198 lines
5.9 KiB
HTML
198 lines
5.9 KiB
HTML
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<HTML><HEAD><TITLE>Man page of NTFSCAT</TITLE>
|
|
</HEAD><BODY>
|
|
<H1>NTFSCAT</H1>
|
|
Section: Maintenance Commands (8)<BR>Updated: September 2007<BR><A HREF="#index">Index</A>
|
|
<A HREF="/cgi-bin/man/man2html">Return to Main Contents</A><HR>
|
|
|
|
<A NAME="lbAB"> </A>
|
|
<H2>NAME</H2>
|
|
|
|
ntfscat - print NTFS files and streams on the standard output
|
|
<A NAME="lbAC"> </A>
|
|
<H2>SYNOPSIS</H2>
|
|
|
|
[<I>options</I>] <I>device </I>[<I>file</I>]
|
|
<A NAME="lbAD"> </A>
|
|
<H2>DESCRIPTION</H2>
|
|
|
|
<B>ntfscat</B>
|
|
|
|
will read a file or stream from an NTFS volume and display the contents
|
|
on the standard output.
|
|
<P>
|
|
|
|
The case of the filename passed to
|
|
<B>ntfscat</B>
|
|
|
|
is ignored.
|
|
<A NAME="lbAE"> </A>
|
|
<H2>OPTIONS</H2>
|
|
|
|
Below is a summary of all the options that
|
|
<B>ntfscat</B>
|
|
|
|
accepts. Nearly all options have two equivalent names. The short name is
|
|
preceded by
|
|
<B>-</B>
|
|
|
|
and the long name is preceded by
|
|
<B>--</B>.
|
|
|
|
Any single letter options, that don't take an argument, can be combined into a
|
|
single command, e.g.
|
|
<B>-fv</B>
|
|
|
|
is equivalent to
|
|
<B>-f -v</B>.
|
|
|
|
Long named options can be abbreviated to any unique prefix of their name.
|
|
<DL COMPACT>
|
|
<DT id="1"><B>-a</B>, <B>--attribute</B> TYPE<DD>
|
|
Display the contents of a particular attribute type. By default, the unnamed
|
|
$DATA attribute will be shown. The attribute can be specified by a number
|
|
in decimal or hexadecimal, or by name.
|
|
<TABLE BORDER><TR><TD><TABLE>
|
|
<TR VALIGN=top><TD><B>Hex</B></TD><TD><B>Decimal</B></TD><TD><B>Name</B><BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x10</TD><TD>16</TD><TD>"$STANDARD_INFORMATION"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x20</TD><TD>32</TD><TD>"$ATTRIBUTE_LIST"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x30</TD><TD>48</TD><TD>"$FILE_NAME"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x40</TD><TD>64</TD><TD>"$OBJECT_ID"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x50</TD><TD>80</TD><TD>"$SECURITY_DESCRIPTOR"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x60</TD><TD>96</TD><TD>"$VOLUME_NAME"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x70</TD><TD>112</TD><TD>"$VOLUME_INFORMATION"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x80</TD><TD>128</TD><TD>"$DATA"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x90</TD><TD>144</TD><TD>"$INDEX_ROOT"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0xA0</TD><TD>160</TD><TD>"$INDEX_ALLOCATION"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0xB0</TD><TD>176</TD><TD>"$BITMAP"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0xC0</TD><TD>192</TD><TD>"$REPARSE_POINT"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0xD0</TD><TD>208</TD><TD>"$EA_INFORMATION"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0xE0</TD><TD>224</TD><TD>"$EA"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0xF0</TD><TD>240</TD><TD>"$PROPERTY_SET"<BR></TD></TR>
|
|
<TR VALIGN=top><TD>0x100</TD><TD>256</TD><TD>"$LOGGED_UTILITY_STREAM"<BR></TD></TR>
|
|
</TABLE></TABLE>
|
|
|
|
<P>
|
|
<P>
|
|
<B>Notes</B>
|
|
|
|
The attribute names may be given without the leading $ symbol.
|
|
<BR>
|
|
|
|
If you use the $ symbol, you must quote the name to prevent the shell
|
|
interpreting the name.
|
|
<DT id="2"><B>-n</B>, <B>--attribute-name</B> NAME<DD>
|
|
Display this named attribute, stream.
|
|
<DT id="3"><B>-i</B>, <B>--inode</B> NUM<DD>
|
|
Specify a file by its inode number instead of its name.
|
|
<DT id="4"><B>-f</B>, <B>--force</B><DD>
|
|
This will override some sensible defaults, such as not using a mounted volume.
|
|
Use this option with caution.
|
|
<DT id="5"><B>-h</B>, <B>--help</B><DD>
|
|
Show a list of options with a brief description of each one.
