Main Page | Data Structures | Directories | File List | Data Fields | Globals

mac.h

00001 /*
00002  * The Sleuth Kit
00003  *
00004  * $Date: 2007/04/19 19:01:33 $
00005  *
00006  * Brian Carrier [carrier@sleuthkit.org]
00007  * Copyright (c) 2003-2005 Brian Carrier.  All rights reserved
00008  *
00009  */
00010 
00011 #ifndef _MAC_H
00012 #define _MAC_H
00013 
00014 #ifdef __cplusplus
00015 extern "C" {
00016 #endif
00017 
00018     typedef struct {
00019         uint8_t magic[2];
00020         uint8_t reserved[2];
00021         uint8_t pmap_size[4];
00022         uint8_t start_sec[4];
00023         uint8_t size_sec[4];
00024         uint8_t name[32];
00025         uint8_t type[32];
00026         uint8_t data_start_sec[4];
00027         uint8_t data_size_sec[4];
00028         uint8_t status[4];
00029         uint8_t boot_start_sec[4];
00030         uint8_t boot_size_sec[4];
00031         uint8_t boot_load_addr[4];
00032         uint8_t reserved2[4];
00033         uint8_t boot_entry[4];
00034         uint8_t reserved3[4];
00035         uint8_t boot_checksum[4];
00036         uint8_t proc_type[16];
00037         uint8_t reserved4[376];
00038     } mac_part;
00039 
00040 #define MAC_MAGIC       0x504d
00041 #define MAC_PART_SOFFSET        1
00042 
00043 #define MAC_STAT_VALID          0x00
00044 #define MAC_STAT_ALLOC          0x01
00045 #define MAC_STAT_INUSE          0x02
00046 #define MAC_STAT_BOOT           0x04
00047 #define MAC_STAT_READ           0x08
00048 
00049 #ifdef __cplusplus
00050 }
00051 #endif
00052 #endif

Generated on Thu Apr 19 14:58:53 2007 for The Sleuth Kit (Incomplete) by  doxygen 1.4.2