Mercurial > libpst
annotate xml/libpst.in @ 43:f6db1f060a95
start on outlook 2003 64 bit format
author | carl |
---|---|
date | Sun, 06 Jan 2008 14:47:06 -0800 |
parents | 6fe121a971c9 |
children | d4606d460daf |
rev | line source |
---|---|
16 | 1 <reference> |
2 <title>@PACKAGE@ Utilities - Version @VERSION@</title> | |
3 <partintro> | |
4 <title>Packages</title> | |
31 | 5 |
6 <para>This is a fork of the libpst project at SourceForge. Another fork | |
7 is located at <ulink | |
8 url="http://alioth.debian.org/projects/libpst/">http://alioth.debian.org/projects/libpst/</ulink> | |
9 </para> | |
10 | |
11 <para>The various source and binary packages are available at <ulink | |
12 url="http://www.five-ten-sg.com/@PACKAGE@/packages/">http://www.five-ten-sg.com/@PACKAGE@/packages/</ulink> | |
13 The most recent documentation is available at <ulink | |
14 url="http://www.five-ten-sg.com/@PACKAGE@/">http://www.five-ten-sg.com/@PACKAGE@/</ulink> | |
15 </para> | |
16 | |
24 | 17 </partintro> |
16 | 18 |
19 | |
20 <refentry id="readpst.1"> | |
21 <refentryinfo> | |
43 | 22 <date>2008-01-06</date> |
16 | 23 </refentryinfo> |
24 | |
25 <refmeta> | |
26 <refentrytitle>readpst</refentrytitle> | |
27 <manvolnum>1</manvolnum> | |
28 <refmiscinfo>readpst @VERSION@</refmiscinfo> | |
29 </refmeta> | |
30 | |
20 | 31 <refnamediv id='readpst.name.1'> |
16 | 32 <refname>readpst</refname> |
33 <refpurpose>convert PST (MS Outlook Personal Folders) files to mbox format</refpurpose> | |
34 </refnamediv> | |
35 | |
20 | 36 <refsynopsisdiv id='readpst.synopsis.1'> |
16 | 37 <title>Synopsis</title> |
38 <cmdsynopsis> | |
39 <command>readpst</command> | |
31 | 40 <arg><option>-b</option></arg> |
43 | 41 <arg><option>-C</option></arg> |
16 | 42 <arg><option>-c <replaceable class="parameter">format</replaceable></option></arg> |
43 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> | |
44 <arg><option>-h</option></arg> | |
45 <arg><option>-k</option></arg> | |
46 <arg><option>-o <replaceable class="parameter">output-directory</replaceable></option></arg> | |
47 <arg><option>-q</option></arg> | |
48 <arg><option>-r</option></arg> | |
49 <arg><option>-S</option></arg> | |
25 | 50 <arg><option>-M</option></arg> |
16 | 51 <arg><option>-V</option></arg> |
52 <arg><option>-w</option></arg> | |
43 | 53 <arg choice='plain'>pstfile</arg> |
16 | 54 </cmdsynopsis> |
55 </refsynopsisdiv> | |
56 | |
20 | 57 <refsect1 id='readpst.description.1'> |
58 <title>Description</title> | |
28 | 59 <para><command>readpst</command> is a program that can read an Outlook |
60 PST (Personal Folders) file and convert it into an mbox file, a format | |
61 suitable for KMail, a recursive mbox structure, or separate emails. | |
20 | 62 </para> |
63 </refsect1> | |
64 | |
65 <refsect1 id='readpst.options.1'> | |
16 | 66 <title>Options</title> |
67 <variablelist> | |
68 <varlistentry> | |
31 | 69 <term>-b</term> |
70 <listitem><para> | |
71 Do not save the attachments for the RTF format of the email body. | |
72 </para></listitem> | |
73 </varlistentry> | |
74 <varlistentry> | |
43 | 75 <term>-C</term> |
76 <listitem><para> | |
77 Decrypt the entire pst file and dump it to stdout. | |
78 </para></listitem> | |
79 </varlistentry> | |
80 <varlistentry> | |
16 | 81 <term>-c <replaceable class="parameter">format</replaceable></term> |
82 <listitem><para> | |
83 Set the Contact output mode. Use -cv for vcard format or -cl for an email list. | |
84 </para></listitem> | |
85 </varlistentry> | |
86 <varlistentry> | |
87 <term>-d <replaceable class="parameter">debug-file</replaceable></term> | |
88 <listitem><para> | |
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
89 Specify name of debug log file. The |
28 | 90 log file is not an ascii file, it is a binary file readable |
91 by <command>readpstlog</command>. | |
16 | 92 </para></listitem> |
93 </varlistentry> | |
94 <varlistentry> | |
95 <term>-h</term> | |
96 <listitem><para> | |
31 | 97 Show summary of options and exit. |
16 | 98 </para></listitem> |
99 </varlistentry> | |
100 <varlistentry> | |
101 <term>-k</term> | |
102 <listitem><para> | |
103 Changes the output format to KMail. | |
104 </para></listitem> | |
105 </varlistentry> | |
106 <varlistentry> | |
20 | 107 <term>-o <replaceable class="parameter">output-directory</replaceable></term> |
16 | 108 <listitem><para> |
109 Specifies the output directory. The directory must already exist, and | |
110 is entered after the PST file is opened, but before any processing of | |
111 files commences. | |
112 </para></listitem> | |
113 </varlistentry> | |
114 <varlistentry> | |
115 <term>-q</term> | |
116 <listitem><para> | |
117 Changes to silent mode. No feedback is printed to the screen, except | |
118 for error messages. | |
119 </para></listitem> | |
120 </varlistentry> | |
121 <varlistentry> | |
122 <term>-r</term> | |
123 <listitem><para> | |
124 Changes the output format to Recursive. This will create folders as | |
21 | 125 named in the PST file, and will put all emails in a file called "mbox" |
16 | 126 inside each folder. These files are then compatible with all |
127 mbox-compatible email clients. | |
128 </para></listitem> | |
129 </varlistentry> | |
130 <varlistentry> | |
131 <term>-S</term> | |
132 <listitem><para> | |
25 | 133 Output messages into separate files. This will create folders as named |
134 in the PST file, and will put each email in its own file. These files | |
28 | 135 will be numbered from 1 increasing in intervals of 1 (ie 1, 2, 3, ...). |
136 Any attachments are saved alongside each email as XXXXXXXXX-attach1, | |
137 XXXXXXXXX-attach2 and so on, or with the name of the attachment if one | |
138 is present. | |
16 | 139 </para></listitem> |
140 </varlistentry> | |
141 <varlistentry> | |
25 | 142 <term>-M</term> |
143 <listitem><para> | |
144 Output messages in MH format as separate files. This will create | |
28 | 145 folders as named in the PST file, and will put each email together with |
146 any attachments into its own file. These files will be numbered from 1 | |
147 to n with no leading zeros. | |
25 | 148 </para></listitem> |
149 </varlistentry> | |
150 <varlistentry> | |
16 | 151 <term>-V</term> |
152 <listitem><para> | |
31 | 153 Show program version and exit. |
16 | 154 </para></listitem> |
155 </varlistentry> | |
156 <varlistentry> | |
157 <term>-w</term> | |
158 <listitem><para> | |
20 | 159 Overwrite any previous output files. Beware: When used with the -S |
16 | 160 switch, this will remove all files from the target folder before |
161 writing. This is to keep the count of emails and attachments correct. | |
162 </para></listitem> | |
163 </varlistentry> | |
164 </variablelist> | |
165 </refsect1> | |
166 | |
20 | 167 <refsect1 id='readpst.also.1'> |
16 | 168 <title>See Also</title> |
169 <para> | |
25 | 170 <citerefentry><refentrytitle>readpstlog</refentrytitle> <manvolnum>1</manvolnum> </citerefentry> |
16 | 171 </para> |
172 </refsect1> | |
173 | |
20 | 174 <refsect1 id='readpst.author.1'> |
16 | 175 <title>Author</title> |
176 <para> | |
177 This manual page was originally written by Dave Smith | |
178 <dave.s@earthcorp.com>, and updated by Joe Nahmias <joe@nahmias.net> | |
179 for the Debian GNU/Linux system (but may be used by others). It was | |
20 | 180 subsequently updated by Brad Hards <bradh@frogmouth.net>, and converted to |
16 | 181 xml format by Carl Byington <carl@five-ten-sg.com>. |
182 </para> | |
183 </refsect1> | |
184 | |
20 | 185 <refsect1 id='readpst.copyright.1'> |
16 | 186 <title>Copyright</title> |
187 <para> | |
188 Copyright (C) 2002 by David Smith <dave.s@earthcorp.com>. | |
28 | 189 XML version Copyright (C) 2006 by 510 Software Group <carl@five-ten-sg.com>. |
16 | 190 </para> |
191 <para> | |
192 This program is free software; you can redistribute it and/or modify it | |
