poky/meta/packages/file/files/filesystems

#------------------------------------------------------------------------------

filesystems: file(1) magic for different filesystems

0 string \366\366\366\366 PC formatted floppy with no filesystem

Sun disk labels

From /usr/include/sun/dklabel.h:

0774 beshort 0xdabe Sun disk label

0 string x '%s

31 string >\0 \b%s

63 string >\0 \b%s

95 string >\0 \b%s 0 string x \b' 0734 short >0 %d rpm, 0736 short >0 %d phys cys, 0740 short >0 %d alts/cyl, 0746 short >0 %d interleave, 0750 short >0 %d data cyls, 0752 short >0 %d alt cyls, 0754 short >0 %d heads/partition, 0756 short >0 %d sectors/track, 0764 long >0 start cyl %ld, 0770 long x %ld blocks

Is there a boot block written 1 sector in?

512 belong&077777777 0600407 \b, boot block present

Smart Boot Manager backup file is 41 byte header + first sectors of disc

(http://btmgr.sourceforge.net/docs/user-guide-3.html)

0 string SBMBAKUP_ Smart Boot Manager backup file

9 string x \b, version %-5.5s

14 string =_

15 string x %-.1s

16 string =_ \b.

17 string x \b%-.1s

18 string =_ \b.

19 string x \b%-.1s

DOS Emulator image is 128 byte header + harddisc image

0 string DOSEMU\0

0x27E leshort 0xAA55 DOS Emulator image 0x1FE leshort 0xAA55 x86 boot sector 2 string OSBS \b, OS/BS MBR

J\xf6rg Jenderek

0x8C string Invalid\ partition\ table \b, MS-DOS MBR

dr-dos with some upper-, lowercase variants

0x9D string Invalid\ partition\ table$

181 string No\ Operating\ System$

201 string Operating\ System\ load\ error$ \b, DR-DOS MBR, Version 7.01 to 7.03 0x9D string Invalid\ partition\ table$ 181 string No\ operating\ system$ 201 string Operating\ system\ load\ error$ \b, DR-DOS MBR, Version 7.01 to 7.03 342 string Invalid\ partition\ table$ 366 string No\ operating\ system$ 386 string Operating\ system\ load\ error$ \b, DR-DOS MBR, version 7.01 to 7.03 295 string NEWLDR\0 302 string Bad\ PT\ $ 310 string No\ OS\ $

317 string OS\ load\ err$

329 string Moved\ or\ missing\ IBMBIO.LDR\n\r

358 string Press\ any\ key\ to\ continue.\n\r$

387 string Copyright\ (c)\ 1984,1998

411 string Caldera\ Inc.\0 \b, DR-DOS MBR (IBMBIO.LDR) 0x10F string Ung\201ltige\ Partitionstabelle \b, MS-DOS MBR, german version 4.10.1998, 4.10.2222 0x1B8 ubelong >0 \b, Serial 0x%-.4x 0x8B string Ung\201ltige\ Partitionstabelle \b, MS-DOS MBR, german version 5.00 to 4.00.950 271 string Invalid\ partition\ table\0 295 string Error\ loading\ operating\ system\0 326 string Missing\ operating\ system\0 \b, mbr

139 string Invalid\ partition\ table\0

163 string Error\ loading\ operating\ system\0

194 string Missing\ operating\ system\0 \b, Microsoft Windows XP mbr

http://www.heise.de/ct/05/09/006/ page 184

#HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices\DosDevices?:=Serial4Bytes+8Bytes

0x1B8 ulelong >0 \b,Serial 0x%-.4x 300 string Invalid\ partition\ table\0 324 string Error\ loading\ operating\ system\0 355 string Missing\ operating\ system\0 \b, Microsoft Windows XP MBR #??>>>389 string Invalid\ system\ disk 0x1B8 ulelong >0 \b, Serial 0x%-.4x 300 string Ung\201ltige\ Partitionstabelle #split string to avoid error: String too long 328 string Fehler\ beim\ Laden\ 346 string des\ Betriebssystems 366 string Betriebssystem\ nicht\ vorhanden \b, Microsoft Windows XP MBR (german)

