def dump_volume(self):
print("Volume Information")
print("\tVolume Name: %s" % self.vol_name)
print("\tVolume Version: %d.%d" % (self.major_ver, self.minor_ver))
print("\tVolume Size: %s" % size_str(self.size))
print("\tVolume Offset: 0x%x" % self.offset)
print("\tTotal Sectors: %u" % self.bootsector.bpb.total_sectors)
print("\tTotal Clusters: %u" % self.bootsector.total_clusters)
# print "\tFree Clusters:"
# print "\tFree Space:"
print("\tMFT Offset: 0x%x (from beginning of volume)" %
self.mft_table_offset)
print("\tMFT Mirror Offset: 0x%x" % self.bootsector.mft_mirror_offset)
print("\tMFT Record Size: %s" %
size_str(self.bootsector.mft_record_size))
print("\tMFT Size: %s (%s of drive)" %
(size_str(self.mft_zone_size), "{0:.0f}%".format(
float(self.mft_zone_size) / self.bootsector.volume_size *
100)))
def dump_volume(self):
print "Volume Information"
print "\tVolume Name: %s" % self.vol_name
print "\tVolume Version: %d.%d" % (self.major_ver, self.minor_ver)
print "\tVolume Size: %s" % size_str(self.size)
print "\tVolume Offset: 0x%x" % self.offset
print "\tTotal Sectors: %u" % self.bootsector.bpb.total_sectors
print "\tTotal Clusters: %u" % self.bootsector.bpb.total_clusters
# print "\tFree Clusters:"
# print "\tFree Space:"
print "\tMFT Offset: 0x%x (from beginning of volume)" % \
self.mft_table_offset
print "\tMFT Mirror Offset: 0x%x" % \
self.bootsector.bpb.mft_mirror_offset
print "\tMFT Record Size: %s" % \
size_str(self.bootsector.bpb.mft_record_size)
print "\tMFT Size: %s (%s of drive)" % (
size_str(self.mft_zone_size), "{0:.0f}%".format(
float(self.mft_zone_size) /
self.bootsector.bpb.volume_size * 100
)
)
def test_size_str(self):
self.assertEquals(size_str(1024), "1.00KB")
def test_size_str_w_format(self):
self.assertEquals(size_str(100000, "{0:E}"), "1.000000E+05")
def __str__(self):
return "Type: NTFS, Offset: 0x%X, Size: %s, MFT Table Offset: 0x%X" % (
self.offset, size_str(self.size), self.mft_table_offset)
def test_size_str(self):
self.assertEqual(size_str(1024), "1.00KB")
def test_size_str_w_format(self):
self.assertEqual(size_str(100000, "{0:E}"), "1.000000E+05")
def __str__(self):
return "Type: Unknown (%s), Offset: 0x%X, Size: %s" % (
self.type_id,
self.offset,
size_str(self.size)
)
def __str__(self):
return "Type: NTFS, Offset: 0x%X, Size: %s, MFT Table Offset: 0x%X" % (
self.offset,
size_str(self.size),
self.mft_table_offset
)
