Difference between pages "AFF Development Task List" and "Logical Disk Manager (LDM)"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
(→‎High Priority: - afcat usage message)
 
 
Line 1: Line 1:
−
== High Priority ==
+
{{expand}}
  
−
* Create man pages and/or documentation for AFF toolkit. To wit:
+
The [[Windows]] Logical Disk Manager, is commonly abbreviated to LDM.
  
−
* [[aimage]]
+
== On-disk structures ==
−
* [[ident]]
+
According to [http://technet.microsoft.com/en-us/library/cc737048.aspx TECHNET]:
−
* [[afcat]]
+
−
* [[afcompare]]
+
−
* [[afconvert]]
+
−
* [[affix]]
+
−
* [[affuse]]
+
−
* [[afinfo]]
+
−
* [[afstats]]
+
−
* [[afxml]]
+
−
* [[afsegment]]
+
  
−
* Add a usage description to [[afcat]]. When run with no arguments the output should say what the program does.
+
The location of the database is determined by the partition style of the disk.
 +
* On MBR disks, the database is contained in the last 1 megabyte (MB) of the disk.
 +
* On GPT disks, the database is contained in a 1-MB reserved (hidden) partition known as the Logical Disk Manager (LDM) Metadata partition.
  
−
* Create man pages and/or documentation for AFF library functions (e.g. ,<tt>af_open</tt>, <tt>af_get_imagesize</tt>)
+
== Types of logical volumes ==
 +
* Simple Volumes
 +
* Spanned Volumes
 +
* Striped Volumes
 +
* Mirrored Volumes (Server editions of Windows 2000, Windows 2003)
 +
* RAID-5 Volumes (Server editions of Windows 2003)
  
−
* Build library as a shared library using libtool. This will allow developers using the library to just link to the AFF. Without it, developers must link to the static library and the individual libraries necessary <em>on that machine</em>. There is no good way to determine those extra libraries.
 
  
−
* Document that <tt>af_write</tt> may not be called without first setting the <tt>image_pagesize</tt> value inside of the <tt>AFFILE</tt> structure. Not doing so causes a divide by zero error. Perhaps we should 1. Check that <tt>image_pagesize</tt> is not zero and 2. Set <tt>image_pagesize</tt> to a known good default value when opening a new AFF file for writing.
+
== Also see ==
 +
* [[:Category:File Systems|File Systems]]
  
−
== Medium Priority ==
+
== External Links ==
 +
* [http://technet.microsoft.com/en-us/library/cc757696.aspx Dynamic disks and volumes], by Microsoft, January 2005
 +
* [http://technet.microsoft.com/en-us/library/cc737048.aspx What Are Dynamic Disks and Volumes?], by Microsoft, March 2003
  
−
* How about renaming the library to libaff? That would allow developers to link with <tt>-laff</tt> instead of <tt>-lafflib</tt>. To my knowledge, there is no existing library named AFF already.
+
[[Category:Volume Systems]]
−
 
+
−
* Is there a set of segment names that must be defined to have a ''valid'' AFF file?
+
−
 
+
−
* Document that <tt>af_open</tt> (when writing a file) does more than a standard <tt>fopen</tt> command. The command writes an AFF stub of some kind to the output file. Users should be cautioned not to use this function as a test, lest they overwrite data.
+
−
 
+
−
* Does <tt>af_open</tt> refuse to open a file for writing if it already exists? If so, what kind of error does it return?
+
−
 
+
−
* Document how to programmatically enumerate all segments and values in a file. That is, explain how to get the output of <tt>$ afinfo -a</tt>.
+
−
 
+
−
== Low Priority ==
+
−
 
+
−
* Add library function to open standard input. Perhaps:
+
−
 
+
−
<pre>AFFILE * af_open_stdin(void);</pre>
+

Revision as of 05:14, 14 September 2012

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

The Windows Logical Disk Manager, is commonly abbreviated to LDM.

Contents

On-disk structures

According to TECHNET:

The location of the database is determined by the partition style of the disk.

  • On MBR disks, the database is contained in the last 1 megabyte (MB) of the disk.
  • On GPT disks, the database is contained in a 1-MB reserved (hidden) partition known as the Logical Disk Manager (LDM) Metadata partition.

Types of logical volumes

  • Simple Volumes
  • Spanned Volumes
  • Striped Volumes
  • Mirrored Volumes (Server editions of Windows 2000, Windows 2003)
  • RAID-5 Volumes (Server editions of Windows 2003)


Also see

External Links

Retrieved from "http://www.forensicswiki.org/w/index.php?title=AFF_Development_Task_List&oldid=11777"
Personal tools
Namespaces

Variants
Actions
Navigation:
About forensicswiki.org:
Toolbox