NAME

hashdig-filter.pl - Filter filenames by directory type

SYNOPSIS

hashdig-filter.pl [-p prefix] file [file ...]

DESCRIPTION

This utility filters filenames by directory type. Input is expected to be one or more files created by hashdig-bind(1). Output is written to a set of files, in the current working directory, having the following format:

    category|hash|name

The naming convention for output files is:

    <filename>.{bin|dev|etc|lib|kernel|man|other}

Any input that does not match one of the defined filters is written to the 'other' file.

OPTIONS

-p prefix: Specifies a prefix to prepend to each directory type. A prefix is useful when subject filenames are not rooted at "/". This could happen, for example, when backups are restored to a temporary work area or a subject's root file system is mounted on a forensic workstation. Trailing slashes are automatically pruned from the supplied prefix.

CAVEATS

Currently, this program is only useful for filtering UNIX filenames.

AUTHOR

Klayton Monroe

LICENSE

All documentation and code are distributed under same terms and conditions as FTimes.