0x1B8 ulelong >0 \b, Serial 0x%-.4x 0x145 string Default:\ F \b, FREE-DOS MBR 64 string no\ active\ partition\ found 96 string read\ error\ while\ reading\ drive \b, FREE-DOS Beta 0.9 MBR 271 string Operating\ system\ loading 296 string error\r \b, SYSLINUX MBR (2.10)

bootloader, bootmanager

43 string SMART\ BTMGRFAT12\ \ \

430 string SBMK\ Bad!\r

3 string SBM \b, Smart Boot Manager

6 string >\0 \b, version %s 382 string XOSLLOADXCF \b, eXtended Operating System Loader 6 string LILO \b, LInux i386 boot LOader 120 string LILO \b, version 22.3.4 SuSe 172 string LILO \b, version 22.5.8 Debian 402 string Geom\0Hard\ Disk\0Read\0\ Error\0 394 string stage1 \b, GRand Unified Bootloader (0.5.95) 343 string Geom\0Read\0\ Error\0 321 string Loading\ stage1.5 \b, Grand Unified Bootloader 380 string Geom\0Hard\ Disk\0Read\0\ Error\0 374 string GRUB\ \0 \b, GRand Unified Bootloader 382 string Geom\0Hard\ Disk\0Read\0\ Error\0 376 string GRUB\ \0 \b, GRand Unified Bootloader (0.93) 383 string Geom\0Hard\ Disk\0Read\0\ Error\0 377 string GRUB\ \0 \b, GRand Unified Bootloader (0.94) 385 string Geom\0Hard\ Disk\0Read\0\ Error\0 379 string GRUB\ \0 \b, GRand Unified Bootloader (0.95) 480 string Boot\ failed\r 495 string LDLINUX\ SYS \b, SYSLINUX bootloader (2.06) 395 string chksum\0\ ERROR!\0 \b, Gujin bootloader 185 string FDBOOT\ Version\ 204 string \rNo\ Systemdisk.\ 220 string Booting\ from\ harddisk.\n\r 245 string Cannot\ load\ from\ harddisk.\n\r 273 string Insert\ Systemdisk\

291 string and\ press\ any\ key.\n\r \b, FDBOOT harddisk Bootloader

200 string >\0 \b, version %-3s 242 string Bootsector\ from\ C.H.\ Hochst\204 278 string No\ Systemdisk.\ 293 string Booting\ from\ harddisk.\n\r 441 string Cannot\ load\ from\ harddisk.\n\r 469 string Insert\ Systemdisk\ 487 string and\ press\ any\ key.\n\r \b, WinImage harddisk Bootloader 209 string >\0 \b, version %-4.4s (1.b+2) ubyte 0xe (1.b+3) ubyte 0x1f (1.b+4) ubyte 0xbe (1.b+5) ubyte 0x77 (1.b+6) ubyte 0x7c (1.b+7) ubyte 0xac (1.b+8) ubyte 0x22

(1.b+9) ubyte 0xc0

(1.b+10) ubyte 0x74

(1.b+11) ubyte 0xb

(1.b+12) ubyte 0x56 (1.b+13) ubyte 0xb4 \b, mkdosfs boot message display

66 string Solaris\ Boot\ Sector

99 string Incomplete\ MDBoot\ load.

89 string Version \b, Sun Solaris Bootloader

97 byte x version %c

408 string OS/2\ !!\ SYS01475\r\0

429 string OS/2\ !!\ SYS02025\r\0

450 string OS/2\ !!\ SYS02027\r\0 469 string OS2BOOT\ \ \ \ \b, IBM OS/2 Warp bootloader

409 string OS/2\ !!\ SYS01475\r\0

430 string OS/2\ !!\ SYS02025\r\0

451 string OS/2\ !!\ SYS02027\r\0 470 string OS2BOOT\ \ \ \ \b, IBM OS/2 Warp Bootloader 112 string This\ disk\ is\ not\ bootable\r 142 string If\ you\ wish\ to\ make\ it\ bootable 176 string run\ the\ DOS\ program\ SYS\ 200 string after\ the\r

216 string system\ has\ been\ loaded\r\n

242 string Please\ insert\ a\ DOS\ diskette\ 271 string into\r\n\ the\ drive\ and\

292 string strike\ any\ key...\0 \b, IBM OS/2 Warp message display

XP

430 string NTLDR\ is\ missing\xFF\r\n

449 string Disk\ error\xFF\r\n

462 string Press\ any\ key\ to\ restart\r \b, Microsoft Windows XP Bootloader

DOS names like NTLDR,CMLDR,$LDR$ are 8 right space padded bytes+3 bytes

417 ubyte&0xDF >0

417 string x %-.5s

422 ubyte&0xDF >0

422 string x \b%-.3s 425 ubyte&0xDF >0 425 string >\ \b.%-.3s

371 ubyte >0x20

368 ubyte&0xDF >0

368 string x %-.5s

373 ubyte&0xDF >0

373 string x \b%-.3s 376 ubyte&0xDF >0 376 string x \b.%-.3s

430 string NTLDR\ nicht\ gefunden\xFF\r\n

453 string Datentr\204gerfehler\xFF\r\n

473 string Neustart\ mit\ beliebiger\ Taste\r \b, Microsoft Windows XP Bootloader (german)

