Truxton media get size - Revision history

Sam at 11:40, 3 February 2024

2024-02-03T11:40:45Z

Sam at 04:02, 10 February 2021

2021-02-10T04:02:47Z

Sam at 11:36, 17 December 2020

2020-12-17T11:36:09Z

Sam: Created page with "This retrieves the number of bytes in the original media. This corresponds to the `Size` column of the `Media` table. The number of bytes in the media is..."

2020-07-26T11:45:58Z

Created page with "This retrieves the number of bytes in the original media. This corresponds to the <code>Size</code> column of the <code>Media</code> table. The number of bytes in the media is..."

New page

This retrieves the number of bytes in the original media.
This corresponds to the <code>Size</code> column of the <code>Media</code> table.
The number of bytes in the media is the best guess of the number of bytes that will be processed during exploitation.
If the media being loaded is an E01 disk image, the uncompressed size is recorded.

=Syntax=
<syntaxhighlight lang="C">
uint64_t truxton_media_get_size( uint64_t media_handle );
</syntaxhighlight>

=Parameters=
==<code>media_handle</code>==
The handle created by the [[truxton_media_open_id]] or [[truxton_media_create]] call.

=Return value=
The number of bytes in the media.

=Sample=
<syntaxhighlight lang="C" highlight="3">
void is_tiny(uint64_t media)
{
uint64_t size = truxton_media_get_size( media );

if ( size < (100 * 1024 * 1024) )
{
printf( "This tiny media is smaller than 100MB\n" );
}
else
{
printf( "The media is not tiny\n" );
}
}</syntaxhighlight>

@@ Line 1: / Line 1: @@
 This retrieves the number of bytes in the original media.
-This corresponds to the <code>[Size]</code> column of the <code>[Media]</code> table.
+This corresponds to the <code>[Size]</code> column of the <code><nowiki>[</nowiki>[[Media Table|Media]]<nowiki>]</nowiki></code> table.
 The number of bytes in the media is the best guess of the number of bytes that will be processed during exploitation.
 If the media being loaded is an [https://en.wikipedia.org/wiki/EnCase#Expert_Witness_File_Format E01] disk image, the uncompressed size is recorded.

@@ Line 18: / Line 18: @@
 =Sample=
 <source lang="C" highlight="3">
-void is_tiny(uint64_t media)
+void is_tiny( uint64_t media )
+{
     uint64_t size = truxton_media_get_size( media );

@@ Line 1: / Line 1: @@
 This retrieves the number of bytes in the original media.
-This corresponds to the <code>Size</code> column of the <code>Media</code> table.
+This corresponds to the <code>[Size]</code> column of the <code>[Media]</code> table.
 The number of bytes in the media is the best guess of the number of bytes that will be processed during exploitation.
-If the media being loaded is an E01 disk image, the uncompressed size is recorded.
+If the media being loaded is an [https://en.wikipedia.org/wiki/EnCase#Expert_Witness_File_Format E01] disk image, the uncompressed size is recorded.
 =Syntax=
-<syntaxhighlight lang="C">
+<source lang="C">
 uint64_t truxton_media_get_size( uint64_t media_handle );
-</syntaxhighlight>
+</source>
 =Parameters=
@@ Line 17: / Line 17: @@
 =Sample=
-<syntaxhighlight lang="C" highlight="3">
+<source lang="C" highlight="3">
 void is_tiny(uint64_t media)
+{
@@ Line 30: / Line 30: @@
        printf( "The media is not tiny\n" );
+    }
-}</syntaxhighlight>
+}</source>

Truxton media get size - Revision history

Sam at 11:40, 3 February 2024

Sam at 04:02, 10 February 2021

Sam at 11:36, 17 December 2020

Sam: Created page with "This retrieves the number of bytes in the original media. This corresponds to the Size column of the Media table. The number of bytes in the media is..."

Sam: Created page with "This retrieves the number of bytes in the original media. This corresponds to the `Size` column of the `Media` table. The number of bytes in the media is..."