BLKLS

Description

List or output file system data units. blkls opens the named image(s) and copies file system data units (blocks). By default, blkls copies the contents of unallocated data blocks.

Usage

Syntax

blkls [-aAelvV] [-f fstype] [-i imgtype] [-b dev_sector_size] [-o imgoffset] image [images] [start-stop]

Options

        -e: every block (including file system metadata blocks)
	-l: print details in time machine list format
	-a: Display allocated blocks
	-A: Display unallocated blocks
	-f fstype: File system type (use '-f list' for supported types)
	-i imgtype: The format of the image file (use '-i list' for supported types)
	-b dev_sector_size: The size (in bytes) of the device sectors
	-o imgoffset: The offset of the file system in the image (in sectors)
	-s: print slack space only (other flags are ignored
	-v: verbose to stderr
	-V: print version

Example

MOUNT THE IMAGE :

cyborg@cyborg:~$ sudo apt-get install xmount
cyborg@cyborg:~$ sudo xmount --in ewf fileewf.E01 /mnt/

CHECK THE PARTION OF DD IMAGE:

cyborg@cyborg:~$ mmls /mnt/fileewf.dd
DOS Partition Table
Offset Sector: 0
Units are in 512-byte sectors

     Slot    Start        End          Length       Description
00:  Meta    0000000000   0000000000   0000000001   Primary Table (#0)
01:  -----   0000000000   0000002047   0000002048   Unallocated
02:  00:00   0000002048   0030751743   0030749696   Win95 FAT32 (0x0C)

OUTPUT THE OFFSET TO BLKLS FILE:

cyborg@cyborg:~$ blks -o 2048 /mnt/fileewf.dd >image1.blkls
cyborg@cyborg:~$ ls
Documents fileewf.E01  Downloads   image1.blkls  Desktop
Pictures  Public       Music       Videos
0 Comments

Leave a reply

CONTACT US

We're are building as a community and a team. Be a part of it.

Sending

©2017 Ztrela Knowledge Solutions Pvt. Ltd

Log in with your credentials

Forgot your details?