417 ubyte&0xDF >0

417 string x %-.5s

422 ubyte&0xDF >0

422 string x \b%-.3s 425 ubyte&0xDF >0 425 string >\ \b.%-.3s

368 ubyte&0xDF >0

368 string x %-.5s

373 ubyte&0xDF >0

373 string x \b%-.3s 376 ubyte&0xDF >0 376 string x \b.%-.3s

430 string NTLDR\ fehlt\xFF\r\n

444 string Datentr\204gerfehler\xFF\r\n

464 string Neustart\ mit\ beliebiger\ Taste\r \b, Microsoft Windows XP Bootloader (2.german)

417 ubyte&0xDF >0

417 string x %-.5s

422 ubyte&0xDF >0

422 string x \b%-.3s 425 ubyte&0xDF >0 425 string >\ \b.%-.3s

variant

371 ubyte >0x20

368 ubyte&0xDF >0

368 string x %-.5s

373 ubyte&0xDF >0

373 string x \b%-.3s 376 ubyte&0xDF >0 376 string x \b.%-.3s

430 string NTLDR\ fehlt\xFF\r\n

444 string Medienfehler\xFF\r\n

459 string Neustart:\ Taste\ dr\201cken\r \b, Microsoft Windows XP Bootloader (3.german)

371 ubyte >0x20

368 ubyte&0xDF >0

368 string x %-.5s

373 ubyte&0xDF >0

373 string x \b%-.3s 376 ubyte&0xDF >0 376 string x \b.%-.3s

variant

417 ubyte&0xDF >0

417 string x %-.5s

422 ubyte&0xDF >0

422 string x \b%-.3s 425 ubyte&0xDF >0 425 string >\ \b.%-.3s

430 string Datentr\204ger\ entfernen\xFF\r\n

454 string Medienfehler\xFF\r\n

469 string Neustart:\ Taste\ dr\201cken\r \b, Microsoft Windows XP Bootloader (4.german)

368 ubyte&0xDF >0

368 string x %-.5s

373 ubyte&0xDF >0

373 string x \b%-.3s 376 ubyte&0xDF >0 376 string x \b.%-.3s #>3 string NTFS\ \ \ \ 389 string Fehler\ beim\ Lesen\ 407 string des\ Datentr\204gers 426 string NTLDR\ fehlt 440 string NTLDR\ ist\ komprimiert 464 string Neustart\ mit\ Strg+Alt+Entf\r \b, Microsoft Windows XP Bootloader NTFS (german) #>3 string NTFS\ \ \ \ 313 string A\ disk\ read\ error\ occurred.\r 345 string A\ kernel\ file\ is\ missing\ 370 string from\ the\ disk.\r 484 string NTLDR\ is\ compressed 429 string Insert\ a\ system\ diskette\ 454 string and\ restart\r\nthe\ system.\r \b, Microsoft Windows XP Bootloader NTFS

DOS loader variants different languages,offsets

472 ubyte&0xDF >0

389 string Invalid\ system\ disk\xFF\r\n

411 string Disk\ I/O\ error

428 string Replace\ the\ disk,\ and\

455 string press\ any\ key \b, Microsoft Windows 98 Bootloader #IO.SYS

472 ubyte&0xDF >0

472 string x \b %-.2s

474 ubyte&0xDF >0

474 string x \b%-.5s

479 ubyte&0xDF >0

479 string x \b%-.1s 480 ubyte&0xDF >0 480 string x \b.%-.3s #MSDOS.SYS 483 ubyte&0xDF >0 \b+ 483 string x \b%-.5s 488 ubyte&0xDF >0 488 string x \b%-.3s 491 ubyte&0xDF >0 491 string x \b.%-.3s

390 string Invalid\ system\ disk\xFF\r\n

412 string Disk\ I/O\ error\xFF\r\n

429 string Replace\ the\ disk,\ and\

451 string then\ press\ any\ key\r \b, Microsoft Windows 98 Bootloader 388 string Ungueltiges\ System\ \xFF\r\n 410 string E/A-Fehler\ \ \ \ \xFF\r\n 427 string Datentraeger\ wechseln\ und\ 453 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (german) #WINBOOT.SYS only not spaces (0xDF)