193 under the terms of the GNU General Public License as published by the | |
194 Free Software Foundation; either version 2, or (at your option) any | |
195 later version. | |
196 </para> | |
197 <para> | |
198 You should have received a copy of the GNU General Public License along | |
199 with this program; see the file COPYING. If not, please write to the | |
200 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
201 </para> | |
202 </refsect1> | |
203 | |
20 | 204 <refsect1 id='readpst.version.1'> |
16 | 205 <title>CVS Version</title> |
206 <para> | |
207 $Id$ | |
208 </para> | |
209 </refsect1> | |
210 </refentry> | |
211 | |
212 | |
43 | 213 <refentry id="lspst.1"> |
214 <refentryinfo> | |
215 <date>2008-01-06</date> | |
216 </refentryinfo> | |
217 | |
218 <refmeta> | |
219 <refentrytitle>lspst</refentrytitle> | |
220 <manvolnum>1</manvolnum> | |
221 <refmiscinfo>lspst @VERSION@</refmiscinfo> | |
222 </refmeta> | |
223 | |
224 <refnamediv id='lspst.name.1'> | |
225 <refname>lspst</refname> | |
226 <refpurpose>list PST (MS Outlook Personal Folders) file data</refpurpose> | |
227 </refnamediv> | |
228 | |
229 <refsynopsisdiv id='lspst.synopsis.1'> | |
230 <title>Synopsis</title> | |
231 <cmdsynopsis> | |
232 <command>lspst</command> | |
233 <arg choice='plain'>pstfile</arg> | |
234 </cmdsynopsis> | |
235 </refsynopsisdiv> | |
236 | |
237 <refsect1 id='lspst.description.1'> | |
238 <title>Description</title> | |
239 <para><command>lspst</command> is a program that can read an Outlook | |
240 PST (Personal Folders) file and produce a simple listing of the | |
241 data (contacts, email subjects, etc). | |
242 </para> | |
243 </refsect1> | |
244 | |
245 <refsect1 id='lspst.also.1'> | |
246 <title>See Also</title> | |
247 <para> | |
248 <citerefentry><refentrytitle>readpstlog</refentrytitle> <manvolnum>1</manvolnum> </citerefentry> | |
249 </para> | |
250 </refsect1> | |
251 | |
252 <refsect1 id='lspst.author.1'> | |
253 <title>Author</title> | |
254 <para> | |
255 lspst was written by Joe Nahmias <joe@nahmias.net> based on readpst. | |
256 This man page was written by 510 Software Group <carl@five-ten-sg.com>. | |
257 </para> | |
258 </refsect1> | |
259 | |
260 <refsect1 id='lspst.copyright.1'> | |
261 <title>Copyright</title> | |
262 <para> | |
263 Copyright (C) 2004 by Joe Nahmias <joe@nahmias.net>. | |
264 </para> | |
265 <para> | |
266 This program is free software; you can redistribute it and/or modify it | |
267 under the terms of the GNU General Public License as published by the | |
268 Free Software Foundation; either version 2, or (at your option) any | |
269 later version. | |
270 </para> | |
271 <para> | |
272 You should have received a copy of the GNU General Public License along | |
273 with this program; see the file COPYING. If not, please write to the | |
274 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
275 </para> | |
276 </refsect1> | |
277 | |
278 <refsect1 id='lspst.version.1'> | |
279 <title>CVS Version</title> | |
280 <para> | |
281 $Id$ | |
282 </para> | |
283 </refsect1> | |
284 </refentry> | |
285 | |
286 | |
16 | 287 <refentry id="readpstlog.1"> |
288 <refentryinfo> | |
43 | 289 <date>2008-01-06</date> |
16 | 290 </refentryinfo> |
291 | |
292 <refmeta> | |
293 <refentrytitle>readpstlog</refentrytitle> | |
294 <manvolnum>1</manvolnum> | |
295 <refmiscinfo>readpstlog @VERSION@</refmiscinfo> | |
296 </refmeta> | |
297 | |
20 | 298 <refnamediv id='readpstlog.name.1'> |
16 | 299 <refname>readpstlog</refname> |
24 | 300 <refpurpose>convert a <command>readpst</command> logfile to text format</refpurpose> |
16 | 301 </refnamediv> |
302 | |
20 | 303 <refsynopsisdiv id='readpstlog.synopsis.1'> |
16 | 304 <title>Synopsis</title> |
305 <cmdsynopsis> | |
24 | 306 <command>readpstlog</command> |
16 | 307 <arg><option>-f <replaceable class="parameter">format</replaceable></option></arg> |
308 <arg><option>-t <replaceable class="parameter">include-types</replaceable></option></arg> | |
309 <arg><option>-x <replaceable class="parameter">exclude-types</replaceable></option></arg> | |
24 | 310 <arg choice='plain'>logfile</arg> |
16 | 311 </cmdsynopsis> |
312 </refsynopsisdiv> | |
313 | |
20 | 314 <refsect1 id='readpstlog.description.1'> |
315 <title>Description</title> | |
21 | 316 <para><command>readpstlog</command> |
24 | 317 is a program that converts the binary logfile generated |
318 by <command>readpst</command> to a more desirable text format. | |
20 | 319 </para> |
320 </refsect1> | |
321 | |
322 <refsect1 id='readpstlog.options.1'> | |
16 | 323 <title>Options</title> |
324 <variablelist> | |
325 <varlistentry> | |
326 <term>-f <replaceable class="parameter">format</replaceable></term> | |
327 <listitem><para> | |
328 Sets the format of the text log output. Currently, the only valid output | |
36 | 329 formats are T, for single line text, D for the default default multi line |
330 format, and I for an indented style with single line text. | |
16 | 331 </para></listitem> |
332 </varlistentry> | |
333 <varlistentry> | |
334 <term>-t <replaceable class="parameter">include-types</replaceable></term> | |
335 <listitem><para> | |
336 Print only the specified types of log messages. | |
337 Types are specified in a comma-delimited list (e.g. 3,10,5,6). | |
338 </para></listitem> | |
339 </varlistentry> | |
340 <varlistentry> | |
341 <term>-x <replaceable class="parameter">exclude-types</replaceable></term> | |
342 <listitem><para> | |
343 Exclude the specified types of log messages. | |
344 Types are specified in a comma-delimited list (e.g. 3,10,5,6). | |
345 </para></listitem> | |
346 </varlistentry> | |
347 </variablelist> | |
348 </refsect1> | |
349 | |
20 | 350 <refsect1 id='readpstlog.message.types.1'> |
16 | 351 <title>Message Types</title> |
24 | 352 <para><command>readpstlog</command> understands the following types of log |
353 messages: | |
16 | 354 </para> |
355 <variablelist> | |
20 | 356 <varlistentry> |
357 <term>1</term> | |
358 <listitem><para> | |
359 File accesses | |
360 </para></listitem> | |
361 </varlistentry> | |
362 <varlistentry> | |
363 <term>2</term> | |
364 <listitem><para> | |
365 Index accesses | |
366 </para></listitem> | |
367 </varlistentry> | |
368 <varlistentry> | |
369 <term>3</term> | |
370 <listitem><para> | |
371 New email found | |
372 </para></listitem> | |
373 </varlistentry> | |
374 <varlistentry> | |
375 <term>4</term> | |
376 <listitem><para> | |
377 Warnings | |
378 </para></listitem> | |
379 </varlistentry> | |
380 <varlistentry> | |
381 <term>5</term> | |
382 <listitem><para> | |
383 Read accesses | |
384 </para></listitem> | |
385 </varlistentry> | |
386 <varlistentry> | |
387 <term>6</term> | |
388 <listitem><para> | |
389 Informational messages | |
390 </para></listitem> | |
391 </varlistentry> | |
392 <varlistentry> | |
393 <term>7</term> | |
394 <listitem><para> | |
395 Main function calls | |
396 </para></listitem> | |
397 </varlistentry> | |
398 <varlistentry> | |
399 <term>8</term> | |
400 <listitem><para> | |
401 Decrypting calls | |
402 </para></listitem> | |
403 </varlistentry> | |
404 <varlistentry> | |
36 | 405 <term>9</term> |
406 <listitem><para> | |
407 Function entries | |
408 </para></listitem> | |
409 </varlistentry> | |
410 <varlistentry> | |
20 | 411 <term>10</term> |
412 <listitem><para> | |
36 | 413 Function exits |
20 | 414 </para></listitem> |
415 </varlistentry> | |
416 <varlistentry> | |
417 <term>11</term> | |
418 <listitem><para> | |
419 HexDump calls | |
420 </para></listitem> | |
421 </varlistentry> | |
16 | 422 </variablelist> |
423 </refsect1> | |
424 | |
20 | 425 <refsect1 id='readpstlog.author.1'> |
16 | 426 <title>Author</title> |
427 <para> | |
428 This manual page was written by Joe Nahmias <joe@nahmias.net> | |
429 for the Debian GNU/Linux system (but may be used by others). It was | |
430 converted to xml format by Carl Byington <carl@five-ten-sg.com>. | |
431 </para> | |
432 </refsect1> | |
433 | |
20 | 434 <refsect1 id='readpstlog.copyright.1'> |
16 | 435 <title>Copyright</title> |
436 <para> | |
437 Copyright (C) 2002 by David Smith <dave.s@earthcorp.com>. | |
438 XML version Copyright (C) 2005 by 510 Software Group <carl@five-ten-sg.com>. | |
439 </para> | |
440 <para> | |
441 This program is free software; you can redistribute it and/or modify it | |
442 under the terms of the GNU General Public License as published by the | |
443 Free Software Foundation; either version 2, or (at your option) any | |
444 later version. | |
445 </para> | |
446 <para> | |
447 You should have received a copy of the GNU General Public License along | |
448 with this program; see the file COPYING. If not, please write to the | |
449 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
450 </para> | |
451 </refsect1> | |
452 | |
20 | 453 <refsect1 id='readpstlog.version.1'> |
16 | 454 <title>CVS Version</title> |
455 <para> | |
456 $Id$ | |
457 </para> | |
458 </refsect1> | |
459 </refentry> | |
24 | 460 |
461 | |
462 <refentry id="pst2ldif.1"> | |
463 <refentryinfo> | |
43 | 464 <date>2008-01-06</date> |
24 | 465 </refentryinfo> |
466 | |
467 <refmeta> | |
468 <refentrytitle>pst2ldif</refentrytitle> | |
469 <manvolnum>1</manvolnum> | |
470 <refmiscinfo>pst2ldif @VERSION@</refmiscinfo> | |
471 </refmeta> | |
472 | |
473 <refnamediv id='pst2ldif.name.1'> | |
474 <refname>pst2ldif</refname> | |
475 <refpurpose>extract contacts from a MS Outlook .pst file in .ldif format</refpurpose> | |
476 </refnamediv> | |
477 | |
478 <refsynopsisdiv id='pst2ldif.synopsis.1'> | |
479 <title>Synopsis</title> | |
480 <cmdsynopsis> | |
481 <command>pst2ldif</command> | |
482 <arg><option>-h</option></arg> | |
483 <arg><option>-V</option></arg> | |
484 <arg><option>-b <replaceable class="parameter">ldap-base</replaceable></option></arg> | |
485 <arg><option>-c <replaceable class="parameter">class</replaceable></option></arg> | |
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
486 <arg><option>-d <replaceable class="parameter">debug-file</replaceable></option></arg> |
24 | 487 <arg choice='plain'>pstfilename</arg> |
488 </cmdsynopsis> | |
489 </refsynopsisdiv> | |
490 | |
491 <refsect1 id='pst2ldif.options.1'> | |
492 <title>Options</title> | |
493 <variablelist> | |
494 <varlistentry> | |
495 <term>-h</term> | |
496 <listitem><para> | |
497 Show summary of options. Subsequent options are then ignored. | |
498 </para></listitem> | |
499 </varlistentry> | |
500 <varlistentry> | |
501 <term>-V <replaceable class="parameter">include-types</replaceable></term> | |
502 <listitem><para> | |
503 Show program version. Subsequent options are then ignored. | |
504 </para></listitem> | |
505 </varlistentry> | |
506 <varlistentry> | |
507 <term>-b <replaceable class="parameter">ldap-base</replaceable></term> | |
508 <listitem><para> | |
509 Sets the ldap base value used in the dn records. You probably want to | |
510 use something like "o=organization, c=US". | |
511 </para></listitem> | |
512 </varlistentry> | |
513 <varlistentry> | |
514 <term>-c <replaceable class="parameter">class</replaceable></term> | |
515 <listitem><para> | |
516 Sets the objectClass values for the contact items. This class needs to be | |
517 defined in the schema used by your LDAP server, and at a minimum it must | |
518 contain the ldap attributes given below. | |
519 </para></listitem> | |
520 </varlistentry> | |
33
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
521 <varlistentry> |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
522 <term>-d <replaceable class="parameter">debug-file</replaceable></term> |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
523 <listitem><para> |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
524 Specify name of debug log file. The |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
525 log file is not an ascii file, it is a binary file readable |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
526 by <command>readpstlog</command>. |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
527 </para></listitem> |
12cac756bc05
enable -d option, but if not specified, don't generate a debug file
carl
parents:
32
diff
changeset
|
528 </varlistentry> |
24 | 529 </variablelist> |
530 </refsect1> | |
531 | |
532 <refsect1 id='pst2ldif.description.1'> | |
533 <title>Description</title> | |
534 <para><command>pst2ldif</command> | |
535 reads the contact information from a MS Outlook .pst file | |
536 and produces a .ldif file that may be used to import those contacts | |
537 into an LDAP database. The following ldap attributes are generated: | |
538 <simplelist> | |
539 <member>cn </member> | |
540 <member>givenName </member> | |
541 <member>sn </member> | |
542 <member>personalTitle </member> | |
543 <member>company </member> | |
544 <member>mail </member> | |
545 <member>postalAddress </member> | |
546 <member>l </member> | |
547 <member>st </member> | |
548 <member>postalCode </member> | |
549 <member>c </member> | |
550 <member>homePhone </member> | |
551 <member>telephoneNumber </member> | |
552 <member>facsimileTelephoneNumber </member> | |
553 <member>mobile </member> | |
554 <member>description </member> | |
555 </simplelist> | |
556 </para> | |
557 </refsect1> | |
558 | |
559 <refsect1 id='pst2ldif.copyright.1'> | |
560 <title>Copyright</title> | |
561 <para> | |
562 Copyright (C) 2006 by 510 Software Group <carl@five-ten-sg.com> | |
563 </para> | |
564 <para> | |
565 This program is free software; you can redistribute it and/or modify it | |
566 under the terms of the GNU General Public License as published by the | |
567 Free Software Foundation; either version 2, or (at your option) any | |
568 later version. | |
569 </para> | |
570 <para> | |
571 You should have received a copy of the GNU General Public License along | |
572 with this program; see the file COPYING. If not, please write to the | |
573 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. | |
574 </para> | |
575 </refsect1> | |
576 | |
577 <refsect1 id='pst2ldif.version.1'> | |
578 <title>CVS Version</title> | |
579 <para> | |
580 $Id$ | |
581 </para> | |
582 </refsect1> | |
583 </refentry> | |
584 | |
585 | |
586 <refentry id="pst.5"> | |
587 <refentryinfo> | |
43 | 588 <date>2008-01-06</date> |
24 | 589 </refentryinfo> |
590 | |
591 <refmeta> | |
592 <refentrytitle>outlook.pst</refentrytitle> | |
593 <manvolnum>5</manvolnum> | |
594 </refmeta> | |
595 | |
596 <refnamediv id='pst.name.1'> | |
597 <refname>outlook.pst</refname> | |
598 <refpurpose>format of MS Outlook .pst file</refpurpose> | |
599 </refnamediv> | |
600 | |
601 <refsynopsisdiv id='pst.synopsis.1'> | |
602 <title>Synopsis</title> | |
603 <cmdsynopsis> | |
604 <command>outlook.pst</command> | |
605 </cmdsynopsis> | |
606 </refsynopsisdiv> | |
607 | |
608 <refsect1 id='pst.file.overview.5'> | |
609 <title>Overview</title> | |
610 <para> | |
611 Each item in a .pst file is identified by two id values ID1 and ID2. | |
612 There are two separate b-trees indexed by these ID1 and ID2 values. | |
613 </para> | |
614 </refsect1> | |
615 | |
616 <refsect1 id='pst.file.header.5'> | |
617 <title>File Header</title> | |
618 <para> | |
619 The file header is located at offset 0 in the .pst file. | |
620 </para> | |
621 <literallayout class="monospaced"><![CDATA[ | |
622 0000 21 42 44 4e 49 f8 64 d9 53 4d 0e 00 13 00 01 01 | |
623 0010 00 00 00 00 00 00 00 00 50 d6 03 00 bd 1e 02 00 | |
624 0020 08 4c 00 00 00 04 00 00 00 04 00 00 0f 04 00 00 | |
625 0030 0d 40 00 00 99 0a 01 00 18 04 00 00 0d 40 00 00 | |
626 0040 0d 40 00 00 11 80 00 00 02 04 00 00 0a 04 00 00 | |
627 0050 00 04 00 00 00 04 00 00 0f 04 00 00 0f 04 00 00 | |
