|
| (Documentation for the EXPERT Edit menu) |
|
|
|
|
| (to DFSee main pages) | File | Edit | Actions | Image | View | Scripts | Set | Help | (to BASIC menu) |
| Mode=FDISK | APFS | AUX | DUMPFS | EXTn | EFAT | FAT | HFS+ | HPFS | ISO | JFS | NTFS | REISER | SWAP | XFS |
Activate the BASIC user interface, limited to the most used functions only
This will switch the user interface (Menu and some dialogs) between the
Basic mode with less functionality, intended for less experienced users
and Expert mode where ALL functionality is available.
The startup default (Basic UI mode) can be changed using the
startup '-expert' switch, and can be modified on-the-fly using
the 'SET EXPERT on/off/toggle' command, just as this menu does.
You can put a command like 'set expert ON' in your profile.dfs to
enable EXPERT mode without a startup-switch when starting DFSee.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Edit a partition table in an MBR/EBR sector using the P-Table-Editor dialog
This will start the interactive partition-table editor,
positioned on the starting-partition selected from a list.
It will allow direct updating of the various fields in the table
and update related fields in the same table accordingly.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Selection of this item leads to a dynamic created submenu, to select a partition to be used
Edit LVM information related to disk partitions, LVM-volumes and BMGR-menu
This will start the interactive LVM-information editor,
positioned on the starting-partition selected from a list.
It will allow direct updating of most of the LVM entities:
- volumename
- partitionname
- driveletter
- bootable flag
- installable flag
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Selection of this item leads to a dynamic created submenu, to select a partition to be used
Start interactive sector-editor on the selected file, allow HEX/ASCII edit
This will allow full editing of a (binary) file using a sector
editor interface with an HEX-pair and an ASCII edit area.
The exact size of the file (in bytes) will be preserved,
DELETE or INSERT of data in the file is NOT possible.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Start interactive sector-editor on the current sector, auto view selection
This starts an editor/viewer starting on the current sector
It automatically selects an available view, based on contents:
HEX/ASXCII : Classic 'binary editor' with HEX and ASCII areas
Disassemble: Intel x86 disassembler view, 16, 32 or 64 bit
Ascii-text : Show sector contents filtered for 'printable'
characters only, like Unix 'strings' command.
The sector contents can be modified in the HEX/ASCII view,
the others are for viewing only.
You can switch to other views with <F2>
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Start interactive sector-editor on the current sector, HEX/ASCII view
This will allow full editing of sector values using an interactive
sector editor interface with an HEX-pair and an ASCII edit area.
It is the only view that allows editing, and modifications will
be written back to the opened object (disk, partition, volume)
when moving to other sectors, or on <Enter>.
You can switch to other views with <F2>
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Start interactive sector-editor on the current sector, HEX, 16 bytes per row
This will allow full editing of sector values using an interactive
sector editor interface with an HEX-pair and an ASCII edit area.
It is started with a fixed 16 (0x10) bytes per row, independant
the display size.
You can switch to other views with <F2>
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Start interactive sector-viewer on the current sector, Disassembler view
This will show the current sector as disassembled x86 code.
Full navigation is possible using the cursor and PgUp/PgDn key,
and the disassembler is coupled with the HEX-editor in the
positioning and navigation
You can export the disassembled code to an ASCII file for
further processing.
On exit, the HEX-editor will be positioned on the same location
and the current instruction will be highlighted.
You can switch to other views with <F2>
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Start interactive sector-viewer on the current sector, Text/strings view
This shows the contents of the sector(s) as ASCII text or
strings, filtered for printable characters only.
This is much like the UNIX utility 'strings'
You can switch to other views with <F2>
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Replace data in current sector using HEX/ASCII/UNICODE replacement strings
This will allow partial editing of sector values using dialogs
to specify an edit-offset and a replacement string in HEX, ASCII
or UNICODE to replace the data at the specified offset.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Replace some data in the current sector with supplied offset and HEX pairs
This will allow some direct editing of sector values,
using hexadecimal specified replacement values.
The position in the sector to be updated will be requested,
and the current values for 16 hexadecimal pairs will be
displayed for reference and double-checking.
The replacement value can be typed in in hexadecimal pairs,
and on completion the sector can be written back to the same
or a different sector-number.
Up to a maximum of 120 hexadecimal pairs can be specified.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Replace some data in the current sector with supplied offset and ASCII str
This will allow some direct editing of sector values,
using a plain ASCII specified replacement string.
The position in the sector to be updated will be requested,
and the current string of 16 ASCII characters at that
position are displayed for reference and double-checking.
The replacement value can be typed in as a regular string,
and on completion the sector can be written back to the same
or a different sector-number.
A string of up to 255 characters can be specified.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Replace some data in the current sector with supplied offset and UNICODE str
This will allow some direct editing of sector values,
using a UNICODE specified replacement string.
The position in the sector to be updated will be requested,
and the current string of 8 UNICODE characters at that
position are displayed for reference and double-checking.
The replacement value can be typed in as a regular string,
and on completion the sector can be written back to the same
or a different sector-number.
A string of up to 255 characters can be specified.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Search functions to search (disk) sectors and the output text window
This will allow partial editing of sector values using dialogs
to specify an edit-offset and a replacement string in HEX, ASCII
or UNICODE to replace the data at the specified offset.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Search for Ascii/Unicode/Hex data in all sectors for currently open object
This will search for the specified string in sectors for the
currently opened object, starting at the current sector (this).
You can specify the string to be searched in the FIND dialog.
Many options to change the search criteria can be specified in
that dialog as well. For a more detailed explanation of those
options than available here, check the regular documentation
on the corresponding options for the FIND command (DFSCMDS.TXT)
The string(s) can be specified as ASCII, UNICODE, HEXadecimal or
even a MIX of those by checking the corresponding radiobutton.
The available options with their defaults are:
(*) Ascii or UTF-8 : interpret search string(s) as ASCII or UTF-8
( ) Unicode 16bit : interpret search string(s) as 16-bit UNICODE
( ) Hex pairs : interpret string as (pairs of) HEXADECIMAL data
( ) Mixed string : interpret as 'mixed-string' format, see DOC
[ ] Verbose output : Display each found sector in default format
[x] Show arguments : Display a single line per found sector only
(*) Repeat, 1 hit/sector : Repeat the search, add sectors to list
( ) Repeat multiple hits : Repeat allowing multiple hits per sector
( ) Search once, display : Just search a single time, verbose display
[ ] Case-sensitive match : Require exact case match on primary string
[ ] Search backwards : Search towards LOWER sector numbers
[ ] NOT containing ... : Find sectors NOT containing the string(s)
(*) Search in every sector : Search every sector in opened object
( ) On Cylinder boundaries : Search specific sectors per cylinder
( ) In freespace (undelete) : Search in filesystem freespace only
( ) In allocated (filegrep) : Search in filesystem allocated area
[ ] Start at NEXT/PREV sect : Skip 'this', start at NEXT/PREV sector
[x] No sector span (faster) : Will not find search string(s) that
cross a sector (512 bytes) boundary
[...] StartOffset : Offset from begin of object to start search
mcs-number, default is the current sector
[...] @Position : Position in sector for primary string
[...] Types : Sector types considered (default ALL)
[...] Secondary ... : Secondary search string, AND with 1st
When specifying a StartOffset, the default unit is MEGABYTES!
When using a hexadecimal sectornumber, make sure to include the
'0x' prefix on the mcs-number and the ',s' unit postfix.
For KiB and GiB use the ',k' and ',g' postfix respectively.
When specifying the '@Position' value, only sectors that have the
primary string AT that position in a sector will be considered.
The position is a DECIMAL value in the range 0..511.
When specifying a 'Types' string, only sectors of that type will be
considered in the search, to show available types for the current
filesystem, use the '???' command or Help -> Available sector types
To search for 2 strings (sectors containing string1 AND string2),
you can specify the 2nd search argument, which will have the
same data interpretation (ascii/unicode/hex) as the primary one,
but will always be considered CASE-SENSITIVE!