497 ubyte&0xDF >0

497 string x %-.5s

502 ubyte&0xDF >0

502 string x \b%-.1s

503 ubyte&0xDF >0

503 string x \b%-.1s

504 ubyte&0xDF >0

504 string x \b%-.1s 505 ubyte&0xDF >0 505 string x \b.%-.3s #IO.SYS 472 ubyte&0xDF >0 or 472 string x \b %-.2s 474 ubyte&0xDF >0 474 string x \b%-.5s 479 ubyte&0xDF >0 479 string x \b%-.1s 480 ubyte&0xDF >0 480 string x \b.%-.3s #MSDOS.SYS 483 ubyte&0xDF >0 \b+ 483 string x \b%-.5s 488 ubyte&0xDF >0 488 string x \b%-.3s 491 ubyte&0xDF >0 491 string x \b.%-.3s

390 string Ungueltiges\ System\ \xFF\r\n

412 string E/A-Fehler\ \ \ \ \xFF\r\n

429 string Datentraeger\ wechseln\ und\

455 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (German) #WINBOOT.SYS only not spaces (0xDF)

497 ubyte&0xDF >0

497 string x %-.7s

504 ubyte&0xDF >0

504 string x \b%-.1s 505 ubyte&0xDF >0 505 string x \b.%-.3s #IO.SYS 472 ubyte&0xDF >0 or 472 string x \b %-.2s 474 ubyte&0xDF >0 474 string x \b%-.6s 480 ubyte&0xDF >0 480 string x \b.%-.3s #MSDOS.SYS 483 ubyte&0xDF >0 \b+ 483 string x \b%-.5s 488 ubyte&0xDF >0

488 string x \b%-.3s 491 ubyte&0xDF >0 491 string x \b.%-.3s

389 string Ungueltiges\ System\ \xFF\r\n

411 string E/A-Fehler\ \ \ \ \xFF\r\n

428 string Datentraeger\ wechseln\ und\

454 string Taste\ druecken\r \b, Microsoft Windows 95/98/ME Bootloader (GERMAN)

DOS names like IO.SYS,WINBOOT.SYS,MSDOS.SYS,WINBOOT.INI are 8 right space padded bytes+3 bytes

472 string x %-.2s

474 ubyte&0xDF >0

474 string x \b%-.5s 479 ubyte&0xDF >0

479 string x \b%-.1s 480 ubyte&0xDF >0 480 string x \b.%-.3s 483 ubyte&0xDF >0 \b+ 483 string x \b%-.5s 488 ubyte&0xDF >0 488 string x \b%-.2s 490 ubyte&0xDF >0 490 string x \b%-.1s 491 ubyte&0xDF >0 491 string x \b.%-.3s 479 ubyte&0xDF >0 416 string Kein\ System\ oder\ 433 string Laufwerksfehler 450 string Wechseln\ und\ Taste\ dr\201cken \b, Microsoft DOS Bootloader (german) #IO.SYS 479 string x \b %-.2s 481 ubyte&0xDF >0 481 string x \b%-.6s 487 ubyte&0xDF >0 487 string x \b.%-.3s #MSDOS.SYS 490 ubyte&0xDF >0 \b+ 490 string x \b%-.5s 495 ubyte&0xDF >0 495 string x \b%-.3s 498 ubyte&0xDF >0 498 string x \b.%-.3s

486 ubyte&0xDF >0

416 string Non-System\ disk\ or\

435 string disk\ error\r

447 string Replace\ and\ press\ any\ key\

473 string when\ ready\r \b, Microsoft DOS Bootloader 480 ubyte&0xDF >0 393 string Non-System\ disk\ or\ 412 string disk\ error\r 424 string Replace\ and\ press\ any\ key\ 450 string when\ ready\r \b, Microsoft DOS bootloader #IO.SYS 480 string x \b %-.2s

482 ubyte&0xDF >0

48 string x \b%-.6s 488 ubyte&0xDF >0 488 string x \b.%-.3s #MSDOS.SYS 491 ubyte&0xDF >0 \b+ 491 string x \b%-.5s

496 ubyte&0xDF >0

496 string x \b%-.3s 499 ubyte&0xDF >0 499 string x \b.%-.3s #>43 string \224R-LOADER\ \ SYS =label 54 string SYS 324 string VASKK 495 string NEWLDR\0 \b, DR-DOS Bootloader (LOADER.SYS)

