File: affsegment.1

package info (click to toggle)
afflib 3.7.22-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 3,584 kB
  • sloc: cpp: 20,911; ansic: 15,912; makefile: 520; sh: 436; python: 192
file content (108 lines) | stat: -rw-r--r-- 2,376 bytes parent folder | download | duplicates (8)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
.TH affsegment "1"  "Oct 2014" "AFFSEGMENT 3.7.4" "segment manipulation tool"
.\"Text automatically generated by txt2man
.SH NAME
\fBaffsegment \fP- segment manipulation tool
.SH SYNOPSIS
.nf
.fam C
\fBaffsegment\fP [\fIoptions\fP] file1.aff [file2.aff \.\.\.]
.fam T
.fi
.fam T
.fi
.SH DESCRIPTION
This is a segment manipulation tool.
.PP
This file is part of the AFFLIBv3, that provides AFF.
.PP
AFF is an open and extensible file format to store disk images and associated
metadata. It is useful in several scenaries, as computer forensics
investigations.
.SH OPTIONS
Options:
.RS
.TP
.B
\fB-c\fP
Create AFF files if they do not exist.
.TP
.B
\fB-ssegval\fP
Sets the value of a segment; may be repeated.
.TP
.B
\fB-psegname\fP
Prints the contents of the segment name for each file.
.TP
.B
\fB-V\fP
Just print the version number and exit.
.TP
.B
\fB-dname\fP
Delete segment 'name'.
.TP
.B
\fB-h\fP, -?
Print this message.
.TP
.B
\fB-Q\fP
interpert 8-byte segments as a 64-bit value.
.TP
.B
\fB-A\fP
Print the 32-bit arg, not the segment value.
.TP
.B
\fB-x\fP
Print the segment as a hex string.
.RE
.PP
Setting the segment values:
.RS
.TP
.B
\fB-sname\fP=-
Take the new value of segment 'name' from stdin.
.TP
.B
\fB-sname\fP=val
Sets segment 'name' to be 'val'.
.TP
.B
\fB-sname\fP=<val
Sets segment 'name' to be contents of file 'val'
.RE
.PP
Setting the segment args:
.RS
.TP
.B
\fB-sname\fP/arg
Sets segment 'name' arg to be 'arg' (may be repeated).
.RE
.PP
Setting both the segment value and the arg:
.RS
.TP
.B
\fB-sname\fP/arg=val
Sets both arg and val for segment 'name'.
\fB-sname\fP/arg=<file Sets the arg and take contents from file 'file'.
.TP
.B
\fB-sname\fP/arg=-
Sets the arg of segment 'name' and take the contents from stdin.
.SH NOTES
All deletions are done first, then all updates. Don't specify the same segment twice on one command line.
.SH SEE ALSO
\fBaffcat\fP(1), \fBaffcompare\fP(1), \fBaffconvert\fP(1), \fBaffcopy\fP(1), \fBaffcrypto\fP(1),
\fBaffdiskprint\fP(1), \fBaffinfo\fP(1), \fBaffix\fP(1), \fBaffrecover\fP(1),
\fBaffsign\fP(1), \fBaffstats\fP(1), \fBaffuse\fP(1), \fBaffverify\fP(1), \fBaffxml\fP(1)
.SH AUTHOR
The AFFLIB was written by Simson L. Garfinkel <simsong@acm.org> and Basis
Technology, Inc.
.PP
This manual page was written by Joao Eriberto Mota Filho <eriberto@debian.org>
for the Debian project (but may be used by others).