#include <fs_tools.h>
Data Fields | |
| INUM_T | addr |
| Address of meta data structure. | |
| mode_t | mode |
| file type and permissions | |
| int | nlink |
| link count | |
| OFF_T | size |
| file size | |
| uid_t | uid |
| owner id | |
| gid_t | gid |
| group id | |
| time_t | mtime |
| last modified time | |
| time_t | atime |
| last accessed time | |
| time_t | ctime |
| last status changed time | |
| union { | |
| struct { | |
| time_t crtime | |
| NTFS Creation time. | |
| } | |
| struct { | |
| time_t dtime | |
| Linux deletion time. | |
| } | |
| struct { | |
| time_t bkup_time | |
| HFS+ backup time. | |
| time_t attr_mtime | |
| HFS+ mtime. | |
| } | |
| }; | |
| DADDR_T * | direct_addr |
| List of direct blocks. | |
| int | direct_count |
| Number of blocks in direct list. | |
| DADDR_T * | indir_addr |
| List of indirect blocks. | |
| int | indir_count |
| Number of blocks in indirect list. | |
| uint32_t | seq |
| Sequence number of file (NTFS Only). | |
| TSK_FS_DATA * | attr |
| Run for content (or NTFS file attribute). | |
| TSK_FS_INODE_ATTR_FLAG_ENUM | attr_state |
| State of the attribute structure. | |
| uint8_t | attr_flags |
| Identifies flags used to load attribute run (FAT Only right now -- RECOVERY or not RECOVERY). | |
| TSK_FS_INODE_NAME_LIST * | name |
| Name of file stored in metadata (FAT and NTFS Only). | |
| char * | link |
| Name of target file if this is a symbolic link. | |
| TSK_FS_INODE_FLAG_ENUM | flags |
| Flags for file. | |
1.5.1