70 string IBMBIO\ \ COM

472 string Cannot\ load\ DOS!\

489 string Any\ key\ to\ retry \b, DR-DOS Bootloader 471 string Cannot\ load\ DOS\ 487 string press\ key\ to\ retry \b, Open-DOS Bootloader 444 string KERNEL\ \ SYS 314 string BOOT\ error! \b, FREE-DOS Bootloader 499 string KERNEL\ \ SYS 305 string BOOT\ err!\0 \b, Free-DOS Bootloader 449 string KERNEL\ \ SYS 319 string BOOT\ error! \b, FREE-DOS 0.5 Bootloader 125 string Loading\ FreeDOS...\r 311 string BOOT\ error!\r \b, FREE-DOS bootloader 441 ubyte&0xDF >0

441 string x \b %-.6s

447 ubyte&0xDF >0

447 string x \b%-.1s

448 ubyte&0xDF >0

448 string x \b%-.1s 449 ubyte&0xDF >0 449 string x \b.%-.3s 124 string FreeDOS\0 331 string \ err\0 \b, FREE-DOS BETa 0.9 Bootloader

DOS names like KERNEL.SYS,KERNEL16.SYS,KERNEL32.SYS,METAKERN.SYS are 8 right space padded bytes+3 bytes

497 ubyte&0xDF >0

497 string x \b %-.6s

503 ubyte&0xDF >0

503 string x \b%-.1s

504 ubyte&0xDF >0

504 string x \b%-.1s 505 ubyte&0xDF >0 505 string x \b.%-.3s 333 string \ err\0 \b, FREE-DOS BEta 0.9 Bootloader 497 ubyte&0xDF >0 497 string x \b %-.6s 503 ubyte&0xDF >0 503 string x \b%-.1s 504 ubyte&0xDF >0 504 string x \b%-.1s 505 ubyte&0xDF >0 505 string x \b.%-.3s 334 string \ err\0 \b, FREE-DOS Beta 0.9 Bootloader 497 ubyte&0xDF >0 497 string x \b %-.6s 503 ubyte&0xDF >0 503 string x \b%-.1s 504 ubyte&0xDF >0 504 string x \b%-.1s 505 ubyte&0xDF >0 505 string x \b.%-.3s 336 string Error!\ 343 string Hit\ a\ key\ to\ reboot. \b, FREE-DOS Beta 0.9sr1 Bootloader 497 ubyte&0xDF >0 497 string x \b %-.6s 503 ubyte&0xDF >0 503 string x \b%-.1s 504 ubyte&0xDF >0 504 string x \b%-.1s 505 ubyte&0xDF >0 505 string x \b.%-.3s

loader end

0 string \0\0\0\0 \b, extended partition table

JuMP short bootcodeoffset NOP assembler instructions will usually be EB xx 90

older drives may use E9 xx xx

0 lelong&0x009000EB 0x009000EB 0 lelong&0x000000E9 0x000000E9

1 ubyte >37 \b, code offset 0x%x

mtools-3.9.8/msdos.h

usual values are marked with comments to get only informations of strange FAT systems

valid sectorsize are from 32 to 2048

11 uleshort <2049

11 uleshort >31

3 string >\0 \b, OEM-ID "%8.8s" 11 uleshort >512 \b, Bytes/sector %u #>>>>>11 uleshort =512 \b, Bytes/sector %u=512 (usual) 11 uleshort <512 \b, Bytes/sector %u 13 ubyte >1 \b, sectors/cluster %u #>>>>>13 ubyte =1 \b, sectors/cluster %u (usual on Floppies) 14 uleshort >32 \b, reserved sectors %u #>>>>>14 uleshort =32 \b, reserved sectors %u (usual Fat32) #>>>>>14 uleshort >1 \b, reserved sectors %u #>>>>>14 uleshort =1 \b, reserved sectors %u (usual FAT12,FAT16) 14 uleshort <1 \b, reserved sectors %u 16 ubyte >2 \b, FATs %u #>>>>>16 ubyte =2 \b, FATs %u (usual) 16 ubyte =1 \b, FAT %u 16 ubyte >0 17 uleshort >0 \b, root entries %u #>>>>>17 uleshort =0 \b, root entries %u=0 (usual Fat32) 19 uleshort >0 \b, sectors %u (volumes <=32 MB) #>>>>>19 uleshort =0 \b, sectors %u=0 (usual Fat32) 21 ubyte >0xF0 \b, Media descriptor 0x%x #>>>>>21 ubyte =0xF0 \b, Media descriptor 0x%x (usual floppy) 21 ubyte <0xF0 \b, Media descriptor 0x%x 22 uleshort >0 \b, sectors/FAT %u #>>>>>22 uleshort =0 \b, sectors/FAT %u=0 (usual Fat32) 26 ubyte >2 \b, heads %u #>>>>>26 ubyte =2 \b, heads %u (usual floppy) 26 ubyte =1 \b, heads %u 28 ulelong >0 \b, hidden sectors %u #>>>>>28 ulelong =0 \b, hidden sectors %u (usual floppy) 32 ulelong >0 \b, sectors %u (volumes > 32 MB) #>>>>>32 ulelong =0 \b, sectors %u (volumes > 32 MB)

