Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Fetching contributors…

Cannot retrieve contributors at this time

48 lines (44 sloc) 1.696 kb
.TH MMCAT 1
.SH NAME
mmcat \- Output the contents of a partition to stdout
.SH SYNOPSIS
.B mmcat [-t
.I mmtype
.B ] [-o
.I offset
.B ] [ -i
.I imgtype
.B ] [-b dev_sector_size] [-vV]
.I image [images] part_num
.SH DESCRIPTION
.B mmcat
outputs the contents of a specific volume to stdout. This allows you to
extract the contents of a partition to a separate file.
.SH ARGUMENTS
.IP "-t mmtype"
Specify the media management type.
Use '\-t list' to list the supported types.
If not given, autodetection methods are used.
.IP "-o offset"
Specify the offset into the image where the volume containing the
partition system starts. The relative offset of the partition system
will be added to this value.
.IP "-b dev_sector_size"
The size, in bytes, of the underlying device sectors. If not given, the value in the image format is used (if it exists) or 512-bytes is assumed.
.IP "-i imgtype"
Identify the type of image file, such as raw.
Use '\-i list' to list the supported types.
If not given, autodetection methods are used.
.IP -v
Verbose output of debugging statements to stderr
.IP -V
Display version
.IP "image [images]"
The disk or partition image to read, whose format is given with '\-i'.
Multiple image file names can be given if the image is split into multiple segments.
If only one image file is given, and its name is the first in a sequence (e.g., as indicated by ending in '.001'), subsequent image segments will be included automatically.
.IP "part_num"
Address of partition to process. See the mmls output to determine the address of the partitions.
.SH AUTHOR
Brian Carrier <carrier at sleuthkit dot org>
Send documentation updates to <doc-updates at sleuthkit dot org>
Jump to Line
Something went wrong with that request. Please try again.