阅读:683回复:0
u盘数据的分析为何不一致呢?
各位,小弟抓了u盘的几个数据,不知道为什么从各个命令的返回数据中u盘块的数量却不一致,不知道是为什么,请指教!
1.首先是Read Format Capacities命令中返回的数据: 13 DO 55 53 42 43 - e8 52 c5 86 fc 00 00 00 - 80 00 0a 23 00 00 00 00 - 00 00 00 fc 00 00 00 00 - 00 00 00 13 DI 00 00 00 08 - 00 10 00 00 03 00 02 00 13 DI 55 53 42 53 - e8 52 c5 86 f0 00 00 00 - 00 根据UFI协议,从这个地方看出,NUMBER OF BLOCK = 00 10 00 00 2 再看看Read capacity命令中返回的数据 13 DO 55 53 42 43 - c8 8c f5 83 08 00 00 00 - 80 00 0a 25 00 00 00 00 - 00 00 00 00 00 00 00 00 - 00 00 00 13 DI 00 00 fb ff - 00 00 02 00 13 DI 55 53 42 53 - c8 8c f5 83 00 00 00 00 - 00 从这个地方可以看出,last logical block address=00 00 fb ff 3 还有DBR中的数据表明分区的中扇区数是 a0 - fb eb 3c 90 4d - 53 44 4f 53 35 2e 30 00 - 02 01 01 00 02 00 02 a0 - fb f8 fa 3f 00 ff 00 - 20 00 00 00 我想知道,为什么这几个地方的块数都不一样呢? |
|