FAT<32 specific

NOT le FAT3=NOT 3TAF=0xCCABBEB9

82 ulelong&0xCCABBEB9 >0

36 ubyte >0x80 \b, physical drive 0x%x #>>>>>>36 ubyte =0x80 \b, physical drive 0x%x=0x80 (usual harddisk) 36 ubyte&0x7F >0 \b, physical drive 0x%x #>>>>>>36 ubyte =0 \b, physical drive 0x%x=0 (usual floppy) 37 ubyte >0 \b, reserved 0x%x #>>>>>>37 ubyte =0 \b, reserved 0x%x 38 ubyte >0x29 \b, dos < 4.0 BootSector (0x%x) 38 ubyte <0x29 \b, dos < 4.0 BootSector (0x%x) 38 ubyte =0x29

39 ulelong x \b, serial number 0x%x 43 string <NO\ NAME \b, label: "%11.11s" 43 string >NO\ NAME \b, label: "%11.11s" 43 string =NO\ NAME \b, unlabeled 54 string FAT \b, FAT 54 string FAT12 \b (12 bit) 54 string FAT16 \b (16 bit)

FAT32 specific

82 string FAT32 \b, FAT (32 bit)

36 ulelong x \b, sectors/FAT %u 40 uleshort >0 \b, extension flags %u #>>>>>>40 uleshort =0 \b, extension flags %u 42 uleshort >0 \b, fsVersion %u #>>>>>>42 uleshort =0 \b, fsVersion %u (usual) 44 ulelong >2 \b, rootdir cluster %u #>>>>>>44 ulelong =2 \b, rootdir cluster %u #>>>>>>44 ulelong =1 \b, rootdir cluster %u 48 uleshort >1 \b, infoSector %u #>>>>>>48 uleshort =1 \b, infoSector %u (usual) 48 uleshort <1 \b, infoSector %u 50 uleshort >6 \b, Backup boot sector %u #>>>>>>50 uleshort =6 \b, Backup boot sector %u (usual) 50 uleshort <6 \b, Backup boot sector %u 54 ulelong >0 \b, reserved1 0x%x 58 ulelong >0 \b, reserved2 0x%x 62 ulelong >0 \b, reserved3 0x%x

same structure as FAT1X

64 ubyte >0x80 \b, physical drive 0x%x #>>>>>>64 ubyte =0x80 \b, physical drive 0x%x=80 (usual harddisk) 64 ubyte&0x7F >0 \b, physical drive 0x%x #>>>>>>64 ubyte =0 \b, physical drive 0x%x=0 (usual floppy) 65 ubyte >0 \b, reserved 0x%x 66 ubyte >0x29 \b, dos < 4.0 BootSector (0x%x) 66 ubyte <0x29 \b, dos < 4.0 BootSector (0x%x) 66 ubyte =0x29

67 ulelong x \b, serial number 0x%x 71 string <NO\ NAME \b, label: "%11.11s" 71 string >NO\ NAME \b, label: "%11.11s" 71 string =NO\ NAME \b, unlabeled

FATs end

0x200 lelong 0x82564557 \b, BSD disklabel

FATX

0 string FATX FATX filesystem data

Minix filesystems - Juan Cespedes cespedes@debian.org

0x410 leshort 0x137f Minix filesystem 0x410 beshort 0x137f Minix filesystem (big endian),

0x402 beshort !0 \b, %d zones 0x1e string minix \b, bootable 0x410 leshort 0x138f Minix filesystem, 30 char names 0x410 leshort 0x2468 Minix filesystem, version 2 0x410 leshort 0x2478 Minix filesystem, version 2, 30 char names

romfs filesystems - Juan Cespedes cespedes@debian.org

0 string -rom1fs-\0 romfs filesystem, version 1

8 belong x %d bytes, 16 string x named %s.

netboot image - Juan Cespedes cespedes@debian.org

0 lelong 0x1b031336L Netboot image,

4 lelong&0xFFFFFF00 0

4 lelong&0x100 0x000 mode 2 4 lelong&0x100 0x100 mode 3 4 lelong&0xFFFFFF00 !0 unknown mode