|
|
<DT id="6"><B>-q</B>, <B>--quiet</B><DD>
|
|
Suppress some debug/warning/error messages.
|
|
<DT id="7"><B>-V</B>, <B>--version</B><DD>
|
|
Show the version number, copyright and license
|
|
<B>ntfscat</B>.
|
|
|
|
<DT id="8"><B>-v</B>, <B>--verbose</B><DD>
|
|
Display more debug/warning/error messages.
|
|
</DL>
|
|
<A NAME="lbAF"> </A>
|
|
<H2>EXAMPLES</H2>
|
|
|
|
Display the contents of a file in the root of an NTFS volume.
|
|
<DL COMPACT><DT id="9"><DD>
|
|
<P>
|
|
<B>ntfscat /dev/hda1 boot.ini</B>
|
|
|
|
<P>
|
|
</DL>
|
|
|
|
Display the contents of a file in a subdirectory of an NTFS volume.
|
|
<DL COMPACT><DT id="10"><DD>
|
|
<P>
|
|
<B>ntfscat /dev/hda1 /winnt/system32/drivers/etc/hosts</B>
|
|
|
|
<P>
|
|
</DL>
|
|
|
|
Display the contents of the $INDEX_ROOT attribute of the root directory (inode
|
|
5).
|
|
<DL COMPACT><DT id="11"><DD>
|
|
<P>
|
|
<B>ntfscat /dev/hda1 -a INDEX_ROOT -i 5 | hexdump -C</B>
|
|
|
|
<P>
|
|
</DL>
|
|
|
|
<A NAME="lbAG"> </A>
|
|
<H2>BUGS</H2>
|
|
|
|
There are no known problems with
|
|
<B>ntfscat</B>.
|
|
|
|
If you find a bug please send an email describing the problem to the
|
|
development team:
|
|
<BR>
|
|
|
|
|
|
<A HREF="mailto:ntfs-3g-devel@lists.sf.net">ntfs-3g-devel@lists.sf.net</A>
|
|
|
|
<A NAME="lbAH"> </A>
|
|
<H2>AUTHORS</H2>
|
|
|
|
<B>ntfscat</B>
|
|
|
|
was written by Richard Russon, Anton Altaparmakov and Szabolcs Szakacsits.
|
|
It was ported to ntfs-3g by Erik Larsson.
|
|
<A NAME="lbAI"> </A>
|
|
<H2>AVAILABILITY</H2>
|
|
|
|
<B>ntfscat</B>
|
|
|
|
is part of the
|
|
<B>ntfs-3g</B>
|
|
|
|
package and is available from:
|
|
<BR>
|
|
|
|
|
|
<A HREF="http://www.tuxera.com/community/">http://www.tuxera.com/community/</A>
|
|
|
|
<A NAME="lbAJ"> </A>
|
|
<H2>SEE ALSO</H2>
|
|
|
|
Read <B><A HREF="/cgi-bin/man/man2html?8+libntfs">libntfs</A></B>(8) for details how to access encrypted files.
|
|
<P>
|
|
<B><A HREF="/cgi-bin/man/man2html?8+libntfs">libntfs</A></B>(8),
|
|
|
|
<B><A HREF="/cgi-bin/man/man2html?8+ntfsls">ntfsls</A></B>(8),
|
|
|
|
<B><A HREF="/cgi-bin/man/man2html?8+ntfsprogs">ntfsprogs</A></B>(8)
|
|
|
|
<P>
|
|
|
|
<HR>
|
|
<A NAME="index"> </A><H2>Index</H2>
|
|
<DL>
|
|
<DT id="12"><A HREF="#lbAB">NAME</A><DD>
|
|
<DT id="13"><A HREF="#lbAC">SYNOPSIS</A><DD>
|
|
<DT id="14"><A HREF="#lbAD">DESCRIPTION</A><DD>
|
|
<DT id="15"><A HREF="#lbAE">OPTIONS</A><DD>
|
|
<DT id="16"><A HREF="#lbAF">EXAMPLES</A><DD>
|
|
<DT id="17"><A HREF="#lbAG">BUGS</A><DD>
|
|
<DT id="18"><A HREF="#lbAH">AUTHORS</A><DD>
|
|
<DT id="19"><A HREF="#lbAI">AVAILABILITY</A><DD>
|
|
<DT id="20"><A HREF="#lbAJ">SEE ALSO</A><DD>
|
|
</DL>
|
|
<HR>
|
|
This document was created by
|
|
<A HREF="/cgi-bin/man/man2html">man2html</A>,
|
|
using the manual pages.<BR>
|
|
Time: 00:06:14 GMT, March 31, 2021
|
|
</BODY>
|
|
</HTML>
|