Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- macOSs-iMac:apfs-tools macos$ sudo ./bin/apfs-inspect /dev/disk5s2
- Opening file at `/dev/disk5s2` in read-only mode ... OK.
- Simulating a mount of the APFS container.
- Validating checksum of block 0x0 ... OK.
- Details of block 0x0:
- --------------------------------------------------------------------------------
- Stored checksum: 0xc2b67d1df2e289a4
- OID: 0x1
- XID: 0x2cfc0
- Storage type: Ephemeral
- Type flags: (none)
- Type: Container superblock
- Subtype: (none/invalid)
- Keybag location: starts at 0, spans 0 blocks
- Magic string: NXSB
- Block size: 4096 bytes
- Block count: 183104251
- Supported features:
- - No feature flags are set.
- Supported read-only compatible features:
- - No read-only compatible feature flags are set.
- Backward-incompatible features:
- - No backward-incompatible feature flags are set.
- UUID: 0x3448d994ffd61dac6d4079e2765d45dc
- Next OID: 0xeafef
- Next XID: 0x2cfc1
- Space manager Ephemeral OID: 0x6cd4b
- Object map Physical OID: 0x10ed7d
- Reaper Ephemeral OID: 0x401
- Other flags:
- - No other flags are set.
- --------------------------------------------------------------------------------
- Locating the checkpoint descriptor area:
- - Its length is 280 blocks.
- - It is contiguous.
- - The address of its first block is 0x1b1131.
- Loading the checkpoint descriptor area into memory ... OK.
- Locating the most recent well-formed container superblock in the checkpoint descriptor area:
- - It lies at index 99 within the checkpoint descriptor area.
- Details of this container superblock:
- --------------------------------------------------------------------------------
- Stored checksum: 0xc2b664cdf2e2a1fc
- OID: 0x1
- XID: 0x2cfc0
- Storage type: Ephemeral
- Type flags: (none)
- Type: Container superblock
- Subtype: (none/invalid)
- Keybag location: starts at 0, spans 0 blocks
- Magic string: NXSB
- Block size: 4096 bytes
- Block count: 183104251
- Supported features:
- - No feature flags are set.
- Supported read-only compatible features:
- - No read-only compatible feature flags are set.
- Backward-incompatible features:
- - No backward-incompatible feature flags are set.
- UUID: 0x3448d994ffd61dac6d4079e2765d45dc
- Next OID: 0xeafef
- Next XID: 0x2cfc1
- Space manager Ephemeral OID: 0x6cd4b
- Object map Physical OID: 0x10ed7d
- Reaper Ephemeral OID: 0x401
- Other flags:
- - No other flags are set.
- --------------------------------------------------------------------------------
- - The corresponding checkpoint starts at index 98 within the checkpoint descriptor area, and spans 2 blocks.
- Loading the corresponding checkpoint ... OK.
- Details of each block in this checkpoint:
- --------------------------------------------------------------------------------
- Stored checksum: 0x4eaa4783f09c4f60
- OID: 0x1b1193
- XID: 0x2cfc0
- Storage type: Physical
- Type flags: (none)
- Type: Checkpoint map
- Subtype: (none/invalid)
- Flags:
- - Last checkpoint-mapping block in the correspondng checkpoint.
- Number of mappings: 5
- --------------------------------------------------------------------------------
- Stored checksum: 0xc2b664cdf2e2a1fc
- OID: 0x1
- XID: 0x2cfc0
- Storage type: Ephemeral
- Type flags: (none)
- Type: Container superblock
- Subtype: (none/invalid)
- Keybag location: starts at 0, spans 0 blocks
- Magic string: NXSB
- Block size: 4096 bytes
- Block count: 183104251
- Supported features:
- - No feature flags are set.
- Supported read-only compatible features:
- - No read-only compatible feature flags are set.
- Backward-incompatible features:
- - No backward-incompatible feature flags are set.
- UUID: 0x3448d994ffd61dac6d4079e2765d45dc
- Next OID: 0xeafef
- Next XID: 0x2cfc1
- Space manager Ephemeral OID: 0x6cd4b
- Object map Physical OID: 0x10ed7d
- Reaper Ephemeral OID: 0x401
- Other flags:
- - No other flags are set.
