1. NAME▲

ntfscluster - identify files in a specified region of an NTFS volume.

2. SYNOPSIS ▲

ntfscluster [options] device

3. DESCRIPTION ▲

ntfscluster has three modes of operation: info , sectorand cluster .

3.1. Info ▲

The default mode, infois currently not implemented. It will display general information about the NTFS volume when it is working.

3.2. Sector ▲

The sectormode will display a list of files that have data in the specified range of sectors.

3.3. Cluster ▲

The clustermode will display a list of files that have data in the specified range of clusters. When the cluster size is one sector, this will be equivalent to the sectormode of operation.

4. OPTIONS ▲

Below is a summary of all the options that

ntfscluster accepts. Nearly all options have two equivalent names. The short name is preceded by

- and the long name is preceded by

R -- . Any single letter options, that don't take an argument, can be combined into a single command, e.g.

-fv is equivalent to

R Long named options can be abbreviated to any unique prefix of their name.

  • -c, --cluster RANGE
        Any files whose data is in this range of clusters will be displayed.
  • -F, --filename NAME
        Show information about this file.
  • -f, --force
        This will override some sensible defaults, such as not working with a mounted volume. Use this option with caution.
  • -h, --help
        Show a list of options with a brief description of each one.
  • -I, --inode NUM
        Show information about this inode.
  • -i, --info
        This option is not yet implemented.
  • -q, --quiet
        Reduce the amount of output to a minimum. Naturally, it doesn't make sense to combine this option with
  • -s, --sector RANGE
        Any files whose data is in this range of sectors will be displayed.
  • -v, --verbose
        Increase the amount of output that

ntfscluster prints.

  • -V, --version
        Show the version number, copyright and license for

R ntfscluster .

5. EXAMPLES ▲

Get some information about the volume /dev/hda1.

ntfscluster /dev/hda1

Look for files in the first 500 clusters of /dev/hda1.

ntfscluster -c 0-500 /dev/hda1

6. BUGS ▲

The infomode isn't implemented yet.

ntfscluster is quite limited, but it has no known bugs. If you find a bug please send an email describing the problem to the development team:

7. AUTHORS ▲

ntfscluster was written by Richard Russon, with contributions from Anton Altaparmakov.

8. AVAILABILITY ▲

ntfscluster is part of the

ntfsprogs package and is available from:
http://www.linux-ntfs.org/content/view/19/37

The manual pages are available online at:
http://man.linux-ntfs.org/

9. SEE ALSO ▲

R ntfsinfo (8),

R ntfsprogs (8)