Represents a text-format hash database (NSRL, EnCase, etc.) with the TSK binary search index. More...

#include <tsk_hashdb.h>

Public Attributes
TSK_HDB_INFO	base
uint8_t(*	get_entry )(TSK_HDB_INFO , const char , TSK_OFF_T, TSK_HDB_FLAG_ENUM, TSK_HDB_LOOKUP_FN, void *)
uint16_t	hash_len
	Length of hash used in currently open index.
TSK_HDB_HTYPE_ENUM	hash_type
	Type of hash used in currently open index.
FILE *	hDb
	File handle to database (always open).
FILE *	hIdx
	File handle to index (only open during lookups).
FILE *	hIdxTmp
	File handle to temp (unsorted) index file (only open during index creation).
TSK_TCHAR *	idx_fname
	Name of index file, may be NULL for database without external index.
TSK_TCHAR *	idx_idx_fname
	Name of index of index file, may be NULL.
char *	idx_lbuf
	Buffer to hold a line from the index (r/w shared - lock).
size_t	idx_llen
	Length of each line in index.
uint16_t	idx_off
	Offset in index file to first index entry.
uint64_t *	idx_offsets
	Maps the first three bytes of a hash value to an offset in the index file.
TSK_OFF_T	idx_size
	Size of index file.
TSK_TCHAR *	uns_fname
	Name of unsorted index file.

Detailed Description

Represents a text-format hash database (NSRL, EnCase, etc.) with the TSK binary search index.

The documentation for this struct was generated from the following file:

Public Attributes