19 package org.sleuthkit.datamodel;
21 import java.util.ArrayList;
22 import java.util.Collections;
23 import java.util.List;
24 import java.util.logging.Level;
25 import java.util.logging.Logger;
41 private static final Logger logger = Logger.getLogger(
FsContent.class.
getName());
42 private List<String> metaDataText = null;
108 long dataSourceObjectId,
117 long ctime,
long crtime,
long atime,
long mtime,
126 List<Attribute> fileAttributes) {
127 super(db, objId, dataSourceObjectId, Long.valueOf(fsObjId),
attrType,
attrId, name,
fileType,
metaAddr,
metaSeq,
dirType,
metaType,
dirFlag,
metaFlags,
size, ctime, crtime, atime, mtime,
modes,
uid, gid,
md5Hash,
sha256Hash,
sha1Hash,
knownState,
parentPath, mimeType, extension, ownerUid, osAccountObjId, fileAttributes);
144 @SuppressWarnings(
"deprecation")
146 if (fileHandle == 0) {
147 synchronized (
this) {
148 if (fileHandle == 0) {
161 @SuppressWarnings(
"deprecation")
162 long getFileHandle() {
178 @SuppressWarnings(
"deprecation")
179 protected synchronized
int readInt(byte[] buf,
long offset,
long len) throws TskCoreException {
180 if (offset == 0 &&
size == 0) {
193 }
catch (TskCoreException ex) {
194 logger.log(Level.SEVERE,
"Exception while calling 'getFileSystem' on " +
this, ex);
233 if (metaDataText != null) {
239 metaDataText =
new ArrayList<String>();
240 metaDataText.add(
"");
253 @SuppressWarnings(
"deprecation")
255 if (fileHandle != 0) {
285 }
catch (TskCoreException ex) {
286 logger.log(Level.SEVERE,
"Error loading unique path for object ID: {0}",
this.getId());
289 return super.toString(preserveState)
292 +
"\t" +
"uniquePath " + path
293 +
"\t" +
"fileHandle " + getFileHandle()
337 @SuppressWarnings(
"deprecation")
342 this(db, objId, db.getDataSourceObjectId(objId), fsObjId,
attrType, (int) attrId, name,
TSK_DB_FILES_TYPE_ENUM.
FS, metaAddr, metaSeq, dirType, metaType, dirFlag, metaFlags, size, ctime, crtime, atime, mtime, modes, uid, gid, md5Hash, null, null, knownState, parentPath, null, null,
OsAccount.NO_OWNER_ID,
OsAccount.NO_ACCOUNT, Collections.emptyList());
396 @SuppressWarnings(
"deprecation")
397 FsContent(SleuthkitCase db,
long objId,
long dataSourceObjectId,
long fsObjId, TSK_FS_ATTR_TYPE_ENUM attrType,
short attrId,
398 String name,
long metaAddr,
int metaSeq, TSK_FS_NAME_TYPE_ENUM dirType, TSK_FS_META_TYPE_ENUM metaType,
399 TSK_FS_NAME_FLAG_ENUM dirFlag,
short metaFlags,
long size,
long ctime,
long crtime,
long atime,
long mtime,
400 short modes,
int uid,
int gid, String md5Hash, FileKnown knownState, String parentPath, String mimeType) {
401 this(db, objId, dataSourceObjectId, fsObjId,
attrType, (int) attrId, name, TSK_DB_FILES_TYPE_ENUM.FS, metaAddr, metaSeq, dirType, metaType, dirFlag, metaFlags, size, ctime, crtime, atime, mtime, modes, uid, gid, md5Hash, null, null, knownState, parentPath, mimeType, null, OsAccount.NO_OWNER_ID, OsAccount.NO_ACCOUNT, Collections.emptyList());
FS
File that can be found in file system tree.
final TSK_FS_NAME_TYPE_ENUM dirType
synchronized int readInt(byte[] buf, long offset, long len)
static long openFile(long fsHandle, long fileId, TSK_FS_ATTR_TYPE_ENUM attrType, int attrId, SleuthkitCase skCase)
static int readFile(long fileHandle, byte[] readBuffer, long offset, long len)
final TskData.TSK_DB_FILES_TYPE_ENUM fileType
synchronized List< String > getMetaDataText()
final TskData.TSK_FS_ATTR_TYPE_ENUM attrType
TSK_FS_NAME_FLAG_ENUM dirFlag
AbstractFile getParentDirectory()
Set< TSK_FS_META_FLAG_ENUM > metaFlags
synchronized void close()
final Set< TskData.TSK_FS_META_MODE_ENUM > modes
TskData.FileKnown knownState
static List< String > getFileMetaDataText(long fileHandle)
SleuthkitCase getSleuthkitCase()
String toString(boolean preserveState)
static void closeFile(long fileHandle)
Optional< Long > getFileSystemObjectId()
final TSK_FS_META_TYPE_ENUM metaType
FileSystem getFileSystem()