Difference between revisions of "Blkstat"

From SleuthKitWiki
Jump to: navigation, search
(New page: Version 2.09 Man Page NAME dstat - Display details of a data structure (i.e. block or sector) SYNOPSIS dstat [-f fstype ] [-i imgtype] [-o imgoffset] [-vV] image [image...)
 
m (Reformatted)
Line 1: Line 1:
Version 2.09 Man Page
+
Back to [[Help Documents]]
  
NAME
+
==dstat==
      dstat - Display details of a data structure (i.e. block or sector)
+
Version 2.09
  
SYNOPSIS
 
      dstat  [-f  fstype  ]  [-i imgtype] [-o imgoffset] [-vV] image [images]
 
      addr
 
  
DESCRIPTION
+
===Purpose===
      dstat displays the allocation status of the given data address.
+
Displays the allocation status of the given data address.
  
      The options are as follows:
 
  
      -f fstype
+
===Usage===
              Specify the file system type. Use the -? option for supported
+
  dstat  [-f fstype ] [-i imgtype] [-o imgoffset] [-vV] image [images] addr
              types. If not given, the default type for the platform is used.
+
  
      -i imgtype
 
              Identify the type of image file, such as raw or split.  Raw  is
 
              the default.
 
  
      -o imgoffset
+
===Options===
              The  sector  offset  where  the file system starts in the image.
+
              Non-512 byte sectors can be specified using ’@’ (32@2048).
+
  
      -v     Verbose output of debugging statements to stderr
+
{| border="1" cellpadding="5"
 +
!Switch
 +
!Purpose
 +
|-
 +
| -f fstype || Specify the file system type. Use the -? option for supported types. If not given, the default type for the platform is used.
 +
|-
 +
| -i imgtype || Identify the type of image file, such as raw or split. Raw is the default.
 +
|-
 +
| -o imgoffset || The sector offset where the file system starts in the image.  Non-512 byte sectors can be specified using ’@’ (32@2048).
 +
|-
 +
| -v || Verbose output of debugging statements to stderr
 +
|-
 +
| -V || Display version
 +
|-
 +
| image [images] || One (or more if split) disk or partition images whose format is given with ’-i’.
 +
|-
 +
| addr || Address to display stats on. This is a fragment for UNIX file systems or a sector for FAT.
 +
|}
  
      -V    Display version
 
  
      image [images]
+
===Example===
              One (or more if split) disk or partition images whose format  is
+
''No example given.''
              given with ’-i’.
+
  
      addr  Address  to  display stats on.  This is a fragment for UNIX file
 
              systems or a sector for FAT.
 
  
SEE ALSO
+
===History===
      dd(1),
+
dstat first appeared in TASK v1.0.
  
HISTORY
 
      dstat first appeared in TASK v1.0.
 
  
AUTHOR
+
===Author===
      Brian Carrier <carrier@sleuthkit.org>
+
Brian Carrier <carrier@sleuthkit.org>

Revision as of 04:38, 18 November 2007

Back to Help Documents

dstat

Version 2.09


Purpose

Displays the allocation status of the given data address.


Usage

dstat  [-f  fstype  ]  [-i imgtype] [-o imgoffset] [-vV] image [images] addr


Options

Switch Purpose
-f fstype Specify the file system type. Use the -? option for supported types. If not given, the default type for the platform is used.
-i imgtype Identify the type of image file, such as raw or split. Raw is the default.
-o imgoffset The sector offset where the file system starts in the image. Non-512 byte sectors can be specified using ’@’ (32@2048).
-v Verbose output of debugging statements to stderr
-V Display version
image [images] One (or more if split) disk or partition images whose format is given with ’-i’.
addr Address to display stats on. This is a fragment for UNIX file systems or a sector for FAT.


Example

No example given.


History

dstat first appeared in TASK v1.0.


Author

Brian Carrier <carrier@sleuthkit.org>