The Sleuth Kit  4.11.1
Public Attributes | List of all members
apfs_superblock Struct Reference

Public Attributes

uint64_t alloc_blocks
 
uint64_t created_timestamp
 
uint64_t er_state_oid
 
uint64_t extentref_tree_oid
 
uint32_t extentref_tree_type
 
uint64_t features
 
uint64_t flags
 
char formatted_by [APFS_MODIFIED_NAMELEN]
 
uint32_t fs_index
 
uint64_t incompatible_features
 
uint64_t last_mod_time
 
uint64_t last_xid
 
uint32_t magic
 
struct {
   uint32_t   cpflags
 
   uint32_t   key_os_version
 
   uint16_t   key_revision
 
   uint16_t   major_version
 
   uint16_t   minor_version
 
   uint32_t   persistent_class
 
   uint16_t   unused
 
meta_crypto
 
char name [APFS_VOLNAME_LEN]
 
uint32_t next_doc_id
 
uint64_t next_inum
 
uint64_t num_directories
 
uint64_t num_files
 
uint64_t num_other_fsobjects
 
uint64_t num_snapshots
 
uint64_t num_symlinks
 
apfs_obj_header obj_hdr
 
uint64_t omap_oid
 
uint64_t quota_blocks
 
uint64_t readonly_compatible_features
 
uint64_t reserve_blocks
 
uint16_t reserved
 
uint64_t revert_to_sblock_oid
 
uint64_t revert_to_xid
 
uint16_t role
 
uint64_t root_to_xid
 
uint64_t root_tree_oid
 
uint32_t root_tree_type
 
uint64_t snap_meta_tree_oid
 
uint32_t snap_meta_tree_type
 
uint64_t total_blocks_alloced
 
uint64_t total_blocks_freed
 
struct {
   char   kext_ver_str [APFS_MODIFIED_NAMELEN]
 
   uint64_t   last_xid
 
   uint64_t   timestamp
 
unmount_logs [APFS_MAX_HIST]
 
uint64_t unmount_time
 
uint8_t uuid [16]
 

The documentation for this struct was generated from the following file:

Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a Creative Commons Attribution-Share Alike 3.0 United States License.