I'm collecting statistical data from an NTFS file system via
FSCTL_FILESYSTEM_GET_STATISTICS. Comparing the values I get in the structures
with the values I can get using fsutil on the command-line I see a difference
in absolute values.
A first comparison of UserFileReads, UserFileReadBytes and UserDiskReads
showed that the difference before and after some operations on the FS are
identical (i.e. there seems to be only an offset between the values
programmatically accquired and the output of fsutil, the values grow by
Can anyone explain that offset?