![]() |
|
![]() |
(to DFSee main pages) | File | Edit | Actions | Image | View | Scripts | Set | Help | (to BASIC menu) |
Mode=FDISK | APFS | AUX | DUMPFS | EXTn | EFAT | FAT | HFS+ | HPFS | ISO | JFS | NTFS | REISER | SWAP | XFS |
Display a pseudo-graphical map of used versus free sectors in the filesystem
Display a usage map for the currently selected disk or filesystem A pseudo-graphical map of the disk or partition allocation is displayed, showing the distribution of data over the object This is also an indication for the amount of unused sectors in the object, that are beneficial to 'SMART-SECTOR' optimizations in imaging and cloning operations. The percentage of used sectors are displayed as a percentage at the end of the line, and a total usage percentage and size is shown just after the map itself. For filesystems that support resizing, the limits for resizing are shown after the map itself. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find deleted/normal files, list and possibly recover them. HEX edit dir/file
This submenu offers selections to search for normal or deleted files, display the resulting lists and possibly recover files. It also offers selection to HEX-edit either the meta-information for a file (Fnode) or the actual file contents - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find deleted files, then BROWSE the resulting list and copy files (UNDELETE)
This will find most files that have been deleted from a filesystem and store the result in the sector-list. The sectorlist is then used to BROWSE through the find results. The dialog will allow 'actions' to be performed on the listed files/directories, using <ENTER> to get the popup menu: - View contents, as ASCII on File/Dir - View as x86 Assembler - disassembly - HEX-edit, contents only on File/Dir - Edit Contents, autoview on File/Dir - View OS/2 EA or Xattr on a File/Dir - Edit DATA area sectors for File/Dir - Edit META:Inode/Fnode/MFT/Dir-entry - Edit the base filename for File/Dir - Copy/Recover File(s) to other drive - Reduce list to SELECTED files only While deleted files can NOT be recoverd 'in-place' they CAN be copied to another filesystem, in effect UNDELETING them with the 'Copy/Recover' selection from the above menu. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Search for deleted files anywhere (SLOW), 'Recover from list' is UNDELETE
This will search the whole partition for file FNODEs that belong to DELETED files, and that match the start of the filename specified. The sectornumbers of the found FNODEs will be added to the DFSee sectorlist so can be used in later actions, or be exported to a file. The files contained in that list can be RECOVERED to any directory on the system, including a network, by using the 'RECOVER' command. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Search for deleted/non-deleted files anywhere (SLOW), for 'Recover ...'
This will search the whole partition for file FNODEs of non-deleted or deleted files that match the start of the filename specified. The sectornumbers of the found FNODEs will be added to the DFSee sectorlist so can be used in later actions, or be exported to a file. The files contained in that list can be RECOVERED to any directory on the system, including a network, by using the 'RECOVER' command. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Search non-deleted files in existing directories (FAST), for 'Recover ...'
This will search the whole partition for file FNODEs of non-deleted regular files and match the start of the filename specified. The sectornumbers of the found FNODEs will be added to the DFSee sectorlist so can be used in later actions, or be exported to a file. The files contained in that list can be RECOVERED to any directory on the system, including a network, by using the 'RECOVER' command. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Browse files/directories in a list from a single directory, or current list
This will show the contents of a single directory, specified by a PATH from the ROOT directory, or by selecting a directory from the browse list itself (including the '..' directory). Alternatively, the CURRENT contents of the sectorlist can be browsed, when available (by specifying a '.' for the directory The list can be browsed in an interactive dialog, a bit like a regular filemanager. The dialog will allow 'actions' to be performed on the listed files/directories, using <ENTER> to get the popup menu: - View contents, as ASCII on File/Dir - View as x86 Assembler - disassembly - HEX-edit, contents only on File/Dir - Edit Contents, autoview on File/Dir - View OS/2 EA or Xattr on a File/Dir - Edit DATA area sectors for File/Dir - Edit META:Inode/Fnode/MFT/Dir-entry - Edit the base filename for File/Dir - Copy/Recover File(s) to other drive - Reduce list to SELECTED files only When the browse session is ended (<Esc> or <F3> key): - the SAME filesystem/partition stays selected You can restart browse the same partition with the <F9> key, or start browsing another partition from the Actions menu using: 'Actions -> Open Partition, Browse FS' - the sector-list contains the last browsed directory and can be viewed with commands like 'list -f - The last entry (file) that was selected will also be set as the current sector-location ('this'), so it easy to analyse that furthher, for example by using the HEX-editor that can be started with <F2>, or simply by viewing the sector using the <Enter> key. Note: When working in 'mode=FDISK' (with a whole disk opened) you will be presented with a selection-list to pick a partition with a filesystem first. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Display (selected) files from the list, using a PATH+FILENAME wildcard
This will display the DFSee sector-list in a compact format, suited to the data contained in the list This usually is a 'list -f' or a 'list -s' variant. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Recover (selected) files from the list to a supplied recovery directory
This will allow you to recover (copy) one or more of the files in the list to any local or network directory on your system. It will prompt for a destination directory first, using the last used one as a default. All files recovered in one go, will be recovered to this same directory, with their original path appended to retain the directory structure whenever possible. It will also prompt for a selection specification in the form of a full PATH+FILENAME wildcard and an optional allocation-percentage. As an example, the specification: '*mydoc*\*project_x*.doc%100' will recover all files that have 'mydoc' somewhere in the PATH, 'project_x' in the filename and have an extension of '.doc' that seem to be 100% recoverable. (100% allocation-OK ranking). - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Recover the file associated with the CURRENT sector to a recovery directory
This will allow you to recover (copy) the file represented by the CURRENT displayed sector, also called the 'THIS' sector to any local or network directory on your system. It will prompt for a destination directory first, using the last used one as a default. The file will be recovered with its original path appended to that to retain the directory structure whenever possible. The menu item will only be enabled (selectable) when the CURRENT sector represents a normal or deleted FILE for the filesystem involved. This means it has to be a type 'f' or 'z' sector, which is: For HPFS: an FNODE sector For JFS: an INODE sector For NTFS: an MFT record - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find info (FNODE/MFT-record etc) for ONE specified file/directory path
This uses the specified path from the root-directory to locate detailed information for the file or directory for that path. This will be from the FNODE on HPFS, the MFT-record on NTFS or similar structures like Inodes on other filesystrems. The path and filename may contain spaces. When found the information will be displayed in the standard format as defined for the filesystem that is active. You can display related information like the directory entry or the actual file data from there using the U and D commands. You can also use the 'saveto' command or corresponding menu item 'Recover THIS file' to create a copy of this found file on the specified or default recovery destination (or use the combined menu option instead of this find :-) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find ONE file by full path+filename, and recover it to a recovery directory
This uses the specified path starting from the ROOT to locate ONE specific file, and when found will issue a SAVETO command to recover the contents of this file to a recovery directory. The path and filename may contain spaces. Note: The recovered file will be placed directly in the specified recovery directory without the full original path, but with the proper filename retained (even on JFS :-). - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find + edit FAT dir entry / HPFS fnode / JFS inode / NTFS MFTrec+small files
This uses the specified path from the root-directory to locate information for the file or directory for that path. This will be from the FNODE on HPFS, the MFT-record on NTFS or similar structures like Inodes on other filesystrems. The path and filename may contain spaces. When found the information at THAT level (1st, direct) will be opened in the standard HEX editor This will often be META-data about the file or directory, with a layout strongly defined by the filesystem type - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find, then HEX edit most HPFS / JFS / NTFS file-data or directory contents
This uses the specified path from the root-directory to locate information for the file or directory for that path. This will be from the FNODE on HPFS, the MFT-record on NTFS or similar structures like Inodes on other filesystrems. The path and filename may contain spaces. When found the information at the NEXT level (2nd, indirect) will be opened in the standard HEX editor This 'next' level is what would be displayed using a 'd' command or using the ENTER key when the first level is being displayed. It will often be data or contents for the file or directory. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Display/Edit Volume info like label, Serial-nr and dirty/clean status
This submenu offers several selections to Display or Edit Volume properties like label, serial-number and dirty/clean status The label is an 11-character string, present in the bootsector The volume serial number should be a unique value in the system The file system status can be one of: - Clean When it is not in use, proper shutdown - Dirty When in use, and changes have been made In some cases, when CHKDSK fails, you can get (temporary) access by manually setting the FS status to Unmounted-clean and reboot. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Display/Edit the standard 11-character label located in the bootsector
This will present a small dialog to display and/or edit the standard (DIR) label, with a maximum length of 11-characters and located in the BOOTSECTOR This standard label is used to identify the filesystem in commands like DIR and FORMAT NOTE: This will update the ON-DISK label information, which may or may not be directly visible with commands like DIR or the DFSee volume selections lists. It migh require a REBOOT of the system for the new label to be visible everywhere! A DFSee 'part' command (<F5> key) should show it immediately. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Change the volume serial number, making this volume unique (after clone :-)
This will update the 'volume serial number' in the bootsector This could be REQUIRED for some operating systems after cloning a filesystem, to make sure the volume serial numbers are unique. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Update spareblock status flags to indicate filesystem is CLEAN
This will update the fileystem-status field in the HPFS spareblock to indicate that filesystem is CLEAN. This can be useful to avoid an automatic CHKDSK after a system-crash Note: The filesystem itself is NOT cleaned in any way, it is just the statusflag that is modified. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Update spareblock status flags to indicate filesystem is DIRTY
This will update the fileystem-status field in the HPFS spareblock to indicate that filesystem is DIRTY. This can be useful to force a CHKDSK operation on the next boot. Note: The filesystem itself is NOT affected in any other way, it is just the statusflag that is modified. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Fix bootsector, HiddenSectors/GEO, and HPFS LDR imaging and fixing
This submenu offers selections for fixes related to booting like fix the bootsector itself, HPFS LDR image creation and restore and fixing the HiddenSectors and geometry fields in the bootsector - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Fix bootsector; No explicit I13X check, works with bootmanagers like GRUB
This will create a new HPFS bootsector for the partition, based on information from the partition-tables and on information found in the superblock and spareblock for the filesystem. This can be very useful when the bootsector got damaged by a virus or a crashing program (writing to sector 0) or if the partition was deleted by accident using FDISK or LVM and recreated again. There will be NO explicit I13X check in the bootcode, which will allow booting beyond cylinder 1024 even with MBR bootcode that is NOT I13X aware (Windows, Linux) and other bootmanagers than IBM's like Linux GRUB or LILO, Acronis OS selector and many more. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Fix bootsector; Use explicit I13X check, requires I13X capable MBR and BMGR!
This will create a new HPFS bootsector for the partition, based on information from the partition-tables and on information found in the superblock and spareblock for the filesystem. This can be very useful when the bootsector got damaged by a virus or a crashing program (writing to sector 0) or if the partition was deleted by accident using FDISK or LVM and recreated again. There will be an explicit I13X check in the bootcode, which will require an I13X capable MBR (from IBM or DFSee) as well as an I13X capable (IBM) BootManager like the LVM, eCS or DFSee ones. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Wipe the Bootsector, FIRST sector in a filesystem. Remove obsolete FS info
This will wipe the bootsector (first sector) of the selected filesystem or partition. Can be useful to get rid of old formatting infomation that may confuse tools when trying to reformat. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Create compressed imagefile with the HPFS LDR sectors for this partition
This will create a compressed imagefile with the HPFS LDR sectors from the current HPFS partition, to be used later for a restore to a damaged system. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Restore imagefile with a 'known good' HPFS LDR to current partition
This will restore an imagefile with the HPFS LDR sectors to the current HPFS partition. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Fix bootsector HiddenSectors and geometry fields to match partition tables
This will update the 'hidden sectors' field in the bootsector to match the offset to the partition-table the partition is defined in and update the geometry Heads and Sectors field to match the current disk geometry. This could be REQUIRED for some operating systems like OS/2 to accept and mount the partition as a driveletter! - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Reset the bad-sector administration to show ZERO bad-sectors or clusters
This will check for bad-sectors being present in the filesystem and when present, reset to NO bad sectors. FAT: Reset all 'BAD' values in the FAT to FREE EFAT: Reset all 'BAD' values in the FAT to FREE NTFS: Update $BadClus and $BitMap to reset bad-clusters HPFS: Make the bad-sector-list in the spare-block empty This can be very useful after cloning or imaging a partition or disk that includes bad-sectors to a new replacement one. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find and Fix some of the HPFS specific filesystem structures
This submenu offers selections for fixes related to the HPFS filesystem structures like the super and spareblock, codepage information and so on ... - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find the sector containing the FNODE for the root directory
This will search the whole partition until FNODEs are found that can be used to determine the path and location of the HPFS root- directory. This might be useful on heavily damaged HPFS partitions to get access to (part of) the file and directory structures again. The found location will be used by the 'Fix superblock values' menu selection automatically. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Update superblock using found rootdirectory location and partition-info
This will recreate the HPFS superblock using information from the partition-tables and a newly found root-directory. It will try to find the most relevant data-structures referenced from the superblock, and update the checksum value too. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Find the sector containing the codepage information and data