0x18b string OS/2 OS/2 Boot Manager

9564 lelong 0x00011954 Unix Fast File system (little-endian),

8404 string x last mounted on %s, #>9504 ledate x last checked at %s, 8224 ledate x last written at %s, 8401 byte x clean flag %d, 8228 lelong x number of blocks %d, 8232 lelong x number of data blocks %d, 8236 lelong x number of cylinder groups %d, 8240 lelong x block size %d, 8244 lelong x fragment size %d, 8252 lelong x minimum percentage of free blocks %d, 8256 lelong x rotational delay %dms, 8260 lelong x disk rotational speed %drps, 8320 lelong 0 TIME optimization 8320 lelong 1 SPACE optimization

9564 belong 0x00011954 Unix Fast File system (big-endian),

7168 long 0x4c41424c Apple UFS Volume

7186 string x named %s, 7176 belong x volume label version %d, 7180 bedate x created on %s, 8404 string x last mounted on %s, #>9504 bedate x last checked at %s, 8224 bedate x last written at %s, 8401 byte x clean flag %d, 8228 belong x number of blocks %d, 8232 belong x number of data blocks %d, 8236 belong x number of cylinder groups %d, 8240 belong x block size %d, 8244 belong x fragment size %d, 8252 belong x minimum percentage of free blocks %d, 8256 belong x rotational delay %dms, 8260 belong x disk rotational speed %drps, 8320 belong 0 TIME optimization 8320 belong 1 SPACE optimization

ext2/ext3 filesystems - Andreas Dilger adilger@turbolabs.com

0x438 leshort 0xEF53 Linux

0x44c lelong x rev %d 0x43e leshort x \b.%d 0x45c lelong ^0x0000004 ext2 filesystem data

0x43a leshort ^0x0000001 (mounted or unclean) 0x45c lelong &0x0000004 ext3 filesystem data 0x460 lelong &0x0000004 (needs journal recovery) 0x43a leshort &0x0000002 (errors) 0x460 lelong &0x0000001 (compressed) #>0x460 lelong &0x0000002 (filetype) #>0x464 lelong &0x0000001 (sparse_super) 0x464 lelong &0x0000002 (large files)

SGI disk labels - Nathan Scott nathans@debian.org

0 belong 0x0BE5A941 SGI disk label (volume header)

SGI XFS filesystem - Nathan Scott nathans@debian.org

0 belong 0x58465342 SGI XFS filesystem data

0x4 belong x (blksz %d, 0x68 beshort x inosz %d, 0x64 beshort ^0x2004 v1 dirs) 0x64 beshort &0x2004 v2 dirs)

############################################################################

Minix-ST kernel floppy

0x800 belong 0x46fc2700 Atari-ST Minix kernel image

19 string \240\5\371\5\0\011\0\2\0 \b, 720k floppy 19 string \320\2\370\5\0\011\0\1\0 \b, 360k floppy

############################################################################

Hmmm, is this a better way of detecting standard floppy images ?

19 string \320\2\360\3\0\011\0\1\0 DOS floppy 360k

0x1FE leshort 0xAA55 \b, x86 hard disk boot sector 19 string \240\5\371\3\0\011\0\2\0 DOS floppy 720k 0x1FE leshort 0xAA55 \b, x86 hard disk boot sector 19 string \100\013\360\011\0\022\0\2\0 DOS floppy 1440k 0x1FE leshort 0xAA55 \b, x86 hard disk boot sector

19 string \240\5\371\5\0\011\0\2\0 DOS floppy 720k, IBM

0x1FE leshort 0xAA55 \b, x86 hard disk boot sector 19 string \100\013\371\5\0\011\0\2\0 DOS floppy 1440k, mkdosfs 0x1FE leshort 0xAA55 \b, x86 hard disk boot sector

19 string \320\2\370\5\0\011\0\1\0 Atari-ST floppy 360k 19 string \240\5\371\5\0\011\0\2\0 Atari-ST floppy 720k

Valid media descriptor bytes for MS-DOS:

Byte Capacity Media Size and Type

-------------------------------------------------

F0 2.88 MB 3.5-inch, 2-sided, 36-sector

F0 1.44 MB 3.5-inch, 2-sided, 18-sector

F9 720K 3.5-inch, 2-sided, 9-sector

F9 1.2 MB 5.25-inch, 2-sided, 15-sector

FD 360K 5.25-inch, 2-sided, 9-sector

FF 320K 5.25-inch, 2-sided, 8-sector

FC 180K 5.25-inch, 1-sided, 9-sector

FE 160K 5.25-inch, 1-sided, 8-sector

FE 250K 8-inch, 1-sided, single-density

FD 500K 8-inch, 2-sided, single-density

FE 1.2 MB 8-inch, 2-sided, double-density

F8 ----- Fixed disk

FC xxxK Apricot 70x1x9 boot disk.

