The Sleuth Kit
4.12.1
|
Contains the internal "swapfs" specific functions. More...
#include "tsk_fs_i.h"
Functions | |
TSK_FS_INFO * | swapfs_open (TSK_IMG_INFO *img_info, TSK_OFF_T offset) |
Contains the internal "swapfs" specific functions.
The "swap" file system is used to process an arbitrary chunk of data as 4096-byte pages that have no other structure. This means that you can use the data-level tools, but that is it. This is similar to the rawfs code, but a different block size. This is primarily intended for Unix systems that have a swap space partition. Much of the code for swap and rawfs are similar and therefore share tsk_fs_nofs_XXXX functions, such as tsk_fs_nofs_close()
Copyright © 2007-2020 Brian Carrier. (carrier -at- sleuthkit -dot- org)
This work is licensed under a
Creative Commons Attribution-Share Alike 3.0 United States License.