`dissect.ffs.ffs`¶

Module Contents¶

Classes¶

`FFS`
`CylinderGroup`
`INode`

Functions¶

`fsbtodb`
`dbtofsb`
`cgbase`
`cgdata`
`cgmeta`
`cgdmin`
`cgimin`
`cgsblock`
`cgtod`
`cgstart`
`ino_to_cg`
`ino_to_fsba`
`ino_to_fsbo`
`blkstofrags`

Attributes¶

`log`
`DEV_BSIZE`
`SBLOCKSEARCH`

dissect.ffs.ffs.log¶

dissect.ffs.ffs.DEV_BSIZE = 512¶

dissect.ffs.ffs.SBLOCKSEARCH¶

class dissect.ffs.ffs.FFS(fh)¶

fh¶

sb = None¶

block_size¶

fragment_size¶

inode_size¶

mount_name¶

volume_name¶

cylinder_group¶

inode¶

root¶

static read_sb(fh, offset)¶

cylinder_groups()¶

get(path, node=None)¶

iter_inodes()¶

class dissect.ffs.ffs.CylinderGroup(fs, num)¶

fs¶

num¶

block¶

offset¶

cg¶

inode_allocated(inum)¶

class dissect.ffs.ffs.INode(fs, inum, name=None, filetype=None, parent=None)¶

fs¶

inum¶

name = None¶

parent = None¶

__repr__()¶

property cg¶

property inode¶

property size¶

property type¶

property mode¶

property atime¶

property atime_ns¶

property mtime¶

property mtime_ns¶

property ctime¶

property ctime_ns¶

property btime¶

property btime_ns¶

property link¶

property link_inode¶

property nblocks¶

is_dir()¶

is_file()¶

is_symlink()¶

listdir()¶

iterdir()¶

dataruns()¶

open()¶

dissect.ffs.ffs.fsbtodb(fs, b)¶

dissect.ffs.ffs.dbtofsb(fs, b)¶

dissect.ffs.ffs.cgbase(fs, c)¶

dissect.ffs.ffs.cgdata(fs, c)¶

dissect.ffs.ffs.cgmeta(fs, c)¶

dissect.ffs.ffs.cgdmin(fs, c)¶

dissect.ffs.ffs.cgimin(fs, c)¶

dissect.ffs.ffs.cgsblock(fs, c)¶

dissect.ffs.ffs.cgtod(fs, c)¶

dissect.ffs.ffs.cgstart(fs, c)¶

dissect.ffs.ffs.ino_to_cg(fs, x)¶

dissect.ffs.ffs.ino_to_fsba(fs, x)¶

dissect.ffs.ffs.ino_to_fsbo(fs, x)¶

dissect.ffs.ffs.blkstofrags(fs, blks)¶