Difference between revisions of "Fsstat"

From SleuthKitWiki
Jump to: navigation, search
m (Reformatted)
(Added link to man page.)
 
Line 1: Line 1:
 
Back to [[Help Documents]]
 
Back to [[Help Documents]]
  
==fsstat==
+
fsstat displays the details associated with a file system.  The output of this command is file system specific.  At a minimum,  the  range  of meta-data values (inode numbers) and content units (blocks or clusters) are given.  Also given are details from the Super Block, such as  mount times  and  and  features.    For file systems that use groups (FFS and EXT2FS), the layout of each group is listed.
Version 2.09
+
  
 
+
* [http://www.sleuthkit.org/sleuthkit/man/fsstat.html Automatically Updated man Page]
===Purpose===
+
Displays the details associated with a file system. The output of this command is file system specific. At a minimum,  the  range  of meta-data values (inode numbers) and content units (blocks or clusters) are given.  Also given are details from the Super Block, such as  mount times  and  and  features.    For file systems that use groups (FFS and EXT2FS), the layout of each group is listed.
+
<br />
+
For a FAT file system, the FAT table is displayed in a  condensed  format.  Note that the data is in sectors and not in clusters.
+
 
+
 
+
===Usage===
+
fsstat [-f fstype ] [-i imgtype] [-o imgoffset] [-tvV] image [images]
+
 
+
 
+
===Options===
+
 
+
{| border="1" cellpadding="5"
+
!Switch
+
!Purpose
+
|-
+
| -t type || Print the file system type only.
+
|-
+
| -f fstype || Specify the file system type. Use the -? option for supported types. If not given, the default type for the platform is used.
+
|-
+
| -i imgtype || Identify the type of image file, such as raw or split. Raw is the default.
+
|-
+
| -o imgoffset || The sector offset where the file system starts in the image. Non-512 byte sectors can be specified using ’@’ (32@2048).
+
|-
+
| -v || Verbose output of debugging statements to stderr
+
|-
+
| -V || Display version
+
|-
+
| image [images] || One (or more if split) disk or partition images whose format is given with ’-i’.
+
|}
+
 
+
 
+
===Example===
+
''No example given.''
+
 
+
 
+
===History===
+
fsstat first appeared in TASK v1.0.
+
 
+
 
+
===Author===
+
Brian Carrier <carrier@sleuthkit.org>
+

Latest revision as of 18:32, 11 September 2008

Back to Help Documents

fsstat displays the details associated with a file system. The output of this command is file system specific. At a minimum, the range of meta-data values (inode numbers) and content units (blocks or clusters) are given. Also given are details from the Super Block, such as mount times and and features. For file systems that use groups (FFS and EXT2FS), the layout of each group is listed.