Email Address 3 Description | |
| 1683 80a5 Email Address 3 Record | |
| 1684 80d8 Internet Free/Busy | |
| 1685 8205 Appointment shows as | |
| 1686 8208 Appointment Location | |
| 51 | 1687 820d Appointment start |
| 1688 820e Appointment end | |
| 24 | 1689 8214 Label for appointment |
| 32 | 1690 8215 All day appointment flag |
| 51 | 1691 8231 Recurrence type |
| 1692 8232 Recurrence description | |
| 24 | 1693 8234 TimeZone of times |
| 51 | 1694 8235 Recurrence Start Time |
| 1695 8236 Recurrence End Time | |
| 1696 8501 Reminder minutes before appointment start | |
| 1697 8503 Reminder alarm | |
| 1698 8516 Common Time Start | |
| 1699 8517 Common Time End | |
| 1700 851f Play reminder sound filename | |
| 24 | 1701 8530 Followup String |
| 1702 8534 Mileage | |
| 1703 8535 Billing Information | |
| 1704 8554 Outlook Version | |
| 1705 8560 Appointment Reminder Time | |
| 1706 8700 Journal Entry Type | |
| 1707 8706 Start Timestamp | |
| 1708 8708 End Timestamp | |
| 51 | 1709 8712 Journal Entry Type - duplicate? |
| 24 | 1710 ]]></literallayout> |
| 1711 </refsect1> | |
| 1712 | |
| 28 | 1713 <refsect1 id='pst.file.desc2.5'> |
| 1714 <title>Associated Descriptor Item 0x7cec</title> | |
| 1715 <para> | |
| 35 | 1716 This style of descriptor block is similar to the 0xbcec format. |
| 28 | 1717 </para> |
| 1718 <literallayout class="monospaced"><![CDATA[ | |
| 1719 0000 7a 01 ec 7c 40 00 00 00 00 00 00 00 b5 04 02 00 | |
| 1720 0010 60 00 00 00 7c 18 60 00 60 00 62 00 65 00 20 00 | |
| 1721 0020 00 00 80 00 00 00 00 00 00 00 03 00 20 0e 0c 00 | |
| 1722 0030 04 03 1e 00 01 30 2c 00 04 0b 1e 00 03 37 28 00 | |
| 1723 0040 04 0a 1e 00 04 37 14 00 04 05 03 00 05 37 10 00 | |
| 1724 0050 04 04 1e 00 07 37 24 00 04 09 1e 00 08 37 20 00 | |
| 1725 0060 04 08 02 01 0a 37 18 00 04 06 03 00 0b 37 08 00 | |
| 1726 0070 04 02 1e 00 0d 37 1c 00 04 07 1e 00 0e 37 40 00 | |
| 1727 0080 04 10 02 01 0f 37 30 00 04 0c 1e 00 11 37 34 00 | |
| 1728 0090 04 0d 1e 00 12 37 3c 00 04 0f 1e 00 13 37 38 00 | |
| 1729 00A0 04 0e 03 00 f2 67 00 00 04 00 03 00 f3 67 04 00 | |
| 1730 00B0 04 01 03 00 09 69 44 00 04 11 03 00 fa 7f 5c 00 | |
| 1731 00C0 04 15 40 00 fb 7f 4c 00 08 13 40 00 fc 7f 54 00 | |
| 1732 00D0 08 14 03 00 fd 7f 48 00 04 12 0b 00 fe 7f 60 00 | |
| 1733 00E0 01 16 0b 00 ff 7f 61 00 01 17 45 82 00 00 00 00 | |
| 1734 00F0 45 82 00 00 78 3c 00 00 ff ff ff ff 49 1e 00 00 | |
| 1735 0100 06 00 00 00 00 00 00 00 a0 00 00 00 00 00 00 00 | |
| 1736 0110 00 00 00 00 00 00 00 00 00 00 00 00 c0 00 00 00 | |
| 1737 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| 1738 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 40 dd a3 | |
| 1739 0140 57 45 b3 0c 00 40 dd a3 57 45 b3 0c 02 00 00 00 | |
| 1740 0150 00 00 fa 10 3e 2a 86 48 86 f7 14 03 0a 03 02 01 | |
| 1741 0160 4a 2e 20 44 61 76 69 64 20 4b 61 72 61 6d 27 73 | |
| 1742 0170 20 42 69 72 74 68 64 61 79 00 06 00 00 00 0c 00 | |
| 1743 0180 14 00 ea 00 f0 00 55 01 60 01 79 01 | |
| 1744 | |
| 1745 0000 indexOffset [2 bytes] 0x017a in this case | |
| 1746 0002 signature [2 bytes] 0x7cec constant | |
| 35 | 1747 0004 7coffset [4 bytes] 0x0040 index reference |
| 28 | 1748 ]]></literallayout> |
| 1749 <para> | |
| 1750 Note the signature of 0x7cec. There are other descriptor block | |
| 1751 formats with other signatures. | |
| 1752 Note the indexOffset of 0x017a - starting at that position in the | |
| 1753 descriptor block, we have an array of two byte integers. The first | |
| 1754 integer (0x0006) is a (count-1) of the number of overlapping pairs | |
