v2.0.0.50

Performance improvements cutting the processing time in half.
Several minor bugfixes related to the sqlite handling.
Relocated libraries into Lib folder.
Updated sqlite binaries to latest 3.42.
Bugfixes related to UpdateFileName
Updates to reparse tags.
Improvements in the attribute identification and association.
Extended the indx i30 schema to incorporate EaSize.
Various improvements in name association.
Better $I30 handling.

LogFile-UpdateFilename-I30-schema.sql

@@ -11,6 +11,7 @@ CREATE TABLE LogFile_UpdateFilename_I30(
 	,lf_RealSize		BIGINT NOT NULL
 	,lf_FileFlags		VARCHAR(128) NOT NULL
 	,lf_ReparseTag		VARCHAR(32) NOT NULL
+	,lf_EaSize			INT(8)
 	,lf_IsRedo          TINYINT(1) NOT NULL
 	,PRIMARY KEY (Id)
 );

LogFile_INDX_I30-schema.sql

@@ -17,6 +17,7 @@ CREATE TABLE LogFile_INDX_I30(
 	,lf_RealSize				BIGINT NOT NULL
 	,lf_FileFlags				VARCHAR(128) NOT NULL
 	,lf_ReparseTag				VARCHAR(32) NOT NULL
+	,lf_EaSize					INT(8)
 	,lf_FileName				VARCHAR(255) NOT NULL
 	,lf_FileNameModified		INT(3) NOT NULL
 	,lf_NameSpace				VARCHAR(9) NOT NULL

changelog.txt

@@ -1,5 +1,17 @@
 LogFileParser Changelog
 
+v2.0.0.50
+Performance improvements cutting the processing time in half.
+Several minor bugfixes related to the sqlite handling.
+Relocated libraries into Lib folder.
+Updated sqlite binaries to latest 3.42.
+Bugfixes related to UpdateFileName
+Updates to reparse tags.
+Improvements in the attribute identification and association.
+Extended the indx i30 schema to incorporate EaSize.
+Various improvements in name association.
+Better $I30 handling.
+
 v2.0.0.49
 Changed license to MIT.
 Fixed GUI bug.

import-sql/import-csv-logfile-INDX-I30.sql

@@ -6,7 +6,7 @@ OPTIONALLY ENCLOSED BY '"'
 ESCAPED BY '"'
 LINES TERMINATED BY '\n'
 IGNORE 1 LINES
-(lf_Offset,@lf_LSN,@lf_EntryNumber,@lf_MFTReference,@lf_MFTReferenceSeqNo,@lf_IndexFlags,@lf_MFTParentReference,@lf_MFTParentReferenceSeqNo,lf_CTime,lf_ATime,lf_MTime,lf_RTime,@lf_AllocSize,@lf_RealSize,lf_FileFlags,lf_ReparseTag,lf_FileName,@lf_FileNameModified,lf_NameSpace,@lf_SubNodeVCN,@IsRedo)
+(lf_Offset,@lf_LSN,@lf_EntryNumber,@lf_MFTReference,@lf_MFTReferenceSeqNo,@lf_IndexFlags,@lf_MFTParentReference,@lf_MFTParentReferenceSeqNo,lf_CTime,lf_ATime,lf_MTime,lf_RTime,@lf_AllocSize,@lf_RealSize,lf_FileFlags,@lf_ReparseTag,@lf_EaSize,lf_FileName,@lf_FileNameModified,lf_NameSpace,@lf_SubNodeVCN,@IsRedo)
 SET 
 lf_LSN = nullif(@lf_LSN,''),
 lf_EntryNumber = nullif(@lf_EntryNumber,''),
@@ -17,6 +17,8 @@ lf_MFTParentReference = nullif(@lf_MFTParentReference,''),
 lf_MFTParentReferenceSeqNo = nullif(@lf_MFTParentReferenceSeqNo,''),
 lf_AllocSize = nullif(@lf_AllocSize,''),
 lf_RealSize = nullif(@lf_RealSize,''),
+lf_ReparseTag = nullif(@lf_ReparseTag,''),
+lf_EaSize = nullif(@lf_EaSize,''),
 lf_FileNameModified = nullif(@lf_FileNameModified,''),
 lf_SubNodeVCN = nullif(@lf_SubNodeVCN,0),
 IsRedo = nullif(@IsRedo,'')

import-sql/import-csv-logfile-updatefilename-I30.sql

@@ -6,11 +6,12 @@ OPTIONALLY ENCLOSED BY '"'
 ESCAPED BY '"'
 LINES TERMINATED BY '\n'
 IGNORE 1 LINES
-(lf_Offset,@lf_LSN,lf_CTime,lf_ATime,lf_MTime,lf_RTime,@lf_AllocSize,@lf_RealSize,lf_FileFlags,lf_ReparseTag,@lf_IsRedo)
+(lf_Offset,@lf_LSN,lf_CTime,lf_ATime,lf_MTime,lf_RTime,@lf_AllocSize,@lf_RealSize,lf_FileFlags,lf_ReparseTag,@lf_EaSize,@lf_IsRedo)
 SET 
 lf_LSN = nullif(@lf_LSN,''),
 lf_AllocSize = nullif(@lf_AllocSize,''),
 lf_RealSize = nullif(@lf_RealSize,''),
+lf_EaSize = nullif(@lf_EaSize,''),
 lf_IsRedo = nullif(@lf_IsRedo,'')
 ;