Originally a bitmap:

xxxxxxx0 Not two sided

xxxxxxx1 Double sided

xxxxxx0x Not 8 SPT

xxxxxx1x 8 SPT

xxxxx0xx Not Removable drive

xxxxx1xx Removable drive

11111xxx Must be one.

But now it's rather random:

111111xx Low density disk

00 SS, Not 8 SPT

01 DS, Not 8 SPT

10 SS, 8 SPT

11 DS, 8 SPT

11111001 Double density 3<> floppy disk, high density 5<>

11110000 High density 3<> floppy disk

11111000 Hard disk any format

CDROM Filesystems

32769 string CD001 ISO 9660 CD-ROM filesystem data

"application id" which appears to be used as a volume label

32808 string >\0 '%s' 34816 string \000CD001\001EL\ TORITO\ SPECIFICATION (bootable) 37633 string CD001 ISO 9660 CD-ROM filesystem data (raw 2352 byte sectors) 32776 string CDROM High Sierra CD-ROM filesystem data

cramfs filesystem - russell@coker.com.au

0 lelong 0x28cd3d45 Linux Compressed ROM File System data, little endian

4 lelong x size %d 8 lelong &1 version #2 8 lelong &2 sorted_dirs 8 lelong &4 hole_support 32 lelong x CRC 0x%x, 36 lelong x edition %d, 40 lelong x %d blocks, 44 lelong x %d files

0 belong 0x28cd3d45 Linux Compressed ROM File System data, big endian

4 belong x size %d 8 belong &1 version #2 8 belong &2 sorted_dirs 8 belong &4 hole_support 32 belong x CRC 0x%x, 36 belong x edition %d, 40 belong x %d blocks, 44 belong x %d files

reiserfs - russell@coker.com.au

0x10034 string ReIsErFs ReiserFS V3.5 0x10034 string ReIsEr2Fs ReiserFS V3.6

0x1002c leshort x block size %d 0x10032 leshort &2 (mounted or unclean) 0x10000 lelong x num blocks %d 0x10040 lelong 1 tea hash 0x10040 lelong 2 yura hash 0x10040 lelong 3 r5 hash

JFFS - russell@coker.com.au

0 lelong 0x34383931 Linux Journalled Flash File system, little endian 0 belong 0x34383931 Linux Journalled Flash File system, big endian

EST flat binary format (which isn't, but anyway)

From: Mark Brown broonie@sirena.org.uk

0 string ESTFBINR EST flat binary

Aculab VoIP firmware

From: Mark Brown broonie@sirena.org.uk

0 string VoIP\ Startup\ and Aculab VoIP firmware

35 string x format %s

PPCBoot image file

From: Mark Brown broonie@sirena.org.uk

0 belong 0x27051956 PPCBoot image

4 string PPCBoot

12 string x version %s

JFFS2 file system

0 leshort 0x1984 Linux old jffs2 filesystem data little endian 0 lelong 0xe0011985 Linux jffs2 filesystem data little endian

Squashfs

0 string sqsh Squashfs filesystem, big endian,

28 beshort x version %d. 30 beshort x \b%d, 8 belong x %d bytes, 4 belong x %d inodes, 28 beshort <2

32 beshort x blocksize: %d bytes, 28 beshort >1 51 belong x blocksize: %d bytes, 39 bedate x created: %s 0 string hsqs Squashfs filesystem, little endian, 28 leshort x version %d. 30 leshort x \b%d, 8 lelong x %d bytes, 4 lelong x %d inodes, 28 leshort <2 32 leshort x blocksize: %d bytes, 28 leshort >1 51 lelong x blocksize: %d bytes, 39 ledate x created: %s

AFS Dump Magic

From: Ty Sarna tsarna@sarna.org

0 string \x01\xb3\xa1\x13\x22 AFS Dump

&0 belong x (v%d)

&0 byte 0x76

&0 belong x Vol %d,

&0 byte 0x6e

&0 string x %s

&1 byte 0x74

&0 beshort 2

&4 bedate x on: %s &0 bedate =0 full dump &0 bedate !0 incremental since: %s