Difference between revisions of "Fast Thunder"
From Forensics Wiki
Joachim Metz (Talk | contribs) |
Joachim Metz (Talk | contribs) |
||
| Line 32: | Line 32: | ||
date -d @$(( 22029112998625280 >> 24 )) | date -d @$(( 22029112998625280 >> 24 )) | ||
Thu Aug 11 06:37:35 CEST 2011 | Thu Aug 11 06:37:35 CEST 2011 | ||
| + | </pre> | ||
| + | |||
| + | === Example queries === | ||
| + | Some example queries: | ||
| + | |||
| + | To get an overview of the tasks: | ||
| + | <pre> | ||
| + | ELECT datetime((TaskBase.CreationTime >> 24), "unixepoch"), TotalReceiveSize, TotalSendSize, Url, ReferenceUrl, Name, Description, SavePath FROM TaskBase; | ||
</pre> | </pre> | ||
Revision as of 06:49, 21 March 2012
Fast Thunder (aka Xunlei) is a download manager developed by Thunder Networking Technologies.
Contents |
SuperDownload database
The SuperDownload database can be found at:
On Windows
C:\Program Files\Thunder Network\Thunder\data\SdInfoDb.dat
This file uses the SQLite database format.
The timestamp:
- SuperDownloadInfo.ContentDownloadTime is stored as BIGINT and contains a POSIX timestamp
- SuperDownloadResource.DownloadTime is stored as BIGINT and contains presumably a POSIX timestamp
Task database
The Task database can be found at:
On Windows
C:\Program Files\Thunder Network\Thunder\Profiles\TaskDb.dat
The timestamp:
- TaskBase.CreationTime is stored as BIGINT and contains a POSIX timestamp shifted 24-bits to the left, e.g.
printf "0x%x\n" 22090158425767936 0x4e7ae1ce000000 date -d @$(( 22029112998625280 >> 24 )) Thu Aug 11 06:37:35 CEST 2011
Example queries
Some example queries:
To get an overview of the tasks:
ELECT datetime((TaskBase.CreationTime >> 24), "unixepoch"), TotalReceiveSize, TotalSendSize, Url, ReferenceUrl, Name, Description, SavePath FROM TaskBase;