- --------------------------------------------------------------------------------
- Details of each checkpoint-mapping in this checkpoint:
- --------------------------------------------------------------------------------
- Ephemeral OID: 0x6cd4b
- Logical block address on disk: 0x1ac3ac
- Object type: Space manager
- Object subtype: (none/invalid)
- Object size: 4096 bytes
- Associated volume OID (virtual): 0x0
- --------------------------------------------------------------------------------
- Ephemeral OID: 0x6cd4c
- Logical block address on disk: 0x1ac3ad
- Object type: B-tree (root node)
- Object subtype: Space manager free-space queue
- Object size: 4096 bytes
- Associated volume OID (virtual): 0x0
- --------------------------------------------------------------------------------
- Ephemeral OID: 0x405
- Logical block address on disk: 0x1ac3ae
- Object type: B-tree (root node)
- Object subtype: Space manager free-space queue
- Object size: 4096 bytes
- Associated volume OID (virtual): 0x0
- --------------------------------------------------------------------------------
- Ephemeral OID: 0x401
- Logical block address on disk: 0x1ac3af
- Object type: Container reaper
- Object subtype: (none/invalid)
- Object size: 4096 bytes
- Associated volume OID (virtual): 0x0
- --------------------------------------------------------------------------------
- Ephemeral OID: 0x7c273
- Logical block address on disk: 0x1ac3b0
- Object type: Container reaper list
- Object subtype: (none/invalid)
- Object size: 4096 bytes
- Associated volume OID (virtual): 0x0
- --------------------------------------------------------------------------------
- - There are 5 checkpoint-mappings in this checkpoint.
- Reading the Ephemeral objects used by this checkpoint ... OK.
- Validating the Ephemeral objects ... OK.
- Details of the Ephemeral objects:
- --------------------------------------------------------------------------------
- Stored checksum: 0x25a40f8d464fd619
- OID: 0x6cd4b
- XID: 0x2cfc0
- Storage type: Ephemeral
- Type flags: (none)
- Type: Space manager
- Subtype: (none/invalid)
- --------------------------------------------------------------------------------
- Stored checksum: 0x76ccbf2fbd031d6d
- OID: 0x6cd4c
- XID: 0x2cfc0
- Storage type: Ephemeral
- Type flags: (none)
- Type: B-tree (root node)
- Subtype: Space manager free-space queue
- --------------------------------------------------------------------------------
- Stored checksum: 0x3935735b2b031d69
- OID: 0x405
- XID: 0x2cfc0
- Storage type: Ephemeral
- Type flags: (none)
- Type: B-tree (root node)
- Subtype: Space manager free-space queue
- --------------------------------------------------------------------------------
- Stored checksum: 0xc90e4db376df38bd
- OID: 0x401
- XID: 0x2cfc0
- Storage type: Ephemeral
- Type flags: (none)
- Type: Container reaper
- Subtype: (none/invalid)
- --------------------------------------------------------------------------------
- Stored checksum: 0x9d0764f66224071e
- OID: 0x7c273
- XID: 0x2cfc0
- Storage type: Ephemeral
- Type flags: (none)
- Type: Container reaper list
- Subtype: (none/invalid)
- --------------------------------------------------------------------------------
- The container superblock states that the container object map has Physical OID 0x10ed7d.
- Loading the container object map ... OK.
- Validating the container object map ... OK.
- Details of the container object map:
- --------------------------------------------------------------------------------
- Stored checksum: 0xd1b2f2a36e286290
- OID: 0x10ed7d
- XID: 0x2cfc0
- Storage type: Physical
- Type flags: (none)
- Type: Object map
- Subtype: (none/invalid)
- Flags:
- - No snapshot support
- Object mappings tree:
- - Storage type: Physical
- - Type flags: (none)
- - Type: B-tree (root node)
- - Object ID: 0x10ed7e
- Snapshots tree:
- - Storage type: Physical
- - Type flags: (none)
- - Type: B-tree (root node)
- - Object ID: 0x0
- - Number of snapshots: 0 snapshots
- - Latest snapshot XID: 0x0
- In-progress revert:
- - Minimum XID: 0x0
- - Maximum XID: 0x0
- --------------------------------------------------------------------------------
- Reading the root node of the container object map B-tree ... OK.
- Validating the root node of the container object map B-tree ... OK.
