Tuesday, November 30, 2010

A start in understanding the MS-PST Node Database Layer, your first step toward PST binary enlightenment…

Microsoft Open Specification Support Team Blog - MS-PST - How to Navigate the Node BTree

“The current version of the MS-PST open specification document can be found here: http://msdn.microsoft.com/en-us/library/ff385210(office.12).aspx

Introduction

The PST is a structured binary file format that contains messages, folders, and attachments. The file structure can be logically separated into 3 layers: the Node Database (NBD) layer, the Lists, Tables, and Properties (LTP) layer, and the Messaging layer. Each layer builds on the one before and because of this it is necessary to completely understand the NDB layer before the LTP layer, and to understand the LTP layer before the Messaging layer. Like building a house, you cannot start framing the walls until you pour the foundation. The Node BTree, which is an important part of the NBD layer is part of that foundation. Without it, you could not hope to be able to understand how the PST file format works much less be able to find what you are looking for.

We will be focusing on the Unicode version of the PST file format that was introduced in Outlook 2003 since most of the PST files you are likely to be working with will be in this format. Information on the differences between the Unicode and ANSI version can be found in section 2.2.1.2.

pagesnap…”

I love this kind of documentation. Understand binary formats are hard enough (I’ve been living in MS-CFB, MS-OLEPS, MS-OLSDS, MS-DOC and MS-XLS recently and let me tell you, my brain really hurts… ;) so this kind of walk through helps a great deal (Pictures = Less Greg Brain Pain ;). Sure it’s just barely scratching the surface, but sometimes all you need is a slight boost to get you going…

 

Related Past Post XRef:
MS-PST file format specification released. Yep, the full and complete specification for Outlook PST’s is now just a download away.
Open source PST SDK/library… from Microsoft!? Yep!

The Microsoft Office Visualization Tool (OffVis) – Spelunk (view, browse, peek into, etc) Microsoft Office Binary Format files
Microsoft Office (DOC, XLS, PPT) Binary File Format Specifications Released – We’re talking the full technical specification… (The [MS-DOC].pdf alone is 553 pages of very dense specification information)
DOC, XLS and PPT Binary File Format Specifications Released (plus WMF, Windows Compound File [aka OLE 2.0 Structured Storage] and Ink Serialized Format Specifications and Translator to XML news)
Microsoft Office Binary File Format Specifications Coming to a Download Near You...

No comments: