Hongyi Hu

Formatting is a pain. I can email you both the raw and the hexdump (annotated) of the particular MFT entry if you want to look at it.

Unfortunately not to my knowledge. I spoke with a TSK contributor a while back, and he thinks the issue is probably with compressed files.