The Sleuth Kit
4.12.1
|
Created when a disk image has been opened and stores general information and handles. More...
#include <tsk_img.h>
Public Attributes | |
char | cache [TSK_IMG_INFO_CACHE_NUM][TSK_IMG_INFO_CACHE_LEN] |
read cache (r/w shared - lock) | |
int | cache_age [TSK_IMG_INFO_CACHE_NUM] |
"Age" of corresponding cache entry, higher means more recently used (r/w shared - lock) | |
size_t | cache_len [TSK_IMG_INFO_CACHE_NUM] |
Length of cache entry used (0 if never used) (r/w shared - lock) | |
tsk_lock_t | cache_lock |
Lock for cache and associated values. | |
TSK_OFF_T | cache_off [TSK_IMG_INFO_CACHE_NUM] |
starting byte offset of corresponding cache entry (r/w shared - lock) | |
void(* | close )(TSK_IMG_INFO *) |
TSK_TCHAR ** | images |
Image names. | |
void(* | imgstat )(TSK_IMG_INFO *, FILE *) |
Pointer to file type specific function. | |
TSK_IMG_TYPE_ENUM | itype |
Type of disk image format. | |
int | num_img |
Number of image files. | |
unsigned int | page_size |
page size of NAND page in bytes (defaults to 2048) | |
ssize_t(* | read )(TSK_IMG_INFO *img, TSK_OFF_T off, char *buf, size_t len) |
unsigned int | sector_size |
sector size of device in bytes (typically 512) | |
TSK_OFF_T | size |
Total size of image in bytes. | |
unsigned int | spare_size |
spare or OOB size of NAND in bytes (defaults to 64) | |
uint32_t | tag |
Set to TSK_IMG_INFO_TAG when struct is alloc. | |
Created when a disk image has been opened and stores general information and handles.
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.