1JLS(1)                      General Commands Manual                     JLS(1)
2
3
4

NAME

6       jls - List the contents of a file system journal
7

SYNOPSIS

9       jls [-f fstype ] [-vV] [-i imgtype] [-o imgoffset] [-b dev_sector_size]
10       image [images] [inode]
11
12

DESCRIPTION

14       jls lists the records and entries in a file system journal.   If  inode
15       is  given,  then  it will look there for a journal.  Otherwise, it will
16       use the default location.  The output lists the  journal  block  number
17       and a description.
18
19

ARGUMENTS

21       -f fstype
22              Specify  the  file  system type.  Use '-f list' to list the sup‐
23              ported file system types. If not  given,  autodetection  methods
24              are used.
25
26       -i imgtype
27              Identify  the type of image file, such as raw or split.  Use '-i
28              list' to list the supported types. If not  given,  autodetection
29              methods are used.
30
31       -o imgoffset
32              The sector offset where the file system starts in the image.
33
34       -b dev_sector_size
35              The  size,  in  bytes, of the underlying device sectors.  If not
36              given, the value in the image format is used (if it  exists)  or
37              512-bytes is assumed.
38
39       -V     Display version
40
41       -v     verbose output
42
43       image [images]
44              One  (or more if split) disk or partition images whose format is
45              given with '-i'.
46
47       [inode]
48              The inode where the file system journal can be found.
49
50

EXAMPLES

52       jls -f linux-ext3 img.dd
53
54

AUTHOR

56       Brian Carrier <carrier at sleuthkit dot org>
57
58       Send documentation updates to <doc-updates at sleuthkit dot org>
59
60
61
62                                                                        JLS(1)