mirror of
https://git.code.sf.net/p/ntfs-3g/ntfs-3g.git
synced 2024-12-04 15:34:28 +08:00
146 lines
3.0 KiB
Groff
146 lines
3.0 KiB
Groff
.\" -*- nroff -*-
|
|
.\" Copyright (c) 2003 Richard Russon. All Rights Reserved.
|
|
.\" This file may be copied under the terms of the GNU Public License.
|
|
.\"
|
|
.TH NTFSCAT 8 "October 2003" "ntfsprogs version @VERSION@"
|
|
.SH NAME
|
|
ntfscat \- concatenate files and print them on the standard output
|
|
.SH SYNOPSIS
|
|
.B ntfscat
|
|
[
|
|
.I options
|
|
]
|
|
.B device file
|
|
.SH DESCRIPTION
|
|
.B ntfscat
|
|
will read a file from an NTFS volume and display the contents on the standard output.
|
|
.PP
|
|
The case of the filename passed to
|
|
.B ntfscat
|
|
is ignored.
|
|
.SH OPTIONS
|
|
Below is a summary of all the options that
|
|
.B ntfscat
|
|
accepts. All options have two equivalent names. The short name is preceded by
|
|
.BR \-
|
|
and the long name is preceded by
|
|
.BR \-\- .
|
|
Any single letter options, that don't take an argument, can be combined into a
|
|
single command, e.g.
|
|
.BR \-fv
|
|
is equivalent to
|
|
.BR "\-f \-v" .
|
|
Long named options can be abbreviated to any unique prefix of their name.
|
|
.TP
|
|
.B "\-a " desc
|
|
.br
|
|
.ns
|
|
.TP
|
|
.B "\-\-attribute " desc
|
|
Display the contents of a particular attribute. By default, the unname $DATA
|
|
attribute will be shown. The attribute can be specified by number (in decimal
|
|
or hexadecimal), or by name.
|
|
.TS
|
|
lB lB lB
|
|
l l l.
|
|
Hex Decimal Name
|
|
0x10 16 "$STANDARD_INFORMATION",
|
|
0x20 32 "$ATTRIBUTE_LIST",
|
|
0x30 48 "$FILE_NAME",
|
|
0x40 64 "$OBJECT_ID",
|
|
0x50 80 "$SECURITY_DESCRIPTOR",
|
|
0x60 96 "$VOLUME_NAME",
|
|
0x70 112 "$VOLUME_INFORMATION",
|
|
0x80 128 "$DATA",
|
|
0x90 144 "$INDEX_ROOT",
|
|
0xA0 160 "$INDEX_ALLOCATION",
|
|
0xB0 176 "$BITMAP",
|
|
0xC0 192 "$REPARSE_POINT",
|
|
0xD0 208 "$EA_INFORMATION",
|
|
0xE0 224 "$EA",
|
|
0xF0 240 "$PROPERTY_SET",
|
|
0x100 256 "$LOGGED_UTILITY_STREAM",
|
|
.TE
|
|
.br
|
|
.B Notes
|
|
.br
|
|
The attribute names may be given without the leading $ symbol.
|
|
.br
|
|
If you use the $ symbol, you must escape it from the shell.
|
|
.TP
|
|
.B "\-i " num
|
|
.br
|
|
.ns
|
|
.TP
|
|
.B "\-\-inode " num
|
|
Specify a file by its inode number instead of its name.
|
|
.TP
|
|
.B \-h
|
|
.br
|
|
.ns
|
|
.TP
|
|
.B \-\-help
|
|
Show a list of options with a brief description of each one.
|
|
.TP
|
|
.B \-q
|
|
.br
|
|
.ns
|
|
.TP
|
|
.B \-\-quiet
|
|
Suppress some debug/warning/error messages.
|
|
.TP
|
|
.B \-V
|
|
.br
|
|
.ns
|
|
.TP
|
|
.B \-\-version
|
|
Show the version number, copyright and license
|
|
.BR ntfscat .
|
|
.TP
|
|
.B \-v
|
|
.br
|
|
.ns
|
|
.TP
|
|
.B \-\-verbose
|
|
Display more debug/warning/error messages.
|
|
.SH EXAMPLES
|
|
Display the contents of a file in the root of an NTFS volume.
|
|
.RS
|
|
.sp
|
|
.B ntfscat /dev/hda1 boot.ini
|
|
.sp
|
|
.RE
|
|
Display the contents of a file in a subdirectory of an NTFS volume.
|
|
.RS
|
|
.sp
|
|
.B ntfscat /dev/hda1 /winnt/system32/drivers/etc/hosts
|
|
.RE
|
|
.sp
|
|
Display the contents of the $INDEX_ROOT attribute of the root directory (inode
|
|
5).
|
|
.RS
|
|
.sp
|
|
.B ntfscat /dev/hda1 \-a INDEX_ROOT \-i 5 | hexdump \-C
|
|
.RE
|
|
.SH BUGS
|
|
.B ntfscat
|
|
was written in a short time, to get something "out there". It needs a lot more work.
|
|
If you find any bugs, please send an email to
|
|
.nh
|
|
<linux-ntfs-dev@lists.sourceforge.net>
|
|
.hy
|
|
.SH AUTHOR
|
|
.B ntfscat
|
|
was written by Richard Russon (FlatCap)
|
|
.SH AVAILABILITY
|
|
.B ntfscat
|
|
is part of the ntfsprogs package and is available from
|
|
.br
|
|
.nh
|
|
http://linux\-ntfs.sourceforge.net/downloads.html
|
|
.hy
|
|
.SH SEE ALSO
|
|
.BR ntfsls (8),
|
|
.BR ntfsprogs (8)
|
|
|