The Sleuth Kit  4.11.1
Functions
idxonly.c File Reference

Contains the dummy functions that are used when only an index is used for lookups and the original database is gone. More...

#include "tsk_hashdb_i.h"

Functions

const TSK_TCHARidxonly_get_db_path (TSK_HDB_INFO *hdb_info)
 
uint8_t idxonly_getentry (TSK_HDB_INFO *hdb_info, const char *hash, TSK_OFF_T offset, TSK_HDB_FLAG_ENUM flags, TSK_HDB_LOOKUP_FN action, void *cb_ptr)
 
TSK_HDB_INFOidxonly_open (const TSK_TCHAR *db_path, const TSK_TCHAR *idx_path)
 

Detailed Description

Contains the dummy functions that are used when only an index is used for lookups and the original database is gone.

Function Documentation

TSK_HDB_INFO* idxonly_open ( const TSK_TCHAR db_path,
const TSK_TCHAR idx_path 
)
Parameters
db_pathPath to DB, which probably does not exist. But it gets passed in because we need it in a bunch of places.
idx_pathPath to index file (should be superset of db_path)

References TSK_HDB_INFO::db_type, TSK_HDB_BINSRCH_INFO::hash_type, hdb_binsrch_open(), PRIttocTSK, tsk_error_reset(), tsk_error_set_errno(), tsk_error_set_errstr(), TSK_HDB_DBTYPE_IDXONLY_ID, TSK_HDB_HTYPE_MD5_ID, and TSK_HDB_HTYPE_SHA1_ID.

Referenced by tsk_hdb_open().


Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.