MMSTAT(1)

πŸ’– MMSTAT(1) πŸ’–

okay bestie, welcome to mmstat(1) β€” straight outta the General Commands Manual and she's here to spill all the tea about your volume system 🫢


✨ NAME ✨

mmstat β€” Display details about the volume system (partition tables). that's it, that's the job, and she does it flawlessly πŸ’…


🌸 SYNOPSIS 🌸

mmstat [-t mmtype ] [-o offset ] [ -i imgtype ] [-b dev_sector_size]
[-vV] image [images]

πŸ¦‹ DESCRIPTION πŸ¦‹

so like, mmstat shows you the general deets of a volume system β€” and when we say volume system we mean partition tables and disk labels, the whole lil ecosystem. Mainly?? It gives you the type. that's the main character info right there ✨


πŸŽ€ ARGUMENTS πŸŽ€

  • -t mmtype β€” tell it the media management type, bestie. Wanna see your options? Hit '-t list' and she'll list every supported type for you πŸ“‹. Don't pass this flag at all and the autodetection methods just do their thing, no cap.
  • -o offset β€” this one says where in the image the volume that contains the partition system starts. and here's the lil twist: the relative offset of the partition system gets added to this value. so it's a whole sum situation βž•
  • -b dev_sector_size β€” the size, in bytes, of the underlying device sectors. leave it out and she uses the value in the image format (if it exists) β€” and if that doesn't exist either? 512-bytes is assumed, periodt.
  • -i imgtype β€” identify the type of image file, like raw. Wanna see the roster? '-i list' lists all supported types πŸ’–. not given = autodetection methods, as usual, she's got it.
  • -v β€” Verbose output of debugging statements to stderr. loud and proud, we love a transparent queen πŸ”₯
  • -V β€” Display version. the classic.
  • image [images] β€” the disk or partition image you're reading, whose format is given with '-i'. Multiple image file names can be given if the image is split into multiple segments 🧩. And get this: if only one image file is given, and its name is the first in a sequence (e.g., as indicated by ending in '.001'), subsequent image segments will be included automatically. she's thoughtful like that 🫢

πŸ‘‘ AUTHOR πŸ‘‘

Brian Carrier <carrier at sleuthkit dot org>

Send documentation updates to <doc-updates at sleuthkit dot org> πŸ’Œ


and that's the whole page bestie β€” it signs off the way it started, as MMSTAT(1) in the General Commands Manual, so go forth and vibe check those partition tables πŸŒˆβ­πŸ’œ

πŸ“¦ where this page comes from