The following line shows the the four partition table entries of 16 bytes each. See here for a specification of the format.
$ sudo hd ubuntu-16.10-desktop-amd64.iso -s 446 -n 64
000001be 80 00 01 00 00 5e e0 ff 00 00 00 00 00 80 2f 00 |.....^......../.|
000001ce 00 fe ff ff ef fe ff ff 54 24 2f 00 c0 12 00 00 |........T$/.....|
000001de 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
000001fe
The latter three are all zeros, while the first entry is the interesting one. Byte 0 (counting from 0) has value 0x80 which means that it does in fact describe "an active partition". Byte 4 describes the partition type, fx 0x0B is FAT32. However 0 is an invalid value. According to this source:
00 : -- Should NOT be used in an actual table entry! It does not indicate an unknown type, but rather an empty entry; in which case, all other fields in that 16-byte entry should be zero-filled as well.
So according to what I can read, the MBR data is invalid. What is going on?
I did this with Ubuntu 16.04 (Yakkety), downloaded via this link, and the file has md5sum 3f50877c05121f7fd8544bef2d722824.
I don't have much idea about partition systems, but I believe the reason is that it's not a plain MBR filesystem. Using
parted
:Note:
Partition Table: mac
. And the Wikipedia article for Apple Partition Map says:I don't know why
parted
thinks the file is 6GB in size, though. However,file
agrees that there's something involving Apple Partition Map here: