Table of Contents
dstat - Display details of a file system data unit (i.e. block or sector)
dstat [-f fstype ] [-i imgtype] [-o imgoffset] [-vV] image [images]
addr
dstat displays the allocation status of the given data
unit.
- -f fstype
- Specify the file system type. Use ’-f list’ to list
the supported file system types. If not given, autodetection methods are
used.
- -i imgtype
- Identify the type of image file, such as raw or split. Use
’-i list’ to list the supported types. If not given, autodetection methods
are used.
- -o imgoffset
- The sector offset where the file system starts in the
image. Non-512 byte sectors can be specified using ’@’ (32@2048).
- -v
- Verbose
output of debugging statements to stderr
- -V
- Display version
- image [images]
- One
(or more if split) disk or partition images whose format is given with
’-i’.
- addr
- Address to display stats on. This is a fragment for UNIX file systems
or a sector for FAT.
Brian Carrier <carrier at sleuthkit dot org>
Table of Contents