MMSTAT(1)
π MMSTAT(1) π
okay bestie, welcome to mmstat(1) β straight outta the General Commands Manual and she's here to spill all the tea about your volume system π«Ά
β¨ NAME β¨
mmstat β Display details about the volume system (partition tables). that's it, that's the job, and she does it flawlessly π
πΈ SYNOPSIS πΈ
mmstat [-t mmtype ] [-o offset ] [ -i imgtype ] [-b dev_sector_size]
[-vV] image [images]
π¦ DESCRIPTION π¦
so like, mmstat shows you the general deets of a volume system β and when we say volume system we mean partition tables and disk labels, the whole lil ecosystem. Mainly?? It gives you the type. that's the main character info right there β¨
π ARGUMENTS π
-t mmtypeβ tell it the media management type, bestie. Wanna see your options? Hit'-t list'and she'll list every supported type for you π. Don't pass this flag at all and the autodetection methods just do their thing, no cap.-o offsetβ this one says where in the image the volume that contains the partition system starts. and here's the lil twist: the relative offset of the partition system gets added to this value. so it's a whole sum situation β-b dev_sector_sizeβ the size, in bytes, of the underlying device sectors. leave it out and she uses the value in the image format (if it exists) β and if that doesn't exist either?512-bytes is assumed, periodt.-i imgtypeβ identify the type of image file, likeraw. Wanna see the roster?'-i list'lists all supported types π. not given = autodetection methods, as usual, she's got it.-vβ Verbose output of debugging statements tostderr. loud and proud, we love a transparent queen π₯-Vβ Display version. the classic.image [images]β the disk or partition image you're reading, whose format is given with'-i'. Multiple image file names can be given if the image is split into multiple segments π§©. And get this: if only one image file is given, and its name is the first in a sequence (e.g., as indicated by ending in'.001'), subsequent image segments will be included automatically. she's thoughtful like that π«Ά
π AUTHOR π
Brian Carrier <carrier at sleuthkit dot org>
Send documentation updates to <doc-updates at sleuthkit dot org> π
and that's the whole page bestie β it signs off the way it started, as MMSTAT(1) in the General Commands Manual, so go forth and vibe check those partition tables πβπ
π¦ where this page comes from
- alpine 3.24: sleuthkit-doc 4.15.0-r0 Β· custom
- arch rolling: sleuthkit 4.15.0-1 Β· CPL-1.0 AND GPL-2.0-or-later AND IPL-1.0
- debian bookworm: sleuthkit 4.11.1+dfsg-1+b1 Β· CPL-1.0
- debian trixie: sleuthkit 4.12.1+dfsg-3 Β· CPL-1.0
- epel 10: sleuthkit 4.15.0-2.el10_3 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- epel 9: sleuthkit 4.15.0-2.el9 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- fedora 43: sleuthkit 4.14.0-4.fc43 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- fedora 43: sleuthkit 4.15.0-2.fc43 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- fedora 44: sleuthkit 4.14.0-5.fc44 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- fedora 44: sleuthkit 4.15.0-2.fc44 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- nixos 26.05: sleuthkit 4.14.0
- nixpkgs unstable: sleuthkit 4.15.0
- opensuse-leap 16.0: sleuthkit 4.12.1-bp160.1.13 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- opensuse-leap 16.0: sleuthkit 4.12.1-bp160.1.13 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- opensuse-leap 16.0: sleuthkit 4.12.1-bp160.1.13 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- opensuse-leap 16.0: sleuthkit 4.12.1-bp160.1.13 Β· CPL-1.0 AND IPL-1.0 AND GPL-2.0-or-later
- ubuntu jammy: sleuthkit 4.11.1+dfsg-1 Β· CPL-1.0
- ubuntu noble: sleuthkit 4.12.1+dfsg-1.1ubuntu2 Β· CPL-1.0
- ubuntu questing: sleuthkit 4.12.1+dfsg-3
- ubuntu resolute: sleuthkit 4.12.1+dfsg-3build1 Β· CPL-1.0
- ubuntu stonking: sleuthkit 4.14.0+dfsg-1 Β· CPL-1.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms