1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
.Dd April 14, 2016
.Dt fsntfsinfo
.Os libfsntfs
.Sh NAME
.Nm fsntfsinfo
.Nd determines information about a Windows NT File System (NTFS) volume
.Sh SYNOPSIS
.Nm fsntfsinfo
.Op Fl E Ar mft_entry_index
.Op Fl F Ar file_entry
.Op Fl o Ar offset
.Op Fl hHUvV
.Va Ar source
.Sh DESCRIPTION
.Nm fsntfsinfo
is a utility to determine information about a Windows NT File System (NTFS) volume
.Pp
.Nm fsntfsinfo
is part of the
.Nm libfsntfs
package.
.Nm libfsntfs
is a library to access the Windows NT File System (NTFS) format
.Pp
.Ar source
is the source file.
.Pp
The options are as follows:
.Bl -tag -width Ds
.It Fl a
shows allocation information
.It Fl E Ar mft_entry_index
show information about a specific MFT entry index or "all"
.It Fl F Ar file_entry
show information about a specific file entry path
.It Fl h
shows this help
.It Fl H
shows the file system hierarcy
.It Fl o Ar offset
specify the volume offset
.It Fl U
shows information from the USN change journal ($UsnJrnl)
.It Fl v
verbose output to stderr
.It Fl V
print version
.El
.Sh ENVIRONMENT
None
.Sh FILES
None
.Sh EXAMPLES
.Bd -literal
# fsntfsinfo ntfs-img-kw-1.dd
fsntfsinfo 20160414
Windows NT File System information:
Volume information:
Name : KW-SRCH-1
Version : 3.1
Serial number : ba50ed9250ed5623
Cluster block size : 512
MFT entry size : 1024
Index entry size : 4096
.Ed
.Sh DIAGNOSTICS
Errors, verbose and debug output are printed to stderr when verbose output \-v is enabled.
Verbose and debug output are only printed when enabled at compilation.
.Sh BUGS
Please report bugs of any kind to <joachim.metz@gmail.com> or on the project website:
https://github.com/libyal/libfsntfs/
.Sh AUTHOR
These man pages were written by Joachim Metz.
.Sh COPYRIGHT
Copyright 2010-2016, Joachim Metz <joachim.metz@gmail.com>.
This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
.Sh SEE ALSO
|
