19 package org.sleuthkit.datamodel;
21 import java.util.ArrayList;
22 import java.util.Collections;
23 import java.util.List;
24 import java.util.logging.Level;
25 import java.util.logging.Logger;
41 private static final Logger logger = Logger.getLogger(
FsContent.class.
getName());
42 private List<String> metaDataText = null;
109 long dataSourceObjectId,
118 long ctime,
long crtime,
long atime,
long mtime,
128 List<Attribute> fileAttributes) {
129 super(db, objId, dataSourceObjectId, Long.valueOf(fsObjId),
attrType,
attrId, name,
fileType,
metaAddr,
metaSeq,
dirType,
metaType,
dirFlag,
metaFlags,
size, ctime, crtime, atime, mtime,
modes,
uid, gid,
md5Hash,
sha256Hash,
sha1Hash,
knownState,
parentPath, mimeType, extension, ownerUid, osAccountObjId, collected, fileAttributes);
146 @SuppressWarnings(
"deprecation")
148 if (fileHandle == 0) {
149 synchronized (
this) {
150 if (fileHandle == 0) {
163 @SuppressWarnings(
"deprecation")
164 long getFileHandle() {
180 @SuppressWarnings(
"deprecation")
181 protected synchronized
int readInt(byte[] buf,
long offset,
long len) throws TskCoreException {
182 if (offset == 0 &&
size == 0) {
195 }
catch (TskCoreException ex) {
196 logger.log(Level.SEVERE,
"Exception while calling 'getFileSystem' on " +
this, ex);
235 if (metaDataText != null) {
241 metaDataText =
new ArrayList<String>();
242 metaDataText.add(
"");
255 @SuppressWarnings(
"deprecation")
257 if (fileHandle != 0) {
287 }
catch (TskCoreException ex) {
288 logger.log(Level.SEVERE,
"Error loading unique path for object ID: {0}",
this.getId());
291 return super.toString(preserveState)
294 +
"\t" +
"uniquePath " + path
295 +
"\t" +
"fileHandle " + getFileHandle()
339 @SuppressWarnings(
"deprecation")
344 this(db, objId, db.getDataSourceObjectId(objId), fsObjId,
attrType, (int) attrId, name,
TSK_DB_FILES_TYPE_ENUM.
FS, metaAddr, metaSeq, dirType, metaType, dirFlag, metaFlags, size, ctime, crtime, atime, mtime, modes, uid, gid, md5Hash, null, null, knownState, parentPath, null, null,
OsAccount.NO_OWNER_ID,
OsAccount.NO_ACCOUNT, Collections.emptyList());
398 @SuppressWarnings(
"deprecation")
399 FsContent(SleuthkitCase db,
long objId,
long dataSourceObjectId,
long fsObjId, TSK_FS_ATTR_TYPE_ENUM attrType,
short attrId,
400 String name,
long metaAddr,
int metaSeq, TSK_FS_NAME_TYPE_ENUM dirType, TSK_FS_META_TYPE_ENUM metaType,
401 TSK_FS_NAME_FLAG_ENUM dirFlag,
short metaFlags,
long size,
long ctime,
long crtime,
long atime,
long mtime,
402 short modes,
int uid,
int gid, String md5Hash, FileKnown knownState, String parentPath, String mimeType) {
403 this(db, objId, dataSourceObjectId, fsObjId,
attrType, (int) attrId, name, TSK_DB_FILES_TYPE_ENUM.FS, metaAddr, metaSeq, dirType, metaType, dirFlag, metaFlags, size, ctime, crtime, atime, mtime, modes, uid, gid, md5Hash, null, null, knownState, parentPath, mimeType, null, OsAccount.NO_OWNER_ID, OsAccount.NO_ACCOUNT, Collections.emptyList());
463 @SuppressWarnings(
"deprecation")
464 FsContent(SleuthkitCase db,
466 long dataSourceObjectId,
468 TSK_FS_ATTR_TYPE_ENUM attrType,
int attrId,
471 long metaAddr,
int metaSeq,
472 TSK_FS_NAME_TYPE_ENUM dirType, TSK_FS_META_TYPE_ENUM metaType,
473 TSK_FS_NAME_FLAG_ENUM dirFlag,
short metaFlags,
475 long ctime,
long crtime,
long atime,
long mtime,
476 short modes,
int uid,
int gid,
478 FileKnown knownState,
484 List<Attribute> fileAttributes) {
485 this(db, objId, dataSourceObjectId, fsObjId,
attrType,
attrId, name, TSK_DB_FILES_TYPE_ENUM.FS,
metaAddr,
metaSeq,
dirType,
metaType,
dirFlag,
metaFlags,
size, ctime, crtime, atime, mtime,
modes,
uid, gid,
md5Hash, null, null,
knownState,
parentPath, mimeType, null, OsAccount.NO_OWNER_ID, OsAccount.NO_ACCOUNT, TskData.CollectedStatus.UNKNOWN, Collections.emptyList());
FS
File that can be found in file system tree.
final TSK_FS_NAME_TYPE_ENUM dirType
synchronized int readInt(byte[] buf, long offset, long len)
static long openFile(long fsHandle, long fileId, TSK_FS_ATTR_TYPE_ENUM attrType, int attrId, SleuthkitCase skCase)
static int readFile(long fileHandle, byte[] readBuffer, long offset, long len)
final TskData.TSK_DB_FILES_TYPE_ENUM fileType
synchronized List< String > getMetaDataText()
final TskData.TSK_FS_ATTR_TYPE_ENUM attrType
TSK_FS_NAME_FLAG_ENUM dirFlag
AbstractFile getParentDirectory()
Set< TSK_FS_META_FLAG_ENUM > metaFlags
synchronized void close()
final Set< TskData.TSK_FS_META_MODE_ENUM > modes
TskData.FileKnown knownState
static List< String > getFileMetaDataText(long fileHandle)
SleuthkitCase getSleuthkitCase()
String toString(boolean preserveState)
static void closeFile(long fileHandle)
Optional< Long > getFileSystemObjectId()
final TSK_FS_META_TYPE_ENUM metaType
FileSystem getFileSystem()