JLS(1)

📦 version 4.15.0, in alpine 3.24, arch rolling, debian bookworm, debian trixie, epel 10, epel 9, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu jammy, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 JLS(1) — like, the manual page, but make it make sense 💖

okay so bestie, welcome to jls, a.k.a. the General Commands Manual girlie who is here to List the contents of a file system journal. Yes. A journal. Not a diary. A file system journal. Forensic vibes only. 🦋

✨ NAME ✨

jls — List the contents of a file system journal 🎀

🌸 SYNOPSIS 🌸

jls [-f fstype ] [-vV] [-i imgtype] [-o imgoffset] [-b dev_sector_size]
image [images] [inode]

💅 DESCRIPTION 💅

So jls lists the records and entries in a file system journal. That's the whole assignment. 🫶

If you hand it an inode, it's gonna go look right there for a journal. No inode? Then it just uses the default location, nbd. Either way, the output lists the journal block number and a description. Slay.

👑 ARGUMENTS 👑

  • -f fstype — Say what the file system type is. Wanna know what you're allowed to put here? Run -f list and it will spill the supported file system types. If you don't give it one, autodetection methods get deployed. ✨
  • -i imgtype — Tell it the type of image file, like raw or split. Use -i list to see all the supported types. Don't give it one and, again, autodetection methods come through. 💫
  • -o imgoffset — The sector offset where the file system actually starts inside the image. Like, where the good stuff begins. 🎯
  • -b dev_sector_size — The size, in bytes, of the underlying device sectors. Skip it and the value in the image format is used (if it exists) or 512-bytes is assumed. She has a backup plan, always. 💖
  • -V — Display version. Short and iconic. ⭐
  • -v — verbose output. Give me EVERYTHING. 🗣️
  • image [images] — One (or more if split) disk or partition images whose format is given with -i. Plural images? Totally allowed, she's flexible. 🌈
  • [inode] — The inode where the file system journal can be found. 🔍

🧚 EXAMPLES 🧚

Look at her go:

jls -f linux-ext3 img.dd

That's it. That's the moment. Ate. 💅

🎀 AUTHOR 🎀

Brian Carrier <carrier at sleuthkit dot org>

Send documentation updates to <doc-updates at sleuthkit dot org> 📬

k byeeee, this was the JLS(1) page from the General Commands Manual, brought to you by the Sleuth Kit girlies. go journal your little heart out 🫶💜

📦 where this page comes from