Enum LogOp 

pub enum LogOp {
    Noop,
    CompensationLogRecord,
    InitializeFileRecordSegment,
    DeallocateFileRecordSegment,
    WriteEndOfFileRecordSegment,
    CreateAttribute,
    DeleteAttribute,
    UpdateResidentValue,
    UpdateNonResidentValue,
    UpdateMappingPairs,
    DeleteDirtyClusters,
    SetNewAttributeSizes,
    AddIndexEntryRoot,
    DeleteIndexEntryRoot,
    AddIndexEntryAllocation,
    DeleteIndexEntryAllocation,
    WriteEndOfIndexBuffer,
    SetIndexEntryVcnRoot,
    SetIndexEntryVcnAllocation,
    UpdateFileNameRoot,
    UpdateFileNameAllocation,
    SetBitsInNonResidentBitMap,
    ClearBitsInNonResidentBitMap,
    HotFix,
    EndTopLevelAction,
    PrepareTransaction,
    CommitTransaction,
    ForgetTransaction,
    OpenNonResidentAttribute,
    OpenAttributeTableDump,
    AttributeNamesDump,
    DirtyPageTableDump,
    TransactionTableDump,
    UpdateRecordDataRoot,
    UpdateRecordDataAllocation,
    Unknown(u16),
}

An NTFS $LogFile (LFS) redo/undo operation code.

These are the NTFS log-file-service operations (Brian Carrier, File System Forensic Analysis). The code→operation mapping is transcribed verbatim from the _SolveUndoRedoCodes function in jschicht’s LogFileParser — the exact lookup its GUI runs to label the RedoOP/UndoOP columns — so this enum’s mapping is identical to that tool’s by construction. Names use the canonical spelling (LogFileParser carries a few typos, e.g. “Segement”); the invariant shared with the tool is the numeric code, not the label. A code outside the documented 0x00..=0x22 range is surfaced verbatim via LogOp::Unknown, never silently mapped.

Variants

Noop

CompensationLogRecord

InitializeFileRecordSegment

DeallocateFileRecordSegment

WriteEndOfFileRecordSegment

CreateAttribute

DeleteAttribute

UpdateResidentValue

UpdateNonResidentValue

UpdateMappingPairs

DeleteDirtyClusters

SetNewAttributeSizes

AddIndexEntryRoot

DeleteIndexEntryRoot

AddIndexEntryAllocation

DeleteIndexEntryAllocation

WriteEndOfIndexBuffer

SetIndexEntryVcnRoot

SetIndexEntryVcnAllocation

UpdateFileNameRoot

UpdateFileNameAllocation

SetBitsInNonResidentBitMap

ClearBitsInNonResidentBitMap

HotFix

EndTopLevelAction

PrepareTransaction

CommitTransaction

ForgetTransaction

OpenNonResidentAttribute

OpenAttributeTableDump

AttributeNamesDump

DirtyPageTableDump

TransactionTableDump

UpdateRecordDataRoot

UpdateRecordDataAllocation

Unknown(u16)

A code outside the documented 0x00..=0x22 range, surfaced verbatim.

Implementations

impl LogOp

pub fn from_u16(code: u16) -> Self

Map a raw 16-bit redo/undo operation code to its operation.

pub fn code(self) -> u16

The raw 16-bit operation code (inverse of LogOp::from_u16).

Trait Implementations

impl Clone for LogOp

fn clone(&self) -> LogOp

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for LogOp

impl Debug for LogOp

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for LogOp

impl PartialEq for LogOp

fn eq(&self, other: &LogOp) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for LogOp