org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM Enum Reference

Public Member Functions
short	getValue ()
String	toString ()

Static Public Member Functions
static short	toInt (Set< TSK_FS_META_FLAG_ENUM > metaFlags)
static Set< TSK_FS_META_FLAG_ENUM >	valuesOf (short metaFlags)

Public Attributes
	ALLOC =(1, bundle.getString("TskData.tskFsMetaFlagEnum.allocated"))
	Metadata structure is currently in an allocated state. More...
	COMP =(16, bundle.getString("TskData.tskFsMetaFlagEnum.compressed"))
	The file contents are compressed. More...
	ORPHAN =(32, bundle.getString("TskData.tskFsMetaFlagEnum.orphan"))
	Return only metadata structures that have no file name pointing to the (inode_walk flag only) More...
	UNALLOC =(2, bundle.getString("TskData.tskFsMetaFlagEnum.unallocated"))
	Metadata structure is currently in an unallocated state. More...
	UNKNOWN =(0, bundle.getString("TskData.tskFsMetaFlagEnum.unknown"))
	Unknown. More...
	UNUSED =(8, bundle.getString("TskData.tskFsMetaFlagEnum.unused"))
	Metadata structure has never been allocated. More...
	USED =(4, bundle.getString("TskData.tskFsMetaFlagEnum.used"))
	Metadata structure has been allocated at least once. More...

Detailed Description

The allocated status of the file system file, as reported in the metadata structure of the file system. This is the meta_flags column in the tsk_files table.

Definition at line 205 of file TskData.java.

Member Function Documentation

short org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.getValue

(

)

Get meta flags short value

Returns

the long value of meta flags

Definition at line 228 of file TskData.java.

static short org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.toInt ( Set< TSK_FS_META_FLAG_ENUM >  metaFlags )

static

Definition at line 268 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.setFileUnalloc().

String org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.toString

(

)

Get string label of the metal flags

Returns

string meta flags label

Definition at line 238 of file TskData.java.

static Set<TSK_FS_META_FLAG_ENUM> org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.valuesOf ( short  metaFlags )

static

Returns all the enum elements that match the flags in metaFlag

Parameters

metaFlags

Flags to convert to Enums.

Returns

matching TSK_FS_META_FLAG_ENUM elements

Definition at line 249 of file TskData.java.

References org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.UNKNOWN.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.setFileUnalloc().

Member Data Documentation

org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.ALLOC =(1, bundle.getString("TskData.tskFsMetaFlagEnum.allocated"))

Metadata structure is currently in an allocated state.

Definition at line 208 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addDerivedFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalDirectory(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFilesDataSource(), org.sleuthkit.datamodel.SleuthkitCase.addVirtualDirectory(), org.sleuthkit.datamodel.SleuthkitCase.getDataSource(), org.sleuthkit.datamodel.SleuthkitCase.getDataSources(), org.sleuthkit.datamodel.AbstractFile.getMetaFlagsAsString(), org.sleuthkit.datamodel.SleuthkitCase.setFileUnalloc(), and org.sleuthkit.datamodel.SleuthkitCase.updateDerivedFile().

org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.COMP =(16, bundle.getString("TskData.tskFsMetaFlagEnum.compressed"))

The file contents are compressed.

Definition at line 212 of file TskData.java.

org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.ORPHAN =(32, bundle.getString("TskData.tskFsMetaFlagEnum.orphan"))

Return only metadata structures that have no file name pointing to the (inode_walk flag only)

Definition at line 213 of file TskData.java.

org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.UNALLOC =(2, bundle.getString("TskData.tskFsMetaFlagEnum.unallocated"))

Metadata structure is currently in an unallocated state.

Definition at line 209 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addCarvedFiles(), org.sleuthkit.datamodel.SleuthkitCase.addLayoutFiles(), org.sleuthkit.datamodel.AbstractFile.getMetaFlagsAsString(), and org.sleuthkit.datamodel.SleuthkitCase.setFileUnalloc().

org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.UNKNOWN =(0, bundle.getString("TskData.tskFsMetaFlagEnum.unknown"))

Unknown.

Definition at line 207 of file TskData.java.

Referenced by org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.valuesOf().

org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.UNUSED =(8, bundle.getString("TskData.tskFsMetaFlagEnum.unused"))

Metadata structure has never been allocated.

Definition at line 211 of file TskData.java.

org.sleuthkit.datamodel.TskData.TSK_FS_META_FLAG_ENUM.USED =(4, bundle.getString("TskData.tskFsMetaFlagEnum.used"))

Metadata structure has been allocated at least once.

Definition at line 210 of file TskData.java.

Referenced by org.sleuthkit.datamodel.SleuthkitCase.addDerivedFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalDirectory(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFile(), org.sleuthkit.datamodel.SleuthkitCase.addLocalFilesDataSource(), org.sleuthkit.datamodel.SleuthkitCase.addVirtualDirectory(), org.sleuthkit.datamodel.SleuthkitCase.getDataSource(), org.sleuthkit.datamodel.SleuthkitCase.getDataSources(), and org.sleuthkit.datamodel.SleuthkitCase.updateDerivedFile().

---

The documentation for this enum was generated from the following file:

• /home/carriersleuth/repos/sleuthkit/bindings/java/src/org/sleuthkit/datamodel/TskData.java