From: Christos Zoulas Date: Sat, 11 Feb 2017 19:44:28 +0000 (+0000) Subject: Add ntfsclone from Mike Swanson X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=0de9cff3f81dfa528b11d2d9b0e08efa70bad39f;p=file Add ntfsclone from Mike Swanson --- diff --git a/magic/Magdir/filesystems b/magic/Magdir/filesystems index 69e2929b..65de4184 100644 --- a/magic/Magdir/filesystems +++ b/magic/Magdir/filesystems @@ -1,5 +1,5 @@ #------------------------------------------------------------------------------ -# $File: filesystems,v 1.116 2017/01/03 11:25:37 christos Exp $ +# $File: filesystems,v 1.117 2017/02/11 19:44:28 christos Exp $ # filesystems: file(1) magic for different filesystems # 0 name partid @@ -1553,6 +1553,16 @@ >>>0x0c lestring16 x \b%-2.2s ### DOS,NTFS boot sectors end +# ntfsclone-image is a special save format for NTFS volumes, +# created and restored by the ntfsclone program +0 string \0ntfsclone-image ntfsclone image, +>0x10 byte x version %d. +>0x11 byte x \b%d, +>0x12 lelong x cluster size %d, +>0x16 lequad x device size %lld, +>0x1e lequad x %lld total clusters, +>0x26 lequad x %lld clusters in use + 9564 lelong 0x00011954 Unix Fast File system [v1] (little-endian), >8404 string x last mounted on %s, #>9504 ledate x last checked at %s,