dissect.ffs.ffs

Module Contents

Classes

FFS

CylinderGroup

INode

Functions

fsbtodb

dbtofsb

cgbase

cgdata

cgmeta

cgdmin

cgimin

cgsblock

cgtod

cgstart

ino_to_cg

ino_to_fsba

ino_to_fsbo

blkstofrags

Attributes

log

DEV_BSIZE

SBLOCKSEARCH

dissect.ffs.ffs.log
dissect.ffs.ffs.DEV_BSIZE = 512
dissect.ffs.ffs.SBLOCKSEARCH
class dissect.ffs.ffs.FFS(fh: BinaryIO)
fh
sb = None
block_size
fragment_size
inode_size
mount_name
volume_name
cylinder_group
inode
root
static read_sb(fh: BinaryIO, offset: int) → dissect.ffs.c_ffs.c_ffs.fs
cylinder_groups() → collections.abc.Iterator[CylinderGroup]
get(path: str | int, node: INode | None = None) → INode
iter_inodes() → collections.abc.Iterator[INode]
class dissect.ffs.ffs.CylinderGroup(fs: FFS, num: int)
fs
num
block
offset
cg
inode_allocated(inum: int) → bool
class dissect.ffs.ffs.INode(fs: FFS, inum: int, name: str | None = None, filetype: int | None = None, parent: INode | None = None)
fs
inum
name = None
parent = None
__repr__() → str
property cg: CylinderGroup
property inode: dissect.ffs.c_ffs.c_ffs.ufs1_dinode | dissect.ffs.c_ffs.c_ffs.ufs2_dinode
property size: int
property type: int
property mode: int
property atime: datetime.datetime
property atime_ns: int
property mtime: datetime.datetime
property mtime_ns: int
property ctime: datetime.datetime
property ctime_ns: int
property btime: datetime.datetime | None
property btime_ns: int | None
property nblocks: int
is_dir() → bool
is_file() → bool
listdir() → dict[str, INode]
iterdir() → collections.abc.Iterator[INode]
dataruns() → list[tuple[int, int]]
open() → io.BytesIO | dissect.util.stream.RunlistStream
dissect.ffs.ffs.fsbtodb(fs: FFS, b: int) → int
dissect.ffs.ffs.dbtofsb(fs: FFS, b: int) → int
dissect.ffs.ffs.cgbase(fs: FFS, c: int) → int
dissect.ffs.ffs.cgdata(fs: FFS, c: int) → int
dissect.ffs.ffs.cgmeta(fs: FFS, c: int) → int
dissect.ffs.ffs.cgdmin(fs: FFS, c: int) → int
dissect.ffs.ffs.cgimin(fs: FFS, c: int) → int
dissect.ffs.ffs.cgsblock(fs: FFS, c: int) → int
dissect.ffs.ffs.cgtod(fs: FFS, c: int) → int
dissect.ffs.ffs.cgstart(fs: FFS, c: int) → int
dissect.ffs.ffs.ino_to_cg(fs: FFS, x: int) → int
dissect.ffs.ffs.ino_to_fsba(fs: FFS, x: int) → int
dissect.ffs.ffs.ino_to_fsbo(fs: FFS, x: int) → int
dissect.ffs.ffs.blkstofrags(fs: FFS, blks: int) → int