diff options
| author | Christos Zoulas <christos@zoulas.com> | 2017-02-11 19:44:28 +0000 |
|---|---|---|
| committer | Christos Zoulas <christos@zoulas.com> | 2017-02-11 19:44:28 +0000 |
| commit | 0de9cff3f81dfa528b11d2d9b0e08efa70bad39f (patch) | |
| tree | 8a56b41dfd7a1bde6a82dbfdd9e85d76819e286c | |
| parent | 78d24e35e77fa8b11d66d73b69c42685fd219a8e (diff) | |
| download | file-git-0de9cff3f81dfa528b11d2d9b0e08efa70bad39f.tar.gz | |
Add ntfsclone from Mike Swanson
| -rw-r--r-- | magic/Magdir/filesystems | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/magic/Magdir/filesystems b/magic/Magdir/filesystems index 69e2929b..65de4184 100644 --- a/magic/Magdir/filesystems +++ b/magic/Magdir/filesystems @@ -1,5 +1,5 @@ #------------------------------------------------------------------------------ -# $File: filesystems,v 1.116 2017/01/03 11:25:37 christos Exp $ +# $File: filesystems,v 1.117 2017/02/11 19:44:28 christos Exp $ # filesystems: file(1) magic for different filesystems # 0 name partid @@ -1553,6 +1553,16 @@ >>>0x0c lestring16 x \b%-2.2s ### DOS,NTFS boot sectors end +# ntfsclone-image is a special save format for NTFS volumes, +# created and restored by the ntfsclone program +0 string \0ntfsclone-image ntfsclone image, +>0x10 byte x version %d. +>0x11 byte x \b%d, +>0x12 lelong x cluster size %d, +>0x16 lequad x device size %lld, +>0x1e lequad x %lld total clusters, +>0x26 lequad x %lld clusters in use + 9564 lelong 0x00011954 Unix Fast File system [v1] (little-endian), >8404 string x last mounted on %s, #>9504 ledate x last checked at %s, |