| 1755 following the count. The first pair is (0, 0xc), the next pair is (0xc, 0x14) | |
| 1756 and the last (7th) pair is (0x160, 0x179). These pairs are (start,end+1) | |
| 1757 offsets of items in this block. So we have count+2 integers following | |
| 1758 the count value. | |
| 1759 </para> | |
| 1760 <para> | |
| 35 | 1761 Note the 7coffset of 0x0040, which is an index reference. In this case, |
| 1762 it is an internal reference pointer, which needs to be right shifted by 4 bits | |
| 28 | 1763 to become 0x0004, which is then a byte offset to be added to the above |
| 1764 indexOffset plus two (to skip the count), so it points to the (0x14, 0xea) | |
| 1765 pair. We have the offset and size of the "7c" block located at offset 0x14 | |
| 1766 with a size of 214 bytes in this case. The "7c" block starts with | |
| 1767 a header with the following format: | |
| 1768 </para> | |
| 1769 <literallayout class="monospaced"><![CDATA[ | |
| 1770 0000 signature [1 bytes] 0x7c constant | |
| 1771 0001 itemCount [1 bytes] 0x18 in this case | |
| 1772 0002 unknown [2 bytes] 0x0060 in this case | |
| 1773 0004 unknown [2 bytes] 0x0060 in this case | |
| 1774 0006 unknown [2 bytes] 0x0062 in this case | |
| 1775 0008 recordSize [2 bytes] 0x0065 in this case | |
| 35 | 1776 000a b5Offset [4 bytes] 0x0020 index reference |
| 1777 000e index2Offset [4 bytes] 0x0080 index reference | |
| 28 | 1778 0010 unknown [2 bytes] 0x0000 in this case |
| 1779 0012 unknown [2 bytes] 0x0000 in this case | |
| 1780 0014 unknown [2 bytes] 0x0000 in this case | |
| 1781 ]]></literallayout> | |
| 1782 <para> | |
| 35 | 1783 Note the b5Offset of 0x0020, which is an index reference. In this case, |
| 1784 it is an internal reference pointer, which needs to be right shifted by 4 bits | |
| 28 | 1785 to become 0x0002, which is then a byte offset to be added to the above |
| 1786 indexOffset plus two (to skip the count), so it points to the (0xc, | |
| 1787 0x14) pair. Finally, we have the offset and size of the "b5" block | |
| 1788 located at offset 0xc with a size of 8 bytes in this descriptor block. | |
| 1789 The "b5" block has the following format: | |
| 1790 </para> | |
| 1791 <literallayout class="monospaced"><![CDATA[ | |
| 1792 0000 signature [2 bytes] 0x04b5 constant | |
| 1793 0002 unknown [2 bytes] 0x0002 in this case | |
| 35 | 1794 0004 descoffset [4 bytes] 0x0060 index reference |
| 28 | 1795 ]]></literallayout> |
| 1796 <para> | |
| 35 | 1797 Note the descoffset of 0x0060, which again is an index reference. In this |
| 1798 case, it is an internal pointer reference, which needs to be right shifted by 4 | |
| 28 | 1799 bits to become 0x0006, which is then a byte offset to be added to the |
| 1800 above indexOffset plus two (to skip the count), so it points to the | |
| 1801 (0xea, 0xf0) pair. That gives us (0xf0 - 0xea)/6 = 1, so we have a | |
| 1802 recordCount of one. The actual data between 0xea and 0xf0 is unknown | |
| 1803 and unused here. | |
| 1804 </para> | |
| 1805 <para> | |
| 35 | 1806 Note the index2Offset above of 0x0080, which again is an index reference. In this |
| 1807 case, it is an internal pointer reference, which needs to be right shifted | |
| 28 | 1808 by 4 bits to become 0x0008, which is then a byte offset to be added to |
| 1809 the above indexOffset plus two (to skip the count), so it points to the | |
| 1810 (0xf0, 0x155) pair. This is an array of tables of four byte integers. | |
| 1811 We will call these the IND2 tables. The size of each of these tables is | |
