Difference between revisions of "Blkstat"

From SleuthKitWiki
Jump to: navigation, search
m (Reformatted)
(Added link to man page.)
Line 1: Line 1:
 
Back to [[Help Documents]]
 
Back to [[Help Documents]]
  
==dstat==
+
data displays the allocation status of the given file system block.
Version 2.09
+
  
 
+
* [http://www.sleuthkit.org/sleuthkit/man/dstat.html Automatically Updated man Page]
===Purpose===
+
Displays the allocation status of the given data address.
+
 
+
 
+
===Usage===
+
dstat  [-f  fstype  ]  [-i imgtype] [-o imgoffset] [-vV] image [images] addr
+
 
+
 
+
===Options===
+
 
+
{| border="1" cellpadding="5"
+
!Switch
+
!Purpose
+
|-
+
| -f fstype || Specify the file system type. Use the -? option for supported types. If not given, the default type for the platform is used.
+
|-
+
| -i imgtype || Identify the type of image file, such as raw or split. Raw is the default.
+
|-
+
| -o imgoffset || The sector offset where the file system starts in the image.  Non-512 byte sectors can be specified using ’@’ (32@2048).
+
|-
+
| -v || Verbose output of debugging statements to stderr
+
|-
+
| -V || Display version
+
|-
+
| image [images] || One (or more if split) disk or partition images whose format is given with ’-i’.
+
|-
+
| addr || Address to display stats on. This is a fragment for UNIX file systems or a sector for FAT.
+
|}
+
 
+
 
+
===Example===
+
''No example given.''
+
 
+
 
+
===History===
+
dstat first appeared in TASK v1.0.
+
 
+
 
+
===Author===
+
Brian Carrier <carrier@sleuthkit.org>
+

Revision as of 19:31, 11 September 2008

Back to Help Documents

data displays the allocation status of the given file system block.