- Details of the container object map B-tree:
- --------------------------------------------------------------------------------
- Stored checksum: 0x820608872d625586
- OID: 0x10ed7e
- XID: 0x2cfc0
- Storage type: Physical
- Type flags: (none)
- Type: B-tree (root node)
- Subtype: Object map
- Flags: Root node, Leaf node, Fixed size for keys and values
- Number of child levels: 0
- Number of keys in this node: 4
- Location of table of contents:
- - Offset from start of node data area: 0x0 = 0
- - Length (bytes): 0x1c0 = 448
- Location of key–value shared free space:
- - Offset from start of keys area: 0x50 = 80
- - Length (bytes): 0xd40 = 3392
- Info relating to the entire B-tree:
- - Flags:
- - This B-tree is currently undergoing a series of sequential inserts --- optimise operations if possible
- - Child nodes are referred to using Physical OIDs
- - Node size: 4096 bytes
- - Key size: 16 bytes
- - Value size: 16 bytes
- - Length of longest key: 16 bytes
- - Length of longest value: 16 bytes
- - Number of keys: 4
- - Number of nodes: 1
- --------------------------------------------------------------------------------
- The container superblock lists 4 APFS volumes, whose superblocks have the following Virtual OIDs:
- - 0x403
- - 0x406
- - 0x6cd40
- - 0x77085
- Reading the APFS volume superblocks ... OK.
- Validating the APFS volume superblocks ... OK.
- Details of these volume superblocks:
- --------------------------------------------------------------------------------
- Stored checksum: 0xb8f8a8dd78892a97
- OID: 0x403
- XID: 0x2cf82
- Storage type: Virtual
- Type flags: (none)
- Type: APFS volume
- Subtype: (none/invalid)
- Magic string: APSB
- Index within container volume array: 0
- Volume name: ### Ritz HD ###
- Flags:
- - Volume is unencrypted.
- Supported features:
- - This volume has hardlink map records.
- Supported read-only compatible features:
- - No read-only compatible volume feature flags are set.
- Backward-incompatible features:
- - Filenames on this volume are case-insensitive.
- Roles:
- - This volume has no defined roles
- Last unmount time: Mon May 25 19:03:26 2020
- Last modification time: Tue Jun 9 17:33:48 2020
- Reserved blocks: 0 blocks
- Block quota: 0 blocks
- Allocated blocks: 159152691 blocks
- Volume object map Physical OID: 0x10f2e8
- Root tree info:
- - OID: 0x404
- - Storage type: Virtual
- - Type flags: (none)
- - Object type: B-tree (root node)
- Extent-reference tree info:
- - OID: 0x10ebdf
- - Storage type: Physical
- - Type flags: (none)
- - Object type: B-tree (root node)
- Snapshot metadata tree info:
- - OID: 0x1177e9
- - Storage type: Physical
- - Type flags: (none)
- - Object type: B-tree (root node)
- On next mount, revert to:
- - snapshot with this XID: 0x0
- - APFS volume superblock with this Physical OID: 0x0
- Next file-system object ID that will be assigned: 0x300492f7b
- Next document ID that will be assigned: 0x31b
- Number of:
- - regular files: 2701485
- - directories: 491111
- - symbolic links: 56655
- - other file-system objects: 152
- - snapshots: 0
- - block allocations ever made: 340264890
- - block liberations ever made: 181641563
- UUID: 0x6b2285cb1469c6bc6a3a19525b3f8e14
- --------------------------------------------------------------------------------
- Stored checksum: 0xcba8affd71e98dc8
- OID: 0x406
- XID: 0x2cfbe
- Storage type: Virtual
- Type flags: (none)
- Type: APFS volume
- Subtype: (none/invalid)
- Magic string: APSB
- Index within container volume array: 1
- Volume name: ### Preboot ###
- Flags:
- - Volume is unencrypted.
- Supported features:
- - This volume has hardlink map records.
- Supported read-only compatible features:
- - No read-only compatible volume feature flags are set.
- Backward-incompatible features:
- - Filenames on this volume are case-insensitive.
