NTFS Documentation: Index Buffer

Definition

This is a sub-node of the B+ tree that implements an index (e.g. a directory). It is stored in the stream of the index allocation attribute associated to the index it belongs to.

An INDX buffer is at least 2 KB large or the cluster size if larger (this seems to be a per-index parameter). It falls into 2 parts:

Offset to the beginning of the INDX buffer	Length	Description
0	4	Magic number 'INDX'
4	2	Offset to the update sequence
6	2	S=Size of the update sequence array + 1

10	8	VCN of the INDX buffer in the index allocation attribute
18	2	Offset to the beginning of the sequence of index entries part - 18

1C	4	Offset to the end of the sequence of index entries part - 18
20	4	Offset to the end of the INDX buffer - 18
24	4	1 if not leaf node
28	2	Update sequence
2A	2*(S-1)	Update sequence array

The sequence of index entries part
This is a sequence of index entries similar to the one found in the index root attribute.

Last modified: Tue Jan 26 15:17:12 PST 1999