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Repeat the last search specified through the dialog, exact same arguments
This will repeat the previous search specified in a FIND dialog
using exactly the same search parameters.
When no valid search parameters are available yet, the FIND
dialog will be presented as with a regular FIND action.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Search for sectortype 0, containing 0x00 byte values only, EMPTY sectors
This will search for sectors that contain 0x00 bytes only
so are effectively EMPTY sectors
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Search for sectortype 5, containing 0xFE byte values only, DFSee BAD-SECTOR
This will search for sectors that contain 0xFE bytes only
which are most likely sectors marked by DFSee as BAD
Sector contents 0xFE is created by DFSee when a sector is
not readable (BAD) during a CLONE or IMAGE operation.
The target sector (clone destination, or imagefile) will
be filled with an 0xFE pattern, and this search operation
will locate them, for possible corrective action or repair
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Search for an Ascii phrase in the output text window, highlight search-hit
Search for an Ascii phrase in the output text window, present in result list
Search Output-window for 'Executing:' and show found lines in result list
Force specific Mode=xxx (Fdisk or FS) Can be dangerous, for expert use only!
This allows a specific mode to be forced when automatic setting
of that mode does not work correctly.
This might be needed on damaged or unformatted disks.
Be carefull though using any FIX or other commands that write to
the disk or partition unless you are REALLY sure the selected
mode is the correct one.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Create, update, display, recover or fix partition-tables or LVM information
This is the default operation mode for DFSee and enables commands
and menus that are working at the DISK level (like Fdisk and LVM)
with partitioning, LVM as well as imaging and cloning functions.
FDISK is the classic disk-partitioning tool as used with DOS.
It is used to create primary partitions, extended partitions
and logical volumes in the extended partition.
LVM, the Logical Volume Manager, is an 'FDISK-like' program plus
some related drivers on all OS/2 kernel versions starting at 4.50,
including eComStation. It allows more flexible naming and usage of
partitions and drive-letters, including joining multiple partitions
on more than one disk into a single volume.
DFSee respects the drive-letters as assigned with LVM and has
special display options like the 'PLIST LVM' command in FDISK
mode. Also the 'part' display will show volume and partition
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix the APPLE-FS filesystem, APFS Container disks
This will enable all APFS-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
APFS filesystem
APple File System, new filesystem for Apple products, replacing
the familiar HFS+ filesystem on iOS and macOS.
Introduced around 2017/2018 (macOS High Sierra)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix DUMPFS filesystem, IBM OS2/eCS/BlueLion
This will enable all DUMPFS-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
DUMP FileSystem
A filesystem developed to work around the FAT16 limitations
when storing huge system (crash) dumps exceeding 2Gb
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix Enhanced-FAT filesystems
This will enable all EFAT-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
EFAT filesystem
Enhanced FAT filesystem developed to work around the FAT32
limits when storing large files exceeding 2Gb on SD cards and
other removable media.
The design of the filesystem is also optimized for fast writing
by using a bitmap instead of the FAT datastructure for allocation
and its internal structures are aligned to get maximum performance
when used on solid-state media like SD cards and SSD disks.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix EXT2, EXT3 or EXT4 filesystem, used on Linux
This will enable all EXT2+3-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
The 2nd extended filesystem for Linux is the default FS on almost
all modern Linux distributions. The standard version is EXT2 while
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix FAT12, FAT16 or FAT32 filesystems
This will enable all FAT-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
File Allocation Table, the most important structure in the
classic DOS filesystem that also gave it its name.
It is a table of cluster-numbers that indicates the cluster
that holds the next part of the current file or directory,
or indicates that this was the last cluster.
The first cluster of a file is pointed to by the directory
entry that also has the filename, size and the flags.
This way the location of each cluster of a file can be easily
found by following this 'allocation-chain'.
The size of one entry in this FAT is usually 2 bytes (16bit),
and clusters of maximum 32KiB, resulting in the largest FAT16
filesystem of 2GiB. (4GiB on Win-NT with 64KiB clusters)
On small disks (and diskettes) a 12-bit FAT is used, and for
really large disks the FAT32 filesystem was introduced.
DFSee supports 12, 16 and 32-bit FAT filesystems.
The FAT32 version of the filesystem uses 4-byte = 32-bit FAT
entries. This makes the maximum size of a FAT32 filesystem
nearly unlimited. The FAT structure itself does take up a lot
of space on the disk, and in memory when using the filesystem.
FAT32 was introduced with Windows95, and is also supported on
the other newer Windows versions (98, ME, 2000 and XP).
OS/2 and eCS also support it through the 3rd-party installable
filesystem FAT32.IFS made by Henk Kelder.
The FAT has no redundancy and is sensitive to errors like:
- lost clusters where no directory entry points to the chain
- cross links where two allocation chains point to the same
cluster at some point.
The lack of redundancy also makes it VERY hard to undelete files
in a reliable way. At this point DFSee does NOT support undelete
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix the HFS+, journaled filesystem for the MAC
This will enable all HFS-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
The original HFS was used with the MAC for several years, and was
enhanced with journalling and several other improvements in HFS+
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix HPFS/HPFS386 filesystems (OS2, eCS, BlueLion)
This will enable all HPFS-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
High Performance FileSystem
Offered as a real improvement over the classic FAT filesystems
with the OS/2 and eCS Operating System. Its main advantages are
faster access, more reliable error recovery and better handling
of large disks. There is also a (server) version called HPFS386
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Analyse, display and Browse ISO9660 CDROM, DVD or .iso imagefiles
This will enable all ISO-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
ISO9660 filesystem
The ISO9660 filesystem is used on CDROM, DVD and most .iso imagefiles
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix JFS filesystem, IBM OS2/eCS or Linux flavour
This will enable all JFS-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
Journalling File System
A filesystem originally developed by IBM for the AIX operating
system sharing a lot of features with other UNIX filesystems
and adding journalling on all filesystem metadata operations.
This greatly reduces the time to check and repair any damage
after crashes or other disasters (CHKDSK).
First offered for OS/2 with WSeB and now also available in eCS
and the Convenience Packs 1 & 2 for the desktop.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix NTFS filesystem (Win-NT/2000/XP/7/8/10)
This will enable all NTFS-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
New Technology File System
The new (journalling) filesystem introduced with Windows-NT.
It has many of the same improvements over FAT as HPFS, but has
a totally different internal structure. It also adds security
information and compression and is expandable by defining new
stream-types. Several versions exist that added specific
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix ReiserFS, journaled filesystem on Linux
This will enable all ReiserFS-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
The ReiserFS, designed by Hans Reiser, is one of the newer file
systems used with Linux (and Unix) and is known for high performance.
It implements journalling as well and uses database-like structures.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display a Linux SWAP space area, enabling 'smart' imaging
This will enable all SWAP-specific commands and menus
The main reason for a seperat 'swap' mode is allowing
smart disk imaging and cloning, using the available
logic to skip all SWAP blocks except the first one.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check, analyse, display or fix the XFS, journaled filesystem on Linux
This will enable all XFS-specific commands and menus
Forcing the FS-mode in itself is not dangerous in any case, however,
FS-specific commands like 'fixboot' in an incorrect mode CAN be!
The original XFS design was circulated within SGI in October 1993
as 'xFS: the extension of EFS'. XFS was first released in IRIX 5.3.
The port to Linux began in 1999 against 2.3.40. It was accepted into
the mainline in the 2.5 kernel in 2002, and the 2.4 kernel in 2004.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
Generic analysis and display for any filesystem unknown to DFSee
This will disable all FS-specific commands and menus
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press <F1> again for more help; Some options may require switching to 'Expert mode'
| (to DFSee main pages) | File | Edit | Actions | Image | View | Scripts | Set | Help | (to BASIC menu) |
| Mode=FDISK | APFS | AUX | DUMPFS | EXTn | EFAT | FAT | HFS+ | HPFS | ISO | JFS | NTFS | REISER | SWAP | XFS |
| (Edit page) | DFSee menu documentation for pulldown : Edit |
| Views: 617146 |
|
Created by Jan van Wijk: Aug 2007, last update: 23-Oct-2022 |
|