- Roles:
- - Preboot volume (contains files needed to boot from an encrypted volumes)
- Last unmount time: Sun May 24 06:16:00 2020
- Last modification time: Fri Nov 13 10:10:46 2020
- Reserved blocks: 0 blocks
- Block quota: 0 blocks
- Allocated blocks: 10269 blocks
- Volume object map Physical OID: 0x10ec09
- Root tree info:
- - OID: 0x407
- - Storage type: Virtual
- - Type flags: (none)
- - Object type: B-tree (root node)
- Extent-reference tree info:
- - OID: 0x1177eb
- - Storage type: Physical
- - Type flags: (none)
- - Object type: B-tree (root node)
- Snapshot metadata tree info:
- - OID: 0x1177f3
- - Storage type: Physical
- - Type flags: (none)
- - Object type: B-tree (root node)
- On next mount, revert to:
- - snapshot with this XID: 0x0
- - APFS volume superblock with this Physical OID: 0x0
- Next file-system object ID that will be assigned: 0x300000137
- Next document ID that will be assigned: 0x3
- Number of:
- - regular files: 58
- - directories: 19
- - symbolic links: 0
- - other file-system objects: 0
- - snapshots: 0
- - block allocations ever made: 118240
- - block liberations ever made: 107984
- UUID: 0xfb0156b56271e6a6af40da921a5b4469
- --------------------------------------------------------------------------------
- Stored checksum: 0xa37067f83e1ba6b8
- OID: 0x6cd40
- XID: 0x2cfc0
- Storage type: Virtual
- Type flags: (none)
- Type: APFS volume
- Subtype: (none/invalid)
- Magic string: APSB
- Index within container volume array: 2
- Volume name: ### Recovery ###
- Flags:
- - Volume is unencrypted.
- Supported features:
- - This volume has hardlink map records.
- Supported read-only compatible features:
- - No read-only compatible volume feature flags are set.
- Backward-incompatible features:
- - Filenames on this volume are case-insensitive.
- Roles:
- - Recovery volume (contains a recovery system)
- Last unmount time: Thu Jan 1 09:00:00 1970
- Last modification time: Fri Nov 13 13:56:11 2020
- Reserved blocks: 0 blocks
- Block quota: 0 blocks
- Allocated blocks: 127619 blocks
- Volume object map Physical OID: 0x10eca1
- Root tree info:
- - OID: 0x6cd41
- - Storage type: Virtual
- - Type flags: (none)
- - Object type: B-tree (root node)
- Extent-reference tree info:
- - OID: 0x1177f9
- - Storage type: Physical
- - Type flags: (none)
- - Object type: B-tree (root node)
- Snapshot metadata tree info:
- - OID: 0x117808
- - Storage type: Physical
- - Type flags: (none)
- - Object type: B-tree (root node)
- On next mount, revert to:
- - snapshot with this XID: 0x0
- - APFS volume superblock with this Physical OID: 0x0
- Next file-system object ID that will be assigned: 0x36
- Next document ID that will be assigned: 0x3
- Number of:
- - regular files: 28
- - directories: 4
- - symbolic links: 0
- - other file-system objects: 0
- - snapshots: 0
- - block allocations ever made: 128329
- - block liberations ever made: 719
- UUID: 0x6a1342fe72dcbeb51e4b357aeb33bc39
- --------------------------------------------------------------------------------
- Stored checksum: 0xf23725839dfec852
- OID: 0x77085
- XID: 0x2c2c7
- Storage type: Virtual
- Type flags: (none)
- Type: APFS volume
- Subtype: (none/invalid)
- Magic string: APSB
- Index within container volume array: 3
- Volume name: ### VM ###
- Flags:
- - Volume is unencrypted.
- Supported features:
- - This volume has hardlink map records.
- Supported read-only compatible features:
- - No read-only compatible volume feature flags are set.
- Backward-incompatible features:
- - Filenames on this volume are case-insensitive.
- Roles:
- - Swap volume (used as swap space for virtual memory)
- Last unmount time: Thu Jan 1 09:00:00 1970
- Last modification time: Tue Jun 9 13:12:13 2020
- Reserved blocks: 0 blocks
- Block quota: 0 blocks
- Allocated blocks: 5 blocks
- Volume object map Physical OID: 0x11780c
- Root tree info:
- - OID: 0x77086
- - Storage type: Virtual
- - Type flags: (none)
- - Object type: B-tree (root node)
- Extent-reference tree info:
- - OID: 0x11780a
- - Storage type: Physical
- - Type flags: (none)
- - Object type: B-tree (root node)
- Snapshot metadata tree info:
- - OID: 0x117817
- - Storage type: Physical
- - Type flags: (none)
- - Object type: B-tree (root node)
- On next mount, revert to:
- - snapshot with this XID: 0x0
- - APFS volume superblock with this Physical OID: 0x0
- Next file-system object ID that will be assigned: 0x2f
- Next document ID that will be assigned: 0x3
- Number of:
- - regular files: 0
- - directories: 0
- - symbolic links: 0
- - other file-system objects: 0
- - snapshots: 0
- - block allocations ever made: 14942208
- - block liberations ever made: 14942208
- UUID: 0x5b862c168a62d189a04ea809adedfb33
- --------------------------------------------------------------------------------
- --------------------------------------------------------------------------------
- --------------------------------------------------------------------------------
- Simulating a mount of volume 0 (Ritz HD).