| 1812 specified by the recordSize field of the "7c" header. The number of | |
| 1813 these tables is the above recordCount value derived from the "b5" block. | |
| 1814 </para> | |
| 1815 <para> | |
| 1816 Now the remaining data in the "7c" block after the header starts at | |
| 1817 offset 0x2a. There should be itemCount 8 byte items here, with the | |
| 1818 following format: | |
| 1819 </para> | |
| 1820 <literallayout class="monospaced"><![CDATA[ | |
| 1821 0000 referenceType [2 bytes] | |
| 1822 0002 itemType [2 bytes] | |
| 1823 0004 ind2Offset [2 bytes] | |
| 35 | 1824 0006 size [1 byte] |
| 1825 0007 unknown [1 byte] | |
| 28 | 1826 ]]></literallayout> |
| 1827 <para> | |
| 35 | 1828 The ind2Offset is a byte offset into the current IND2 table of some value. |
| 1829 If that is a four byte integer value, then once we fetch that, we have | |
| 1830 the same triple (item type, reference type, value) as we find in the | |
| 1831 0xbcec style descriptor blocks. If not, then this value is used directly. | |
| 1832 These 8 byte descriptors are processed recordCount times, each | |
| 28 | 1833 time using the next IND2 table. The item and reference types are as |
| 1834 described above for the 0xbcec format descriptor block. | |
| 1835 </para> | |
| 1836 </refsect1> | |
| 1837 | |
| 48 | 1838 <refsect1 id='pst.file.desc3.32.5'> |
| 1839 <title>32 bit Associated Descriptor Item 0x0101</title> | |
| 35 | 1840 <para> |
| 49 | 1841 This descriptor block contains a list of ID1 values. It is used when |
| 1842 an ID1 (that would normally point to a type 0x7cec or 0xbcec | |
| 1843 descriptor block) contains more data than can fit in any single | |
| 1844 descriptor of those types. In this case, it points to a type 0x0101 | |
| 1845 block, which contains a list of ID1 values that themselves point to | |
| 1846 the actual descriptor blocks. The total length value in the 0x0101 | |
| 1847 header is the sum of the lengths of the blocks pointed to by the list | |
| 1848 of ID1 values. The result is an array of subblocks, that may contain | |
| 1849 index references where the high order 16 bits specify which descriptor | |
| 1850 subblock to use. Only the first descriptor subblock contains the | |
| 1851 signature (0xbcec or 0x7cec). | |
| 35 | 1852 </para> |
| 1853 <literallayout class="monospaced"><![CDATA[ | |
| 1854 0000 01 01 02 00 26 28 00 00 18 77 0c 00 b8 04 00 00 | |
| 1855 | |
| 1856 0000 signature [2 bytes] 0x0101 constant | |
| 1857 0002 count [2 bytes] 0x0002 in this case | |
| 49 | 1858 0004 total length [4 bytes] 0x002826 in this case |
| 35 | 1859 repeating |
| 49 | 1860 0008 id1 [4 bytes] 0x0c7718 in this case |
| 1861 000c id1 [4 bytes] 0x0004b8 in this case | |
| 35 | 1862 ]]></literallayout> |
| 1863 </refsect1> | |
| 1864 | |
| 48 | 1865 <refsect1 id='pst.file.desc3.64.5'> |
| 1866 <title>64 bit Associated Descriptor Item 0x0101</title> | |
| 1867 <para> | |
| 1868 This descriptor block contains a list of ID1 values. | |
| 1869 </para> | |
| 1870 <literallayout class="monospaced"><![CDATA[ | |
| 1871 0000 01 01 02 00 ea 29 00 00 10 83 00 00 00 00 00 00 | |
| 1872 0010 1c 83 00 00 00 00 00 00 | |
| 1873 | |
| 1874 0000 signature [2 bytes] 0x0101 constant | |
| 1875 0002 count [2 bytes] 0x0002 in this case | |
| 49 | 1876 0004 total length [4 bytes] 0x0029ea in this case |
| 48 | 1877 repeating |
| 49 | 1878 0008 id1 [8 bytes] 0x008310 in this case |
| 1879 0010 id1 [8 bytes] 0x00831c in this case | |
| 48 | 1880 ]]></literallayout> |
| 1881 </refsect1> | |
| 1882 | |
| 24 | 1883 </refentry> |
| 16 | 1884 </reference> |