def dump_volume(self): print("Volume Information") print("\tVolume Name: %s" % self.vol_name) print("\tVolume Version: %d.%d" % (self.major_ver, self.minor_ver)) print("\tVolume Size: %s" % size_str(self.size)) print("\tVolume Offset: 0x%x" % self.offset) print("\tTotal Sectors: %u" % self.bootsector.bpb.total_sectors) print("\tTotal Clusters: %u" % self.bootsector.total_clusters) # print "\tFree Clusters:" # print "\tFree Space:" print("\tMFT Offset: 0x%x (from beginning of volume)" % self.mft_table_offset) print("\tMFT Mirror Offset: 0x%x" % self.bootsector.mft_mirror_offset) print("\tMFT Record Size: %s" % size_str(self.bootsector.mft_record_size)) print("\tMFT Size: %s (%s of drive)" % (size_str(self.mft_zone_size), "{0:.0f}%".format( float(self.mft_zone_size) / self.bootsector.volume_size * 100)))
def dump_volume(self): print "Volume Information" print "\tVolume Name: %s" % self.vol_name print "\tVolume Version: %d.%d" % (self.major_ver, self.minor_ver) print "\tVolume Size: %s" % size_str(self.size) print "\tVolume Offset: 0x%x" % self.offset print "\tTotal Sectors: %u" % self.bootsector.bpb.total_sectors print "\tTotal Clusters: %u" % self.bootsector.bpb.total_clusters # print "\tFree Clusters:" # print "\tFree Space:" print "\tMFT Offset: 0x%x (from beginning of volume)" % \ self.mft_table_offset print "\tMFT Mirror Offset: 0x%x" % \ self.bootsector.bpb.mft_mirror_offset print "\tMFT Record Size: %s" % \ size_str(self.bootsector.bpb.mft_record_size) print "\tMFT Size: %s (%s of drive)" % ( size_str(self.mft_zone_size), "{0:.0f}%".format( float(self.mft_zone_size) / self.bootsector.bpb.volume_size * 100 ) )
def test_size_str(self): self.assertEquals(size_str(1024), "1.00KB")
def test_size_str_w_format(self): self.assertEquals(size_str(100000, "{0:E}"), "1.000000E+05")
def __str__(self): return "Type: NTFS, Offset: 0x%X, Size: %s, MFT Table Offset: 0x%X" % ( self.offset, size_str(self.size), self.mft_table_offset)
def test_size_str(self): self.assertEqual(size_str(1024), "1.00KB")
def test_size_str_w_format(self): self.assertEqual(size_str(100000, "{0:E}"), "1.000000E+05")
def __str__(self): return "Type: Unknown (%s), Offset: 0x%X, Size: %s" % ( self.type_id, self.offset, size_str(self.size) )
def __str__(self): return "Type: NTFS, Offset: 0x%X, Size: %s, MFT Table Offset: 0x%X" % ( self.offset, size_str(self.size), self.mft_table_offset )