- The volume object map has Physical OID 0x10f2e8.
- Reading the volume object map ... OK.
- Validating the volume object map ... OK.
- Details of the volume object map:
- --------------------------------------------------------------------------------
- Stored checksum: 0xd1de10996dfd39bf
- OID: 0x10f2e8
- XID: 0x2cf82
- Storage type: Physical
- Type flags: (none)
- Type: Object map
- Subtype: (none/invalid)
- Flags:
- - No flags are set.
- Object mappings tree:
- - Storage type: Physical
- - Type flags: (none)
- - Type: B-tree (root node)
- - Object ID: 0x10f32d
- Snapshots tree:
- - Storage type: Physical
- - Type flags: (none)
- - Type: B-tree (root node)
- - Object ID: 0x0
- - Number of snapshots: 0 snapshots
- - Latest snapshot XID: 0x0
- In-progress revert:
- - Minimum XID: 0x0
- - Maximum XID: 0x0
- --------------------------------------------------------------------------------
- Reading the root node of the volume object map B-tree ... OK.
- Validating the root node of the volume object map B-tree ... OK.
- Details of the volume object map B-tree:
- --------------------------------------------------------------------------------
- Stored checksum: 0x1c9991d54417b6c0
- OID: 0x10f32d
- XID: 0x2cf82
- Storage type: Physical
- Type flags: (none)
- Type: B-tree (root node)
- Subtype: Object map
- Flags: Root node, Fixed size for keys and values
- Number of child levels: 2
- Number of keys in this node: 68
- Location of table of contents:
- - Offset from start of node data area: 0x0 = 0
- - Length (bytes): 0x240 = 576
- Location of key–value shared free space:
- - Offset from start of keys area: 0x460 = 1120
- - Length (bytes): 0x6d0 = 1744
- Info relating to the entire B-tree:
- - Flags:
- - This B-tree is currently undergoing a series of sequential inserts --- optimise operations if possible
- - Child nodes are referred to using Physical OIDs
- - Node size: 4096 bytes
- - Key size: 16 bytes
- - Value size: 16 bytes
- - Length of longest key: 16 bytes
- - Length of longest value: 16 bytes
- - Number of keys: 494522
- - Number of nodes: 6898
- --------------------------------------------------------------------------------
- The file-system tree root for this volume has Virtual OID 0x404.
- Looking up this Virtual OID in the volume object map ... corresponding block address is 0x10f357.
- Reading ... validating ... OK.
- Details of the file-system B-tree root node:
- --------------------------------------------------------------------------------
- Stored checksum: 0x66e6ae2dde8a297d
- OID: 0x404
- XID: 0x2cf82
- Storage type: Virtual
- Type flags: (none)
- Type: B-tree (root node)
- Subtype: File-system records tree
- Flags: Root node
- Number of child levels: 4
- Number of keys in this node: 2
- Location of table of contents:
- - Offset from start of node data area: 0x0 = 0
- - Length (bytes): 0x40 = 64
- Location of key–value shared free space:
- - Offset from start of keys area: 0x4d = 77
- - Length (bytes): 0xf03 = 3843
- Info relating to the entire B-tree:
- - Flags:
- - This B-tree is currently undergoing a series of sequential inserts --- optimise operations if possible
- - 8-byte alignment of keys and values is not required
- - Node size: 4096 bytes
- - Key size: 0 bytes
- - Value size: 0 bytes
- - Length of longest key: 443 bytes
- - Length of longest value: 3806 bytes
- - Number of keys: 14019692
- - Number of nodes: 494521
- --------------------------------------------------------------------------------
- 0xa64b2:
- get_fs_records: Need to descend to node with Virtual OID 0x6c582, but the file-system object map lists no objects with this Virtual OID.
- No records found with OID 0xa64b2.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement