dissect.xfs.xfs

Module Contents

Classes

XFS

AllocationGroup

INode

Functions

parse_fsblock

fsb_to_bb

Attributes

log

dissect.xfs.xfs.log
class dissect.xfs.xfs.XFS(fh: BinaryIO)
fh
ag
sb
block_size
version
name
uuid
meta_uuid
root
get(path: int | str, node: INode | None = None) → INode
get_allocation_group(agnum: int) → AllocationGroup
get_inode(absinum: int, *args, **kwargs) → INode
get_relative_inode(agnum: int, inum: int, *args, **kwargs) → INode
walk_agi(block: int, agnum: int) → collections.abc.Iterator[dissect.xfs.c_xfs.c_xfs.xfs_inobt_rec]
walk_extents(block: int) → collections.abc.Iterator[tuple[int, int, int, int]]
walk_large_tree(block: int, leaf_size: int, magic: list[int] | None = None) → collections.abc.Iterator[bytes]
walk_small_tree(block: int, agnum: int, leaf_size: int, magic: list[int] | None = None) → collections.abc.Iterator[bytes]
class dissect.xfs.xfs.AllocationGroup(xfs: XFS, fh: BinaryIO, num: int)
xfs
fh
num
sb
block_size
agi
get_inode
walk_extents(fsb: int) → collections.abc.Iterator[tuple[int, int, int, int]]
walk_agi() → collections.abc.Iterator[dissect.xfs.c_xfs.c_xfs.xfs_inobt_rec]
walk_tree(fsb: int, magic: list[int] | None = None, small: bool = False) → collections.abc.Iterator[bytes]
class dissect.xfs.xfs.INode(ag: AllocationGroup, inum: int, filename: str | None = None, filetype: int | None = None, parent: INode | None = None)
ag
xfs
inum
relative_inum
parent = None
filename = None
__repr__() → str
property inode: dissect.xfs.c_xfs.c_xfs.xfs_dinode
property size: int
property nblocks: int
property data_extents: int
property attr_extents: int
property filetype: int
property atime: datetime.datetime
property atime_ns: int
property mtime: datetime.datetime
property mtime_ns: int
property ctime: datetime.datetime
property ctime_ns: int
property crtime: datetime.datetime
property crtime_ns: int
listdir() → dict[str, INode]
dirlist
iterdir() → collections.abc.Iterator[INode]
datafork() → BinaryIO
attrfork() → BinaryIO
dataruns() → list[tuple[int | None, int]]
open() → BinaryIO
dissect.xfs.xfs.parse_fsblock(s: bytes) → tuple[int, int, int, int]
dissect.xfs.xfs.fsb_to_bb(block: int, agblklog: int) → tuple[int, int]