ntfsinfo8
Dump a file's attributes
Usage
ntfsinfo [options]
device
Overview
ntfsinfo will dump the attributes of inode inode-number or the file path-filename and/or information about the mft ( -m option). Run ntfsinfo without arguments for a full list of options.
Options
Below is a summary of all the options that ntfsinfo accepts. Nearly all options have two equivalent names. The short name is preceded by - and the long name is preceded by --. Any single letter options, that don't take an argument, can be combined into a single command, e.g. -fv is equivalent to -f -v. Long named options can be abbreviated to any unique prefix of their name.
-
-F, --file FILE -
Show information about this file
-
-f, --force -
This will override some sensible defaults, such as not overwriting an existing file. Use this option with caution.
-
-h, --help -
Show a list of options with a brief description of each one.
-
-i, --inode NUM -
Show information about this inode.
-
-m, --mft -
Show information about the volume.
-
-q, --quiet -
Produce less output.
-
-t, --notime -
Do not display timestamps in the output.
-
-v, --verbose -
Increase the amount of output that
ntfsinfoprints.
-
-V, --version -
Show the version number, copyright and license.
Releases
12 releases since Debian 3.1 (Sarge); the text changed 8 times.
--file since Debian 4.0 (Etch);
--force since Debian 4.0 (Etch);
--help since Debian 4.0 (Etch);
--inode since Debian 4.0 (Etch);
--mft since Debian 4.0 (Etch);
--notime since Debian 4.0 (Etch);
--quiet since Debian 4.0 (Etch);
--verbose since Debian 4.0 (Etch);
--version since Debian 4.0 (Etch);
-F since Debian 4.0 (Etch);
-V since Debian 4.0 (Etch);
-f since Debian 4.0 (Etch);
-h since Debian 4.0 (Etch);
-i since Debian 4.0 (Etch);
-m since Debian 4.0 (Etch);
-q since Debian 4.0 (Etch);
-t since Debian 4.0 (Etch);
-v since Debian 4.0 (Etch).