|-o sector_offset||Sector offset for a partition in the image or device to compare with.|
|-n start_inum||Starting inum for a directory in the image to start the comparison at.|
|-v||verbose output to stderr|
|-f fstype||Specify the file system type. Use -f list to list the supported file system types. If not given, autodetection methods are used.|
|-i imgtype||The format of the image file, such as raw. Use -i list to list the supported types. If not given, autodetection methods are used.|
|-b dev_sector_size||The size (in bytes) of the device sectors. If not given, autodetection methods are used.|
The disk or partition image to read, whose format is given with -i.
Multiple image file names can be given if the image is split into multiple segments.
If only one image file is given, and its name is the first in a sequence (e.g., as indicated by ending in .001), subsequent image segments will be included automatically.
To compare the directories in image.dd to those in directory:
# tsk_comparedir ./image.dd ./directory
Brian Carrier <carrier at sleuthkit dot org>
Send documentation updates to <doc-updates at sleuthkit dot org>