Represents a text-format hash database (NSRL, EnCase, etc.) with the TSK binary search index. More...

#include <tsk_hashdb.h>

Public Attributes
TSK_HDB_INFO	base

uint8_t(*	get_entry )(TSK_HDB_INFO , const char , TSK_OFF_T, TSK_HDB_FLAG_ENUM, TSK_HDB_LOOKUP_FN, void *)

uint16_t	hash_len
	Length of hash used in currently open index.

TSK_HDB_HTYPE_ENUM	hash_type
	Type of hash used in currently open index.

FILE *	hDb
	File handle to database (always open)

FILE *	hIdx
	File handle to index (only open during lookups)

FILE *	hIdxTmp
	File handle to temp (unsorted) index file (only open during index creation)

TSK_TCHAR *	idx_fname
	Name of index file, may be NULL for database without external index.

TSK_TCHAR *	idx_idx_fname
	Name of index of index file, may be NULL.

char *	idx_lbuf
	Buffer to hold a line from the index (r/w shared - lock)

size_t	idx_llen
	Length of each line in index.

uint16_t	idx_off
	Offset in index file to first index entry.

uint64_t *	idx_offsets
	Maps the first three bytes of a hash value to an offset in the index file.

TSK_OFF_T	idx_size
	Size of index file.

TSK_TCHAR *	uns_fname
	Name of unsorted index file.

Detailed Description

Represents a text-format hash database (NSRL, EnCase, etc.) with the TSK binary search index.

The documentation for this struct was generated from the following file:

Public Attributes