Most naming conventions follow Helen Custer's book.
I'd recommend the following steps to get started with the NTFS tools:
1. edit config.h. You should make NTFS_VOLUME point to you ntfs partition.
   There used to be other parameters. If the tools fail to work, look at
   INSTALL.old, and contact me.

2. make. You hopefully get ntdump, ntgrep, ntdir, ntcat and ntfs.o
   If you want to try the kernel module now, continue with 10.

3. Set up a safe working environment. USE OF THESE TOOLS IS AT YOUR OWN
   RISK. I promise that, at the moment, they read only, but you should use
   the tools as a user who has read-only permission to the hard disk, anyways.
   If you are paranoid, make a back-up of everything you don't want to lose.

#if SKIP_UNLESS_YOU_HAVE_PROBLEMS
4. Try ntdir. This should give you a listing of the files

7. Once you found an interesting
   entry (say at offset 0x12F000), do
   	ntdump --mft -o 0x12F000
   This should give you the list of attributes. Check whether the names
   file dates, and the size of the data attribute are reported correctly.
   Then, look at the data runs. Dump these to see whether file contents
   location is reported correctly.

8. Locate the AttrDef file, even if you had problems with 7. Locate the
   data runs either with the --mft option, or by looking at the hex dump,
   if the prior method fails. Look at the attribute names and numbers
   and compare them to what dump.c uses.
#endif

9. To access NTFS from a higher level, use ntdir and ntcat. Try
		ntdir
		ntdir WINNT35
		ntcat WINNT35/WIN.INI

10.If all works well, you can try the kernel file system driver.
   Edit the 'make mount' to mount a NTFS partition. If you have an option,
   don't use the partition from which you boot NT. Change the mount point
   to a directory where you want to see your ntfs partition.
   Become root. make mount. If it complains about wrong versions, you have
   probably a -DMODVERSIONS kernel. Either recompile your kernel without
   module versioning, or try recompiling the module with -DMODVERSIONS.
   In any case, I'd recommend a kernel 1.2.0 or above.
   ls the mount points, vi WINNT35/WIN.INI, and do anything else you usually
   do with files on a file system.
   If it crashes, check /var/adm/debug. If it works, but is unreasonably slow,
   recompile w/o -DDEBUG.

11.Now you are in the position to start improving the ntfs driver. I'm waiting
   for your suggestions :)

Martin von Löwis
loewis@informatik.hu-berlin.de
