table of contents
fsntfsinfo | LOCAL | fsntfsinfo |
NAME¶
fsntfsinfo
—
determines information about a Windows NT File System
(NTFS) volume
SYNOPSIS¶
fsntfsinfo |
[-B bodyfile]
[-E mft_entry_index]
[-F file_entry]
[-o offset]
[-hHUvV ] source |
DESCRIPTION¶
fsntfsinfo
is a utility to determine
information about a Windows NT File System (NTFS) volume
fsntfsinfo
is part of the
libfsntfs
package. libfsntfs
is a library to access the Windows NT File System (NTFS) format
source is the source file.
The options are as follows:
-a
- shows allocation information
-B
bodyfile- output file system information as a bodyfile
-E
mft_entry_index- show information about a specific MFT entry index or "all"
-F
file_entry- show information about a specific file entry path
-h
- shows this help
-H
- shows the file system hierarcy
-o
offset- specify the volume offset
-U
- shows information from the USN change journal ($UsnJrnl)
-v
- verbose output to stderr
-V
- print version
ENVIRONMENT¶
None
FILES¶
None
EXAMPLES¶
# fsntfsinfo ntfs-img-kw-1.dd fsntfsinfo 20160414 Windows NT File System information: Volume information: Name : KW-SRCH-1 Version : 3.1 Serial number : ba50ed9250ed5623 Cluster block size : 512 MFT entry size : 1024 Index entry size : 4096
DIAGNOSTICS¶
Errors, verbose and debug output are printed to stderr when verbose output -v is enabled. Verbose and debug output are only printed when enabled at compilation.
BUGS¶
Please report bugs of any kind to <joachim.metz@gmail.com> or on the project website: https://github.com/libyal/libfsntfs/
AUTHOR¶
These man pages were written by Joachim Metz.
COPYRIGHT¶
Copyright 2010-2019, Joachim Metz <joachim.metz@gmail.com>. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
SEE ALSO¶
December 27, 2019 | libfsntfs |