628 0060 0f 04 00 00 0d 40 00 00 00 04 00 00 00 04 00 00 | |
629 0070 04 40 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
630 0080 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
631 0090 00 04 00 00 00 04 00 00 00 04 00 00 00 04 00 00 | |
632 00a0 0c 09 00 00 00 00 00 00 00 04 27 00 00 24 23 00 | |
633 00b0 c0 09 0a 00 00 c8 00 00 bc 1e 02 00 00 7e 0c 00 | |
634 00c0 b4 1e 02 00 00 54 00 00 01 00 00 00 23 55 44 d1 | |
635 00d0 5a 4f ce 6b 80 ff ff ff 00 00 00 00 00 00 00 00 | |
636 00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
637 00f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
638 0100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
639 0110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
640 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
641 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
642 0140 00 00 00 00 00 00 00 00 00 00 00 00 3f ff ff ff | |
643 0150 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
644 0160 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
645 0170 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
646 0180 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
647 0190 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
648 01a0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
649 01b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff | |
650 01c0 ff ff ff ff ff ff ff ff ff ff ff ff 80 01 00 00 | |
651 01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
652 01e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
653 01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
654 | |
655 0000 signature [4 bytes] 0x4e444221 constant | |
28 | 656 000a indexType [1 byte] 0x0e constant |
657 01cd encryptionType [1 byte] 0x01 constant | |
24 | 658 00a8 total file size [4 bytes] 0x270400 in this case |
28 | 659 00c0 backPointer1 [4 bytes] 0x021eb4 in this case |
660 00c4 offsetIndex1 [4 bytes] 0x005400 in this case | |
661 00b8 backPointer2 [4 bytes] 0x021ebc in this case | |
662 00bc offsetIndex2 [4 bytes] 0x0c7e00 in this case | |
24 | 663 ]]></literallayout> |
664 <para> | |
665 We only support index type 0x0E and encryption type 0x01. | |
666 </para> | |
667 <para> | |
28 | 668 offsetIndex1 is the file offset of the root of the |
24 | 669 index1 b-tree, which contains (ID1, offset, size, unknown) tuples |
28 | 670 for each item in the file. backPointer1 is the value that should |
24 | 671 appear in the parent pointer of that root node. |
672 </para> | |
673 <para> | |
28 | 674 offsetIndex2 is the file offset of the root of the |
24 | 675 index2 b-tree, which contains (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) |
28 | 676 tuples for each item in the file. backPointer2 is the value that should |
24 | 677 appear in the parent pointer of that root node. |
678 </para> | |
679 </refsect1> | |
680 | |
681 <refsect1 id='pst.file.node1.5'> | |
682 <title>Index 1 Node</title> | |
683 <para> | |
684 The index1 b-tree nodes are 516 byte blocks with the following format. | |
685 </para> | |
686 <literallayout class="monospaced"><![CDATA[ | |
687 0000 04 00 00 00 8a 1e 02 00 00 1c 0b 00 | |
688 000c 58 27 03 00 b3 1e 02 00 00 52 00 00 | |
689 0018 00 00 00 00 00 00 00 00 00 00 00 00 | |
690 0024 00 00 00 00 00 00 00 00 00 00 00 00 | |
691 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
692 003c 00 00 00 00 00 00 00 00 00 00 00 00 | |
693 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
694 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
695 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
696 006c 00 00 00 00 00 00 00 00 00 00 00 00 | |
697 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
698 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
699 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
700 009c 00 00 00 00 00 00 00 00 00 00 00 00 | |
701 00a8 00 00 00 00 00 00 00 00 00 00 00 00 | |
702 00b4 00 00 00 00 00 00 00 00 00 00 00 00 | |
703 00c0 00 00 00 00 00 00 00 00 00 00 00 00 | |
704 00cc 00 00 00 00 00 00 00 00 00 00 00 00 | |
705 00d8 00 00 00 00 00 00 00 00 00 00 00 00 | |
706 00e4 00 00 00 00 00 00 00 00 00 00 00 00 | |
707 00f0 00 00 00 00 00 00 00 00 00 00 00 00 | |
708 00fc 00 00 00 00 00 00 00 00 00 00 00 00 | |
709 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
710 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
711 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
712 012c 00 00 00 00 00 00 00 00 00 00 00 00 | |
713 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
714 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
715 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
716 015c 00 00 00 00 00 00 00 00 00 00 00 00 | |
717 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
718 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
719 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
720 018c 00 00 00 00 00 00 00 00 00 00 00 00 | |
721 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
722 01a4 00 00 00 00 00 00 00 00 00 00 00 00 | |
723 01b0 00 00 00 00 00 00 00 00 00 00 00 00 | |
724 01bc 00 00 00 00 00 00 00 00 00 00 00 00 | |
725 01c8 00 00 00 00 00 00 00 00 00 00 00 00 | |
726 01d4 00 00 00 00 00 00 00 00 00 00 00 00 | |
727 01e0 00 00 00 00 00 00 00 00 00 00 00 00 | |
728 01ec 00 00 00 00 02 29 0c 02 80 80 b6 4a | |
729 01f8 b4 1e 02 00 27 9c cc 56 58 27 03 00 | |
730 | |
28 | 731 01f0 itemCount [1 byte] 0x02 in this case |
732 01f1 maxItemCount [1 byte] 0x29 constant | |
733 01f3 nodeLevel [1 byte] 0x02 in this case | |
734 01f8 backPointer [4 bytes] 0x021eb4 in this case | |
24 | 735 ]]></literallayout> |
736 <para> | |
28 | 737 The itemCount specifies the number of 12 byte records that |
738 are active. The nodeLevel is non-zero for this style of nodes. | |
739 The leaf nodes have a different format. The backPointer must | |
740 match the backPointer from the triple that pointed to this node. | |
24 | 741 </para> |
742 <para> | |
35 | 743 Each item in this node is a triple of (ID1, backPointer, offset) |
24 | 744 where the offset points to the next deeper node in the tree, the |
28 | 745 backPointer value must match the backPointer in that deeper node, |
35 | 746 and ID1 is the lowest ID1 value in the subtree. |
24 | 747 </para> |
748 </refsect1> | |
749 | |
750 <refsect1 id='pst.file.leaf1.5'> | |
751 <title>Index 1 Leaf Node</title> | |
752 <para> | |
753 The index1 b-tree leaf nodes are 516 byte blocks with the following format. | |
754 </para> | |
755 <literallayout class="monospaced"><![CDATA[ | |
756 0000 04 00 00 00 00 58 00 00 64 00 0f 00 | |
757 000c 08 00 00 00 80 58 00 00 ac 00 06 00 | |
758 0018 0c 00 00 00 40 59 00 00 ac 00 06 00 | |
759 0024 10 00 00 00 00 5a 00 00 bc 00 03 00 | |
760 0030 14 00 00 00 00 5b 00 00 a4 00 02 00 | |
761 003c 18 00 00 00 c0 5b 00 00 64 00 02 00 | |
762 0048 1c 00 00 00 40 5c 00 00 5c 00 02 00 | |
763 0054 50 00 00 00 80 62 00 00 60 00 02 00 | |
764 0060 74 00 00 00 00 77 00 00 5e 00 02 00 | |
765 006c 7c 00 00 00 80 77 00 00 66 00 02 00 | |
766 0078 84 00 00 00 00 76 00 00 ca 00 02 00 | |
767 0084 88 00 00 00 00 63 00 00 52 00 02 00 | |
768 0090 90 00 00 00 00 79 00 00 58 00 02 00 | |
769 009c cc 00 00 00 c0 61 00 00 76 00 02 00 | |
770 00a8 e0 00 00 00 00 61 00 00 74 00 02 00 | |
771 00b4 f4 00 00 00 80 65 00 00 6e 00 02 00 | |
772 00c0 8c 01 00 00 40 60 00 00 70 00 02 00 | |
773 00cc ea 01 00 00 80 61 00 00 10 00 02 00 | |
774 00d8 ec 01 00 00 40 8a 00 00 f3 01 02 00 | |
775 00e4 f0 01 00 00 80 93 00 00 f4 1f 02 00 | |
776 00f0 fa 01 00 00 c0 7f 00 00 10 00 02 00 | |
777 00fc 00 02 00 00 00 89 00 00 34 01 02 00 | |
778 0108 1c 02 00 00 40 ec 00 00 12 06 02 00 | |
779 0114 22 02 00 00 00 84 00 00 10 00 02 00 | |
780 0120 24 02 00 00 c0 ea 00 00 3c 01 02 00 | |
781 012c 40 02 00 00 00 f4 00 00 0a 06 02 00 | |
782 0138 46 02 00 00 40 8c 00 00 10 00 02 00 | |
783 0144 48 02 00 00 80 f2 00 00 36 01 02 00 | |
784 0150 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
785 015c 6a 02 00 00 80 63 00 00 10 00 02 00 | |
786 0168 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
787 0174 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
788 0180 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
789 018c 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
790 0198 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
791 01a4 6c 02 00 00 40 fa 00 00 2a 01 02 00 | |
792 01b0 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
793 01bc 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
794 01c8 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
795 01d4 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
796 01e0 64 02 00 00 80 fb 00 00 bf 07 02 00 | |
797 01ec 00 00 00 00 1f 29 0c 00 80 80 5b b3 | |
798 01f8 5a 67 01 00 4f ae 70 a7 92 06 00 00 | |
799 | |
28 | 800 01f0 itemCount [1 byte] 0x1f in this case |
801 01f1 maxItemCount [1 byte] 0x29 constant | |
802 01f3 nodeLevel [1 byte] 0x00 in this case | |
803 01f8 backPointer [4 bytes] 0x01675a in this case | |
24 | 804 ]]></literallayout> |
805 <para> | |
28 | 806 The itemCount specifies the number of 12 byte records that |
807 are active. The nodeLevel is zero for these leaf nodes. | |
808 The backPointer must match the backPointer from the triple | |
24 | 809 that pointed to this node. |
810 </para> | |
811 <para> | |
812 Each item in this node is a tuple of (ID1, offset, size, unknown) | |
35 | 813 The two low order bits of the ID1 value seem to be flags. I have |
814 never seen a case with bit zero set. Bit one indicates that the | |
815 item is <emphasis>not</emphasis> encrypted. Note that references | |
816 to these ID1 values elsewhere may have the low order bit set (and | |
817 I don't know what that means), but when we do the search in this | |
818 tree we need to clear that bit so that we can find the correct item. | |
24 | 819 </para> |
820 </refsect1> | |
821 | |
822 <refsect1 id='pst.file.node2.5'> | |
823 <title>Index 2 Node</title> | |
824 <para> | |
825 The index2 b-tree nodes are 516 byte blocks with the following format. | |
826 </para> | |
827 <literallayout class="monospaced"><![CDATA[ | |
828 0000 21 00 00 00 bb 1e 02 00 00 e2 0b 00 | |
829 000c 64 78 20 00 8c 1e 02 00 00 dc 0b 00 | |
830 0018 00 00 00 00 00 00 00 00 00 00 00 00 | |
831 0024 00 00 00 00 00 00 00 00 00 00 00 00 | |
832 0030 00 00 00 00 00 00 00 00 00 00 00 00 | |
833 003c 00 00 00 00 00 00 00 00 00 00 00 00 | |
834 0048 00 00 00 00 00 00 00 00 00 00 00 00 | |
835 0054 00 00 00 00 00 00 00 00 00 00 00 00 | |
836 0060 00 00 00 00 00 00 00 00 00 00 00 00 | |
837 006c 00 00 00 00 00 00 00 00 00 00 00 00 | |
838 0078 00 00 00 00 00 00 00 00 00 00 00 00 | |
839 0084 00 00 00 00 00 00 00 00 00 00 00 00 | |
840 0090 00 00 00 00 00 00 00 00 00 00 00 00 | |
841 009c 00 00 00 00 00 00 00 00 00 00 00 00 | |
842 00a8 00 00 00 00 00 00 00 00 00 00 00 00 | |
843 00b4 00 00 00 00 00 00 00 00 00 00 00 00 | |
844 00c0 00 00 00 00 00 00 00 00 00 00 00 00 | |
845 00cc 00 00 00 00 00 00 00 00 00 00 00 00 | |
846 00d8 00 00 00 00 00 00 00 00 00 00 00 00 | |
847 00e4 00 00 00 00 00 00 00 00 00 00 00 00 | |
848 00f0 00 00 00 00 00 00 00 00 00 00 00 00 | |
849 00fc 00 00 00 00 00 00 00 00 00 00 00 00 | |
850 0108 00 00 00 00 00 00 00 00 00 00 00 00 | |
851 0114 00 00 00 00 00 00 00 00 00 00 00 00 | |
852 0120 00 00 00 00 00 00 00 00 00 00 00 00 | |
853 012c 00 00 00 00 00 00 00 00 00 00 00 00 | |
854 0138 00 00 00 00 00 00 00 00 00 00 00 00 | |
855 0144 00 00 00 00 00 00 00 00 00 00 00 00 | |
856 0150 00 00 00 00 00 00 00 00 00 00 00 00 | |
857 015c 00 00 00 00 00 00 00 00 00 00 00 00 | |
858 0168 00 00 00 00 00 00 00 00 00 00 00 00 | |
859 0174 00 00 00 00 00 00 00 00 00 00 00 00 | |
860 0180 00 00 00 00 00 00 00 00 00 00 00 00 | |
861 018c 00 00 00 00 00 00 00 00 00 00 00 00 | |
862 0198 00 00 00 00 00 00 00 00 00 00 00 00 | |
863 01a4 00 00 00 00 00 00 00 00 00 00 00 00 | |
864 01b0 00 00 00 00 00 00 00 00 00 00 00 00 | |
865 01bc 00 00 00 00 00 00 00 00 00 00 00 00 | |
866 01c8 00 00 00 00 00 00 00 00 00 00 00 00 | |
867 01d4 00 00 00 00 00 00 00 00 00 00 00 00 | |
868 01e0 00 00 00 00 00 00 00 00 00 00 00 00 | |
869 01ec 00 00 00 00 02 29 0c 02 81 81 b2 60 | |
870 01f8 bc 1e 02 00 7e 70 dc e3 21 00 00 00 | |
871 | |
28 | 872 01f0 itemCount [1 byte] 0x02 in this case |
873 01f1 maxItemCount [1 byte] 0x29 constant | |
874 01f3 nodeLevel [1 byte] 0x02 in this case | |
875 01f8 backPointer [4 bytes] 0x021ebc in this case | |
24 | 876 ]]></literallayout> |
877 <para> | |
28 | 878 The itemCount specifies the number of 12 byte records that |
879 are active. The nodeLevel is non-zero for this style of nodes. | |
880 The leaf nodes have a different format. The backPointer must | |
881 match the backPointer from the triple that pointed to this node. | |
24 | 882 </para> |
883 <para> | |
28 | 884 Each item in this node is a triple of (ID2, backPointer, offset) |
24 | 885 where the offset points to the next deeper node in the tree, the |
28 | 886 backPointer value must match the backPointer in that deeper node, |
24 | 887 and ID2 is the lowest ID2 value in the subtree. |
888 </para> | |
889 </refsect1> | |
890 | |
891 <refsect1 id='pst.file.leaf2.5'> | |
892 <title>Index 2 Leaf Node</title> | |
893 <para> | |
894 The index2 b-tree leaf nodes are 516 byte blocks with the following format. | |
895 </para> | |
896 <literallayout class="monospaced"><![CDATA[ | |
897 0000 21 00 00 00 38 e6 00 00 00 00 00 00 00 00 00 00 | |
898 0010 61 00 00 00 2c a8 02 00 36 a8 02 00 00 00 00 00 | |
899 0020 22 01 00 00 20 a2 02 00 00 00 00 00 22 01 00 00 | |
900 0030 2d 01 00 00 88 7b 03 00 00 00 00 00 00 00 00 00 | |
901 0040 2e 01 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
902 0050 2f 01 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 | |
903 0060 e1 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
904 0070 01 02 00 00 b4 e4 02 00 00 00 00 00 00 00 00 00 | |
905 0080 61 02 00 00 a0 e4 02 00 00 00 00 00 00 00 00 00 | |
906 0090 0d 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 | |
907 00A0 0e 06 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
908 00B0 0f 06 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 | |
909 00C0 10 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 | |
910 00D0 2b 06 00 00 84 00 00 00 00 00 00 00 00 00 00 00 | |
911 00E0 4c 06 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 | |
912 00F0 71 06 00 00 18 00 00 00 00 00 00 00 00 00 00 00 | |
913 0100 92 06 00 00 14 00 00 00 00 00 00 00 00 00 00 00 | |
914 0110 23 22 00 00 14 a0 02 00 00 00 00 00 22 01 00 00 | |
915 0120 26 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
916 0130 27 22 00 00 1c a0 02 00 00 00 00 00 00 00 00 00 | |
917 0140 22 80 00 00 50 00 00 00 00 00 00 00 22 01 00 00 | |
918 0150 2d 80 00 00 f8 9f 02 00 00 00 00 00 00 00 00 00 | |
919 0160 2e 80 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
920 0170 2f 80 00 00 34 e6 00 00 00 00 00 00 00 00 00 00 | |
921 0180 42 80 00 00 3c 6d 02 00 00 00 00 00 22 80 00 00 | |
922 0190 4d 80 00 00 04 00 00 00 00 00 00 00 00 00 00 00 | |
923 01A0 4e 80 00 00 10 6d 02 00 00 00 00 00 00 00 00 00 | |
924 01B0 4f 80 00 00 ec 23 00 00 00 00 00 00 00 00 00 00 | |
925 01C0 62 80 00 00 38 78 02 00 00 00 00 00 22 01 00 00 | |
926 01D0 6d 80 00 00 34 78 02 00 00 00 00 00 00 00 00 00 | |
927 01E0 6e 80 00 00 08 00 00 00 00 00 00 00 00 00 00 00 | |
928 01F0 10 1f 10 00 81 81 a0 9a ae 1e 02 00 89 44 6a 0f | |
929 0200 b8 b1 03 00 | |
930 | |
28 | 931 01f0 itemCount [1 byte] 0x10 in this case |
932 01f1 maxItemCount [1 byte] 0x1f constant | |
933 01f3 nodeLevel [1 byte] 0x00 in this case | |
934 01f8 backPointer [4 bytes] 0x021eae in this case | |
24 | 935 ]]></literallayout> |
936 <para> | |
28 | 937 The itemCount specifies the number of 16 byte records that |
938 are active. The nodeLevel is zero for these leaf nodes. | |
939 The backPointer must match the backPointer from the triple | |
24 | 940 that pointed to this node. |
941 </para> | |
942 <para> | |
943 Each item in this node is a tuple of (ID2, DESC-ID1, LIST-ID1, PARENT-ID2) | |
944 </para> | |
945 </refsect1> | |
946 | |
947 <refsect1 id='pst.file.list.5'> | |
948 <title>Associated List Item</title> | |
949 <para> | |
950 Contains associations between id1 and id2 for the items controlled by the record. | |
951 In the above leaf node, we have a tuple of (0x61, 0x02a82c, 0x02a836, 0) | |
952 0x02a836 is the ID1 of the associated list, and we can lookup that ID1 value | |
953 in the index1 b-tree to find the (offset,size) of the data in the .pst file. | |
954 </para> | |
955 <literallayout class="monospaced"><![CDATA[ | |
956 0000 02 00 01 00 9f 81 00 00 30 a8 02 00 00 00 00 00 | |
957 | |
958 0000 unknown [2 bytes] 0x0002 constant | |
959 0002 count [2 bytes] 0x0001 in this case | |
960 repeating | |
961 0004 id2 [4 bytes] 0x00819f in this case | |
962 0008 id [4 bytes] 0x02a830 in this case | |
963 000c unknown [4 bytes] 0 in this case | |
964 ]]></literallayout> | |
965 </refsect1> | |
966 | |
967 <refsect1 id='pst.file.desc.5'> | |
28 | 968 <title>Associated Descriptor Item 0xbcec</title> |
24 | 969 <para> |
28 | 970 Contains information about the item, which may be email, contact, or |
971 other outlook types. In the above leaf node, we have a tuple of (0x21, | |
972 0x00e638, 0, 0) 0x00e638 is the ID1 of the associated descriptor, and we | |
973 can lookup that ID1 value in the index1 b-tree to find the (offset,size) | |
974 of the data in the .pst file. | |
24 | 975 </para> |
976 <literallayout class="monospaced"><![CDATA[ | |
977 0000 3c 01 ec bc 20 00 00 00 00 00 00 00 b5 02 06 00 | |
978 0010 40 00 00 00 f9 0f 02 01 60 00 00 00 01 30 1e 00 | |
979 0020 80 00 00 00 04 30 1e 00 00 00 00 00 df 35 03 00 | |
980 0030 ff 00 00 00 e0 35 02 01 a0 00 00 00 e2 35 02 01 | |
981 0040 e0 00 00 00 e3 35 02 01 c0 00 00 00 e4 35 02 01 | |
982 0050 00 01 00 00 e5 35 02 01 20 01 00 00 e6 35 02 01 | |
983 0060 40 01 00 00 e7 35 02 01 60 01 00 00 1e 66 0b 00 | |
984 0070 00 00 00 00 ff 67 03 00 00 00 00 00 d2 7f 17 d8 | |
985 0080 64 8c d5 11 83 24 00 50 04 86 95 45 53 74 61 6e | |
986 0090 6c 65 79 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
987 00A0 24 00 50 04 86 95 45 22 80 00 00 00 00 00 00 d2 | |
988 00B0 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 42 | |
989 00C0 80 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
990 00D0 24 00 50 04 86 95 45 a2 80 00 00 00 00 00 00 d2 | |
991 00E0 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 c2 | |
992 00F0 80 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
993 0100 24 00 50 04 86 95 45 e2 80 00 00 00 00 00 00 d2 | |
994 0110 7f 17 d8 64 8c d5 11 83 24 00 50 04 86 95 45 02 | |
995 0120 81 00 00 00 00 00 00 d2 7f 17 d8 64 8c d5 11 83 | |
996 0130 24 00 50 04 86 95 45 62 80 00 00 00 0b 00 00 00 | |
997 0140 0c 00 14 00 7c 00 8c 00 93 00 ab 00 c3 00 db 00 | |
998 0150 f3 00 0b 01 23 01 3b 01 | |
999 | |
28 | 1000 0000 indexOffset [2 bytes] 0x013c in this case |
24 | 1001 0002 signature [2 bytes] 0xbcec constant |
35 | 1002 0004 b5offset [4 bytes] 0x0020 index reference |
24 | 1003 ]]></literallayout> |
1004 <para> | |
35 | 1005 Note the signature of 0xbcec. There are other descriptor block formats |
1006 with other signatures. Note the indexOffset of 0x013c - starting at | |
1007 that position in the descriptor block, we have an array of two byte | |
1008 integers. The first integer (0x000b) is a (count-1) of the number of | |
1009 overlapping pairs following the count. The first pair is (0, 0xc), the | |
1010 next pair is (0xc, 0x14) and the last (12th) pair is (0x123, 0x13b). | |
1011 These pairs are (start,end+1) offsets of items in this block. So we | |
1012 have count+2 integers following the count value. | |
24 | 1013 </para> |
1014 <para> | |
35 | 1015 Note the b5offset of 0x0020, which is a type that I will call an index |
1016 reference. Such index references have at least two different forms, and | |
1017 may point to data either in this block, or in some other block. | |
1018 External pointer references have the low order 4 bits all set, and are | |
1019 ID2 values that can be used to fetch data. This value of 0x0020 is an | |
1020 internal pointer reference, which needs to be right shifted by 4 bits to | |
1021 become 0x0002, which is then a byte offset to be added to the above | |
1022 indexOffset plus two (to skip the count), so it points to the (0xc, | |
1023 0x14) pair. | |
1024 </para> | |
1025 <para> | |
1026 Finally, we have the offset and size of the "b5" block located at offset 0xc | |
24 | 1027 with a size of 8 bytes in this descriptor block. The "b5" block has the |
1028 following format: | |
1029 </para> | |
1030 <literallayout class="monospaced"><![CDATA[ | |
1031 0000 signature [2 bytes] 0x02b5 constant | |
1032 0002 unknown [2 bytes] 0x0006 in this case | |
35 | 1033 0004 descoffset [4 bytes] 0x0040 index reference |
24 | 1034 ]]></literallayout> |
1035 <para> | |
35 | 1036 Note the descoffset of 0x0040, which again is an index reference. In this |
1037 case, it is an internal pointer reference, which needs to be right shifted by 4 bits | |
24 | 1038 to become 0x0004, which is then a byte offset to be added to the above |
28 | 1039 indexOffset plus two (to skip the count), so it points to the (0x14, 0x7c) |
24 | 1040 pair. We now have the offset 0x14 of the descriptor array, composed of 8 byte |
1041 entries. Each descriptor entry has the following format: | |
1042 </para> | |
1043 <literallayout class="monospaced"><![CDATA[ | |
28 | 1044 0000 itemType [2 bytes] |
1045 0002 referenceType [2 bytes] | |
24 | 1046 0004 value [4 bytes] |
1047 ]]></literallayout> | |
1048 <para> | |
1049 For some reference types (2, 3, 0xb) the value is used directly. Otherwise, | |
35 | 1050 the value is an index reference, which is either an ID2 value, or an |
1051 offset, to be right shifted by 4 bits and used to fetch a pair from the | |
1052 index table to find the offset and size of the item in this descriptor block. | |
24 | 1053 </para> |
1054 <para> | |
1055 The following reference types are known, but not all of these | |
1056 are implemented in the code yet. | |
1057 </para> | |
1058 <literallayout class="monospaced"><![CDATA[ | |
1059 0x0002 - Signed 16bit value | |
1060 0x0003 - Signed 32bit value | |
1061 0x0004 - 4-byte floating point | |
1062 0x0005 - Floating point double | |
1063 0x0006 - Signed 64-bit int | |
1064 0x0007 - Application Time | |
1065 0x000A - 32-bit error value | |
1066 0x000B - Boolean (non-zero = true) | |
1067 0x000D - Embedded Object | |
1068 0x0014 - 8-byte signed integer (64-bit) | |
1069 0x001E - Null terminated String | |
1070 0x001F - Unicode string | |
1071 0x0040 - Systime - Filetime structure | |
1072 0x0048 - OLE Guid | |
1073 0x0102 - Binary data | |
1074 0x1003 - Array of 32bit values | |
1075 0x1014 - Array of 64bit values | |
1076 0x101E - Array of Strings | |
1077 0x1102 - Array of Binary data | |
1078 ]]></literallayout> | |
1079 <para> | |
1080 The following item types are known, but not all of these | |
1081 are implemented in the code yet. | |
1082 Note: it appears that some types can have a IPOS value or a ID2 value | |
1083 depending on the size of the field in question. It is safer to check | |
1084 every field than for me to say what the "usually" contain. Absolute | |
1085 values though, are generally going to be constant. | |
1086 </para> | |
1087 <literallayout class="monospaced"><![CDATA[ | |
1088 0002 AutoForward allowed | |
1089 0003 Extended Attributes Table | |
