ewf-image 0.2.0

Pure-Rust library for reading and writing EWF/E01 forensic disk images.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

//! Prints the logical single-file catalog from an EWF image.

use std::env;
use std::io::{Error, ErrorKind};

fn main() -> ewf_image::Result<()> {
    let mut args = env::args();
    let program = args.next().unwrap_or_else(|| "inspect_logical".to_string());
    let Some(image_path) = args.next() else {
        return Err(
            Error::new(ErrorKind::InvalidInput, format!("usage: {program} <image>")).into(),
        );
    };

    let image = ewf_image::Image::open(&image_path)?;
    let Some(root) = image.root_file_entry() else {
        println!("no logical single-file catalog");
        return Ok(());
    };

    print_entry(root, 0);
    Ok(())
}

fn print_entry(entry: &ewf_image::SingleFileEntry, depth: usize) {
    let indent = "  ".repeat(depth);
    let name = entry.name().unwrap_or("<root>");
    let size = entry.size().unwrap_or(0);
    let entry_type = entry.entry_type();

    println!("{indent}{name} {entry_type:?} {size} bytes");

    for child in &entry.children {
        print_entry(child, depth + 1);
    }
}