This will search the start of the partition for CODEPAGE information or data sectors This might be useful on heavily damaged HPFS partitions to get correctly interpreted filenames again. The found location will be used by the 'Fix spareblock values' menu selection automatically. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Update spareblock using found codepage LSN and superblock values
This will recreate the HPFS spareblock using information from the partition-tables, the superblock and newly found CODEPAGE info. It will try to find other relevant data-structures referenced from the spareblock, and update the checksum values too. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Make the currently selected PRIMARY the 'active' partition for MBR/BIOS boot
This will make the currently selected PRIMARY partition the ACTIVE one for the disk. There should only be a single active partition on every disk. When the system starts, the BIOS will usually boot from the ACTIVE partition on the first disk. In IBM BMGR/LVM terms the active partition is called STARTABLE. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Delete the currently selected partition from the partition tables
This will delete the partition that is currently selected to be deleted from the partition-tables. This will result in the space occupied by the partition becoming FREESPACE that can be used again to create new partitions. For primary partitions on LVM-systems, the related LVM-information is cleared as well, to avoid consistency problems later when a new partition is created at the same position. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Dump the HPFS super/spare, codepage etc to a file for analysis by support
This will create a binary dump for the start of the filesystem which will include the superblocks, codpage info and more. Quite useful for later analysis, perhaps by DFSee support. The usual IMAGE dialog will be presented, with the startsector and size filled in, as well as a suggested filename. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Display the SUPERBLOCK structure for the currently selected filesystem
This will display the contents of the filesystem superblock in a textual format matching the current filesystem type. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Check filesystem for inconsistencies and errors (Readonly, no fixing!)
This will perform a CHECK of the filesystem, somewhat like the well-known CHKDSK but without automatically fixing anything. The result of the check is a sector-lookup-table (SLT) that contains information about all recognized filesystem areas that are in use. Any error recognized will be flagged in the default display of this SLT that is performed automatically by the CHECK command. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Create Sector Lookup Table (SLT) if needed, display as table or sector info
This submenu allows you to build and inspect a 'Sector lookup Table' or SLT, that collects some info about each identifiable sector range in the currently selected filesystem. The SLT is the basis required to identify specific sectors, showing to what file or FS-metadata it belongs, and for the CHECK command. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Show layout of current object by displaying parts of the Sector Lookup Table
This will display part of the sector-lookup-table (SLT) You wil be presented with an option dialog first, where you specify the desired format and part of the SLT to be displayed. The SLT will be built automatically if not done yet, and it will have been built by any previous CHECK command too. Building the SLT will take place in the background while the dialog can be used freely to specify any options for displaying. After the dialog has been ended, and the SLT is ready, it will be displayed as requested. Typically the SLT will contain at least one entry for every file on the filesystem, so there could be hundreds of thousands lines! - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Show identification for specified (or current) sector, using the SLT
This will display information about the specified sector that is available in the sector lookup table (SLT) The most useful info is the sector referencing this sector, this often leads to showing to which file/directory the sector belongs. The SLT will be generated automatically if not yet available - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Show identification for the last sector used, dictating the minimum FS size
This will display information about the sector that is the last one being used (allocated) in the filesystem, and because of that dictates the MINIMUM size for the filesystem for a RESIZE. The most useful info is the sector referencing this sector, this often leads to showing to which file/directory the sector belongs. The SLT will be generated automatically if not yet available, just as the required allocation information (alloc). - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
Unselect filesystem, reselect the same/first disk; enables Mode=FDISK menu
This will UNSELECT the current object/filesystem, and reselect a whole physical disk, either the same disk as the partition was on, or the first disk present in other cases. This is a quick way to change to 'Mode=FDISK' and work on disk-level issues - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Press <F1> again for more help; Some options may require switching to 'Expert mode'
(to DFSee main pages) | File | Edit | Actions | Image | View | Scripts | Set | Help | (to BASIC menu) |
Mode=FDISK | APFS | AUX | DUMPFS | EXTn | EFAT | FAT | HFS+ | HPFS | ISO | JFS | NTFS | REISER | SWAP | XFS |
(Mode=HPFS page) | DFSee menu documentation for pulldown : Mode=HPFS |
Views: 617146 |
![]() |
Created by Jan van Wijk: Aug 2007, last update: 23-Oct-2022 |
![]() |