1090 0017 Importance Level | |
1091 001a IPM Context. What type of message is this | |
1092 0023 Global Delivery Report | |
1093 0026 Priority | |
1094 0029 Read Receipt | |
1095 002b Reassignment Prohibited | |
1096 002e Original Sensitivity | |
1097 0036 Sensitivity | |
1098 0037 Email Subject. The referenced item is of type "Subject Type" | |
1099 0039 Date. This is likely to be the arrival date | |
1100 003b Outlook Address of Sender | |
1101 003f Outlook structure describing the recipient | |
1102 0040 Name of the Outlook recipient structure | |
1103 0041 Outlook structure describing the sender | |
1104 0042 Name of the Outlook sender structure | |
1105 0043 Another structure describing the recipient | |
1106 0044 Name of the second recipient structure | |
1107 004f Reply-To Outlook Structure | |
1108 0050 Name of the Reply-To structure | |
1109 0051 Outlook Name of recipient | |
1110 0052 Second Outlook name of recipient | |
1111 0057 My address in TO field | |
1112 0058 My address in CC field | |
1113 0059 Message addressed to me | |
1114 0063 Response requested | |
1115 0064 Sender's Address access method (SMTP, EX) | |
1116 0065 Sender's Address | |
1117 0070 Processed Subject (with Fwd:, Re, ... removed) | |
1118 0071 Date. Another date | |
1119 0075 Recipient Address Access Method (SMTP, EX) | |
1120 0076 Recipient's Address | |
1121 0077 Second Recipient Access Method (SMTP, EX) | |
1122 0078 Second Recipient Address | |
1123 007d Email Header. This is the header that was attached to the email | |
1124 0c17 Reply Requested | |
1125 0c19 Second sender struct | |
1126 0c1a Name of second sender struct | |
1127 0c1d Second outlook name of sender | |
1128 0c1e Second sender access method (SMTP, EX) | |
1129 0c1f Second Sender Address | |
1130 0e01 Delete after submit | |
1131 0e03 CC Address? | |
1132 0e04 SentTo Address | |
1133 0e06 Date. | |
1134 0e07 Flag - contains IsSeen value | |
1135 0e08 Message Size | |
1136 0e0a Sentmail EntryID | |
1137 0e1f Compressed RTF in Sync | |
1138 0e20 Attachment Size | |
1139 0ff9 binary record header | |
1140 1000 Plain Text Email Body. Does not exist if the email doesn't have a plain text version | |
1141 1006 RTF Sync Body CRC | |
1142 1007 RTF Sync Body character count | |
1143 1008 RTF Sync body tag | |
1144 1009 RTF Compressed body | |
1145 1010 RTF whitespace prefix count | |
1146 1011 RTF whitespace tailing count | |
36 | 1147 1013 HTML Email Body. Does not exist if the email doesn't have an HTML version |
24 | 1148 1035 Message ID |
1149 1042 In-Reply-To or Parent's Message ID | |
1150 1046 Return Path | |
1151 3001 Folder Name? I have seen this value used for the contacts record aswell | |
1152 3002 Address Type | |
1153 3003 Contact Address | |
1154 3004 Comment | |
1155 3007 Date item creation | |
1156 3008 Date item modification | |
1157 300b binary record header | |
1158 35df Valid Folder Mask | |
1159 35e0 binary record found in first item. Contains the reference to "Top of Personal Folder" item | |
1160 35e3 binary record with a reference to "Deleted Items" item | |
36 | 1161 35e7 binary record with a reference to "Search Root" item |
24 | 1162 3602 the number of emails stored in a folder |
1163 3603 the number of unread emails in a folder | |
1164 360a Has Subfolders | |
1165 3613 the folder content description | |
1166 3617 Associate Content count | |
1167 3701 Binary Data attachment | |
1168 3704 Attachment Filename | |
1169 3705 Attachement method | |
1170 3707 Attachment Filename long | |
1171 370b Attachment Position | |
1172 370e Attachment mime encoding | |
1173 3710 Attachment Mime Sequence | |
1174 3a00 Contact's Account name | |
1175 3a01 Contact Alternate Recipient | |
1176 3a02 Callback telephone number | |
1177 3a03 Message Conversion Prohibited | |
1178 3a05 Contacts Suffix | |
1179 3a06 Contacts First Name | |
1180 3a07 Contacts Government ID Number | |
1181 3a08 Business Telephone Number | |
1182 3a09 Home Telephone Number | |
1183 3a0a Contacts Initials | |
1184 3a0b Keyword | |
1185 3a0c Contact's Language | |
1186 3a0d Contact's Location | |
1187 3a0e Mail Permission | |
1188 3a0f MHS Common Name | |
1189 3a10 Organizational ID # | |
1190 3a11 Contacts Surname | |
1191 3a12 original entry id | |
1192 3a13 original display name | |
1193 3a14 original search key | |
1194 3a15 Default Postal Address | |
1195 3a16 Company Name | |
1196 3a17 Job Title | |
1197 3a18 Department Name | |
1198 3a19 Office Location | |
1199 3a1a Primary Telephone | |
1200 3a1b Business Phone Number 2 | |
1201 3a1c Mobile Phone Number | |
1202 3a1d Radio Phone Number | |
1203 3a1e Car Phone Number | |
1204 3a1f Other Phone Number | |
1205 3a20 Transmittable Display Name | |
1206 3a21 Pager Phone Number | |
1207 3a22 user certificate | |
1208 3a23 Primary Fax Number | |
1209 3a24 Business Fax Number | |
1210 3a25 Home Fax Number | |
1211 3a26 Business Address Country | |
1212 3a27 Business Address City | |
1213 3a28 Business Address State | |
1214 3a29 Business Address Street | |
1215 3a2a Business Postal Code | |
1216 3a2b Business PO Box | |
1217 3a2c Telex Number | |
1218 3a2d ISDN Number | |
1219 3a2e Assistant Phone Number | |
1220 3a2f Home Phone 2 | |
1221 3a30 Assistant's Name | |
1222 3a40 Can receive Rich Text | |
1223 3a41 Wedding Anniversary | |
1224 3a42 Birthday | |
1225 3a43 Hobbies | |
1226 3a44 Middle Name | |
1227 3a45 Display Name Prefix (Title) | |
1228 3a46 Profession | |
1229 3a47 Preferred By Name | |
1230 3a48 Spouse's Name | |
1231 3a49 Computer Network Name | |
1232 3a4a Customer ID | |
1233 3a4b TTY/TDD Phone | |
1234 3a4c Ftp Site | |
1235 3a4d Gender | |
1236 3a4e Manager's Name | |
1237 3a4f Nickname | |
1238 3a50 Personal Home Page | |
1239 3a51 Business Home Page | |
1240 3a57 Company Main Phone | |
1241 3a58 childrens names | |
1242 3a59 Home Address City | |
1243 3a5a Home Address Country | |
1244 3a5b Home Address Postal Code | |
1245 3a5c Home Address State or Province | |
1246 3a5d Home Address Street | |
1247 3a5e Home Address Post Office Box | |
1248 3a5f Other Address City | |
1249 3a60 Other Address Country | |
1250 3a61 Other Address Postal Code | |
1251 3a62 Other Address State | |
1252 3a63 Other Address Street | |
1253 3a64 Other Address Post Office box | |
1254 65e3 Entry ID | |
1255 67f2 Attachment ID2 value | |
36 | 1256 67ff Password checksum |
24 | 1257 6f02 Secure HTML Body |
1258 6f04 Secure Text Body | |
36 | 1259 7c07 Top of folders RecID |
24 | 1260 8000 Contain extra bits of information that have been taken from the email's header. I call them extra lines |
1261 8005 Contact Fullname | |
1262 801a Home Address | |
1263 801b Business Address | |
1264 801c Other Address | |
1265 8082 Email Address 1 Transport | |
1266 8083 Email Address 1 Address | |
1267 8084 Email Address 1 Description | |
1268 8085 Email Address 1 Record | |
1269 8092 Email Address 2 Transport | |
1270 8093 Email Address 2 Address | |
36 | 1271 8094 Email Address 2 Description |
24 | 1272 8095 Email Address 2 Record |
36 | 1273 80a2 Email Address 3 Transport |
24 | 1274 80a3 Email Address 3 Address |
1275 80a4 Email Address 3 Description | |
1276 80a5 Email Address 3 Record | |
1277 80d8 Internet Free/Busy | |
1278 8205 Appointment shows as | |
1279 8208 Appointment Location | |
1280 8214 Label for appointment | |
32 | 1281 8215 All day appointment flag |
24 | 1282 8234 TimeZone of times |
1283 8235 Appointment Start Time | |
1284 8236 Appointment End Time | |
1285 8516 Duplicate Time Start | |
1286 8517 Duplicate Time End | |
1287 8530 Followup String | |
1288 8534 Mileage | |
1289 8535 Billing Information | |
1290 8554 Outlook Version | |
1291 8560 Appointment Reminder Time | |
1292 8700 Journal Entry Type | |
1293 8706 Start Timestamp | |
1294 8708 End Timestamp | |
1295 8712 Journal Entry Type | |
1296 ]]></literallayout> | |
1297 </refsect1> | |
1298 | |
28 | 1299 <refsect1 id='pst.file.desc2.5'> |
1300 <title>Associated Descriptor Item 0x7cec</title> | |
1301 <para> | |
35 | 1302 This style of descriptor block is similar to the 0xbcec format. |
28 | 1303 </para> |
1304 <literallayout class="monospaced"><![CDATA[ | |
1305 0000 7a 01 ec 7c 40 00 00 00 00 00 00 00 b5 04 02 00 | |
1306 0010 60 00 00 00 7c 18 60 00 60 00 62 00 65 00 20 00 | |
1307 0020 00 00 80 00 00 00 00 00 00 00 03 00 20 0e 0c 00 | |
1308 0030 04 03 1e 00 01 30 2c 00 04 0b 1e 00 03 37 28 00 | |
1309 0040 04 0a 1e 00 04 37 14 00 04 05 03 00 05 37 10 00 | |
1310 0050 04 04 1e 00 07 37 24 00 04 09 1e 00 08 37 20 00 | |
1311 0060 04 08 02 01 0a 37 18 00 04 06 03 00 0b 37 08 00 | |
1312 0070 04 02 1e 00 0d 37 1c 00 04 07 1e 00 0e 37 40 00 | |
1313 0080 04 10 02 01 0f 37 30 00 04 0c 1e 00 11 37 34 00 | |
1314 0090 04 0d 1e 00 12 37 3c 00 04 0f 1e 00 13 37 38 00 | |
1315 00A0 04 0e 03 00 f2 67 00 00 04 00 03 00 f3 67 04 00 | |
1316 00B0 04 01 03 00 09 69 44 00 04 11 03 00 fa 7f 5c 00 | |
1317 00C0 04 15 40 00 fb 7f 4c 00 08 13 40 00 fc 7f 54 00 | |
1318 00D0 08 14 03 00 fd 7f 48 00 04 12 0b 00 fe 7f 60 00 | |
1319 00E0 01 16 0b 00 ff 7f 61 00 01 17 45 82 00 00 00 00 | |
1320 00F0 45 82 00 00 78 3c 00 00 ff ff ff ff 49 1e 00 00 | |
1321 0100 06 00 00 00 00 00 00 00 a0 00 00 00 00 00 00 00 | |
1322 0110 00 00 00 00 00 00 00 00 00 00 00 00 c0 00 00 00 | |
1323 0120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
1324 0130 00 00 00 00 00 00 00 00 00 00 00 00 00 40 dd a3 | |
1325 0140 57 45 b3 0c 00 40 dd a3 57 45 b3 0c 02 00 00 00 | |
1326 0150 00 00 fa 10 3e 2a 86 48 86 f7 14 03 0a 03 02 01 | |
1327 0160 4a 2e 20 44 61 76 69 64 20 4b 61 72 61 6d 27 73 | |
1328 0170 20 42 69 72 74 68 64 61 79 00 06 00 00 00 0c 00 | |
1329 0180 14 00 ea 00 f0 00 55 01 60 01 79 01 | |
1330 | |
1331 0000 indexOffset [2 bytes] 0x017a in this case | |
1332 0002 signature [2 bytes] 0x7cec constant | |
35 | 1333 0004 7coffset [4 bytes] 0x0040 index reference |
28 | 1334 ]]></literallayout> |
1335 <para> | |
1336 Note the signature of 0x7cec. There are other descriptor block | |
1337 formats with other signatures. | |
1338 Note the indexOffset of 0x017a - starting at that position in the | |
1339 descriptor block, we have an array of two byte integers. The first | |
1340 integer (0x0006) is a (count-1) of the number of overlapping pairs | |
1341 following the count. The first pair is (0, 0xc), the next pair is (0xc, 0x14) | |
1342 and the last (7th) pair is (0x160, 0x179). These pairs are (start,end+1) | |
1343 offsets of items in this block. So we have count+2 integers following | |
1344 the count value. | |
1345 </para> | |
1346 <para> | |
35 | 1347 Note the 7coffset of 0x0040, which is an index reference. In this case, |
1348 it is an internal reference pointer, which needs to be right shifted by 4 bits | |
28 | 1349 to become 0x0004, which is then a byte offset to be added to the above |
1350 indexOffset plus two (to skip the count), so it points to the (0x14, 0xea) | |
1351 pair. We have the offset and size of the "7c" block located at offset 0x14 | |
1352 with a size of 214 bytes in this case. The "7c" block starts with | |
1353 a header with the following format: | |
1354 </para> | |
1355 <literallayout class="monospaced"><![CDATA[ | |
1356 0000 signature [1 bytes] 0x7c constant | |
1357 0001 itemCount [1 bytes] 0x18 in this case | |
1358 0002 unknown [2 bytes] 0x0060 in this case | |
1359 0004 unknown [2 bytes] 0x0060 in this case | |
1360 0006 unknown [2 bytes] 0x0062 in this case | |
1361 0008 recordSize [2 bytes] 0x0065 in this case | |
35 | 1362 000a b5Offset [4 bytes] 0x0020 index reference |
1363 000e index2Offset [4 bytes] 0x0080 index reference | |
28 | 1364 0010 unknown [2 bytes] 0x0000 in this case |
1365 0012 unknown [2 bytes] 0x0000 in this case | |
1366 0014 unknown [2 bytes] 0x0000 in this case | |
1367 ]]></literallayout> | |
1368 <para> | |
35 | 1369 Note the b5Offset of 0x0020, which is an index reference. In this case, |
1370 it is an internal reference pointer, which needs to be right shifted by 4 bits | |
28 | 1371 to become 0x0002, which is then a byte offset to be added to the above |
1372 indexOffset plus two (to skip the count), so it points to the (0xc, | |
1373 0x14) pair. Finally, we have the offset and size of the "b5" block | |
1374 located at offset 0xc with a size of 8 bytes in this descriptor block. | |
1375 The "b5" block has the following format: | |
1376 </para> | |
1377 <literallayout class="monospaced"><![CDATA[ | |
1378 0000 signature [2 bytes] 0x04b5 constant | |
1379 0002 unknown [2 bytes] 0x0002 in this case | |
35 | 1380 0004 descoffset [4 bytes] 0x0060 index reference |
28 | 1381 ]]></literallayout> |
1382 <para> | |
35 | 1383 Note the descoffset of 0x0060, which again is an index reference. In this |
1384 case, it is an internal pointer reference, which needs to be right shifted by 4 | |
28 | 1385 bits to become 0x0006, which is then a byte offset to be added to the |
1386 above indexOffset plus two (to skip the count), so it points to the | |
1387 (0xea, 0xf0) pair. That gives us (0xf0 - 0xea)/6 = 1, so we have a | |
1388 recordCount of one. The actual data between 0xea and 0xf0 is unknown | |
1389 and unused here. | |
1390 </para> | |
1391 <para> | |
35 | 1392 Note the index2Offset above of 0x0080, which again is an index reference. In this |
1393 case, it is an internal pointer reference, which needs to be right shifted | |
28 | 1394 by 4 bits to become 0x0008, which is then a byte offset to be added to |
1395 the above indexOffset plus two (to skip the count), so it points to the | |
1396 (0xf0, 0x155) pair. This is an array of tables of four byte integers. | |
1397 We will call these the IND2 tables. The size of each of these tables is | |
1398 specified by the recordSize field of the "7c" header. The number of | |
1399 these tables is the above recordCount value derived from the "b5" block. | |
1400 </para> | |
1401 <para> | |
1402 Now the remaining data in the "7c" block after the header starts at | |
1403 offset 0x2a. There should be itemCount 8 byte items here, with the | |
1404 following format: | |
1405 </para> | |
1406 <literallayout class="monospaced"><![CDATA[ | |
1407 0000 referenceType [2 bytes] | |
1408 0002 itemType [2 bytes] | |
1409 0004 ind2Offset [2 bytes] | |
35 | 1410 0006 size [1 byte] |
1411 0007 unknown [1 byte] | |
28 | 1412 ]]></literallayout> |
1413 <para> | |
35 | 1414 The ind2Offset is a byte offset into the current IND2 table of some value. |
1415 If that is a four byte integer value, then once we fetch that, we have | |
1416 the same triple (item type, reference type, value) as we find in the | |
1417 0xbcec style descriptor blocks. If not, then this value is used directly. | |
1418 These 8 byte descriptors are processed recordCount times, each | |
28 | 1419 time using the next IND2 table. The item and reference types are as |
1420 described above for the 0xbcec format descriptor block. | |
1421 </para> | |
1422 </refsect1> | |
1423 | |
35 | 1424 <refsect1 id='pst.file.desc3.5'> |
1425 <title>Associated Descriptor Item 0x0002</title> | |
1426 <para> | |
1427 This style of descriptor block is almost unknown here. | |
1428 It seems to contain a list of ID1 values. | |
1429 </para> | |
1430 <literallayout class="monospaced"><![CDATA[ | |
1431 0000 01 01 02 00 26 28 00 00 18 77 0c 00 b8 04 00 00 | |
1432 | |
1433 0000 signature [2 bytes] 0x0101 constant | |
1434 0002 count [2 bytes] 0x0002 in this case | |
1435 0004 unknown [4 bytes] 0x002826 in this case | |
1436 repeating | |
1437 0008 id [4 bytes] 0x0c7718 in this case | |
1438 000c id [4 bytes] 0x0004b8 in this case | |
1439 ]]></literallayout> | |
1440 </refsect1> | |
1441 | |
24 | 1442 </refentry> |
16 | 1443 </reference> |