1. NAME

ntfscluster - identify files in a specified region of an NTFS volume.

2. SYNOPSIS

ntfscluster [options] device

3. DESCRIPTION

ntfscluster has three modes of operation: info , sectorand cluster .

3.1. Info

The default mode, infois currently not implemented. It will display general information about the NTFS volume when it is working.

3.2. Sector

The sectormode will display a list of files that have data in the specified range of sectors.

3.3. Cluster

The clustermode will display a list of files that have data in the specified range of clusters. When the cluster size is one sector, this will be equivalent to the sectormode of operation.

4. OPTIONS

Below is a summary of all the options that

ntfscluster accepts. Nearly all options have two equivalent names. The short name is preceded by

- and the long name is preceded by

R -- . Any single letter options, that don't take an argument, can be combined into a single command, e.g.

-fv is equivalent to

R Long named options can be abbreviated to any unique prefix of their name.

  • -c, --cluster RANGE
        Any files whose data is in this range of clusters will be displayed.
  • -F, --filename NAME
        Show information about this file.
  • -f, --force
        This will override some sensible defaults, such as not working with a mounted volume. Use this option with caution.
  • -h, --help
        Show a list of options with a brief description of each one.
  • -I, --inode NUM
        Show information about this inode.
  • -i, --info
        This option is not yet implemented.
  • -q, --quiet
        Reduce the amount of output to a minimum. Naturally, it doesn't make sense to combine this option with
  • -s, --sector RANGE
        Any files whose data is in this range of sectors will be displayed.
  • -v, --verbose
        Increase the amount of output that

ntfscluster prints.

  • -V, --version
        Show the version number, copyright and license for

R ntfscluster .

5. EXAMPLES

Get some information about the volume /dev/hda1.

ntfscluster /dev/hda1

Look for files in the first 500 clusters of /dev/hda1.

ntfscluster -c 0-500 /dev/hda1

6. BUGS

The infomode isn't implemented yet.

ntfscluster is quite limited, but it has no known bugs. If you find a bug please send an email describing the problem to the development team:

7. AUTHORS

ntfscluster was written by Richard Russon, with contributions from Anton Altaparmakov.

8. AVAILABILITY

ntfscluster is part of the

ntfsprogs package and is available from:
http://www.linux-ntfs.org/content/view/19/37

The manual pages are available online at:
http://man.linux-ntfs.org/

9. SEE ALSO

R ntfsinfo (8),

R ntfsprogs (8)