Quote::
Can you kindly provide some screen shots or hex views of the changes you are seeing to the "NTFS journal" of the Source drive?
Sure. You can reproduce it by yourself:
1. Boot Windows system installed on NTFS.
2. Power cut.
3. Boot DEFT Linux.
4. Examine "/var/log/capser.log".
You can also compare hash values for NTFS partition.
PS. If anyone has questions about this issue, I can provide small virtual machine (in OVA format for VirtualBox) to reproduce the NTFS journal wipe quickly.
↧