From: Christos Zoulas <christos@zoulas.com>
Date: Sat, 11 Feb 2017 19:44:28 +0000 (+0000)
Subject: Add ntfsclone from Mike Swanson
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0de9cff3f81dfa528b11d2d9b0e08efa70bad39f;p=file

Add ntfsclone from Mike Swanson
---

diff --git a/magic/Magdir/filesystems b/magic/Magdir/filesystems
index 69e2929b..65de4184 100644
--- a/magic/Magdir/filesystems
+++ b/magic/Magdir/filesystems
@@ -1,5 +1,5 @@
 #------------------------------------------------------------------------------
-# $File: filesystems,v 1.116 2017/01/03 11:25:37 christos Exp $
+# $File: filesystems,v 1.117 2017/02/11 19:44:28 christos Exp $
 # filesystems:  file(1) magic for different filesystems
 #
 0	name	partid  
@@ -1553,6 +1553,16 @@
 >>>0x0c		lestring16	x	\b%-2.2s
 ### DOS,NTFS boot sectors end
 
+# ntfsclone-image is a special save format for NTFS volumes,
+# created and restored by the ntfsclone program
+0	string	\0ntfsclone-image	ntfsclone image,
+>0x10	byte	x			version %d.
+>0x11	byte	x			\b%d,
+>0x12	lelong	x			cluster size %d,
+>0x16	lequad	x			device size %lld,
+>0x1e	lequad	x			%lld total clusters,
+>0x26	lequad	x			%lld clusters in use
+
 9564	lelong		0x00011954	Unix Fast File system [v1] (little-endian),
 >8404	string		x		last mounted on %s,
 #>9504	ledate		x		last checked at %s,