Difference between revisions of "Blkcalc"
From SleuthKitWiki
(New page: Version 2.09 Man Page NAME dcalc - Converts between unallocated disk unit numbers and regular disk unit numbers. SYNOPSIS dcalc [-dsu unit_addr] [-vV] [-i imgtype] [...) |
(Added data units link) |
||
(5 intermediate revisions by 2 users not shown) | |||
Line 1: | Line 1: | ||
− | + | Back to [[Help Documents]] | |
− | + | blkcalc is used to map between the output of [[blkls]] and the original file system [[data unit]]s. blkls can be used to extract the unallocated [[data unit]]s from a file system. Once data is found in the unallocated data though, you may want to know where the data was in the original file system. blkcalc is used for that. blkcalc used to be called dcalc. | |
− | + | ||
− | + | ||
− | + | * [http://www.sleuthkit.org/sleuthkit/man/blkcalc.html Automatically Updated man Page] | |
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + | ||
− | + |
Latest revision as of 07:50, 4 January 2010
Back to Help Documents
blkcalc is used to map between the output of blkls and the original file system data units. blkls can be used to extract the unallocated data units from a file system. Once data is found in the unallocated data though, you may want to know where the data was in the original file system. blkcalc is used for that. blkcalc used to be called dcalc.