EWFINFO(1)
π ewfinfo β the vibe check for your EWF files π
okay so bestie, welcome to ewfinfo(1), a LOCAL girl whose whole entire personality is showing you the meta data tucked inside EWF files. she's part of the libewf package, which is the library that deals with the Expert Witness Compression Format (EWF). iykyk. β¨
πΈ NAME πΈ
ewfinfo β show meta data stored in EWF files π
β¨ SYNOPSIS β¨
ewfinfo [-A codepage] [-d date_format] [-f format] [-ehimvV] ewf_files
π¦ DESCRIPTION π¦
okay so ewfinfo is literally just a utility that shows you the meta data stored in EWF files. that's it. that's the whole job. and she ate, fr fr. π
ewfinfo is part of the libewf package, and libewf is the library that gives you access to the Expert Witness Compression Format (EWF). so like, if EWF files are the main characters, libewf is the friend group behind them. π«Ά
- ewf_files β the first or the entire set of EWF segment files. no cap, you can hand her one file or the whole squad.
The options are as follows:
-Acodepage β sets the codepage of the header section. your choices are:ascii(that's the default, bestie),windows-874,windows-932,windows-936,windows-949,windows-950,windows-1250,windows-1251,windows-1252,windows-1253,windows-1254,windows-1255,windows-1256,windows-1257orwindows-1258. pick your fighter. π-ddate_format β the date format. options:ctime(default β¨),dm(day/month),md(month/day),iso8601. yes she has range.-eβ only show EWF read error information. just the errors, nothing else, she's being selective and honestly? valid.-fformat β specify the output format. options:text(default) ordfxml.-hβ shows this help. your girl is helpful like that. π-iβ only show EWF acquiry information. just the acquiry tea, periodt.-mβ only show EWF media information. media info only, she's keeping it focused.-vβ verbose output to stderr. she'll yap (affectionately).-Vβ print version. gotta know which era of her you're dealing with. β
π ENVIRONMENT π
None. nothing. empty. she needs no environment, she's self-sufficient, main character energy. π
π FILES π
None. also nothing. iconic of her honestly.
π EXAMPLES π
here's the moment you've all been waiting for, bestie:
# ewfinfo -d dm floppy.E01
ewfinfo 20120805
Acquiry information
Case number: 1
Description: Floppy
Examiner name: John D.
Evidence number: 1.1
Notes: Just a floppy in my system
Acquiry date: 09/12/2006 10:00:12
System date: 09/12/2006 10:00:12
Operating system used: Linux
Software version used: 20061209
Password: N/A
EWF information
File format: EnCase 5
Sectors per chunk: 64
Error granularity: 64
Compression method: deflate
Compression level: no compression
Set identifier: 869910fc-e143-4908-9328-afedf4a7be1e
Media information
Media type: removable disk
Is physical: no
Bytes per sector: 512
Number of sectors: 2880
Media size: 1.4 MiB (1474560 bytes)
Digest hash information
MD5: ae1ce8f5ac079d3ee93f97fe3792bda3
look at all those little details. the way she just lays it all out for you. obsessed. π
π DIAGNOSTICS π
errors, verbose and debug output all get printed to stderr when verbose output -v is enabled. heads up though: verbose and debug output are only printed when they were enabled at compilation. so if you're not seeing them, that's why, it's not you, it's the build. π
π§ BUGS π§
found a bug? please report bugs of any kind on the project issue tracker:
https://github.com/libyal/libewf-legacy/issues
she wants to know. she'll fix it. probably. π«Ά
π AUTHOR π
these man pages were written by Kees Mastwijk.
alterations for distribution have been made by Joachim Metz.
β COPYRIGHT β
Copyright 2006-2014, Joachim Metz <joachim.metz@gmail.com>.
this is free software; see the source for copying conditions. there is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. like, zero warranty, bestie. none. don't come for her. π
π SEE ALSO π
ewfacquire(1), ewfacquirestream(1), ewfexport(1), ewfmount(1), ewfrecover(1), ewfverify(1)
the whole friend group, all linked, all slaying. go say hi. π
and that's the whole page, bestie!! π this little love letter is brought to you by libewf, dated January 19, 2014 β yeah she's vintage, vintage is chic, we don't talk about it. bye bestie, go read your meta data!! πβ¨π¦πΈπ π«Ά
π¦ where this page comes from
- arch rolling: libewf 20140816-1 Β· LGPL-3.0-or-later
- debian bookworm: ewf-tools 20140813-1+b1 Β· LGPL-3.0-or-later
- debian trixie: ewf-tools 20140816-1+b1 Β· LGPL-3.0-or-later
- nixos 26.05: libewf-legacy 20140816
- nixpkgs unstable: libewf-legacy 20140816
- ubuntu noble: ewf-tools 20140814-1build3 Β· LGPL-3.0-or-later
- ubuntu questing: ewf-tools 20140816-1build1
- ubuntu resolute: ewf-tools 20140816-2build1 Β· LGPL-3.0-or-later
- ubuntu stonking: ewf-tools 20140816-2build2 Β· LGPL-3.0-or-later
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms