ntfsinfo - dump a file's attributes
ntfsinfo [options] device
ntfsinfo will dump the attributes of inode inode-number or the file path-filename and/or
information about the mft ( -m option). Run ntfsinfo without arguments for a full list of
Below is a summary of all the options that ntfsinfo accepts. Nearly all options have two
equivalent names. The short name is preceded by - and the long name is preceded by --.
Any single letter options, that don't take an argument, can be combined into a single com-
mand, e.g. -fv is equivalent to -f -v. Long named options can be abbreviated to any
unique prefix of their name.
-F, --file FILE
Show information about this file
This will override some sensible defaults, such as not overwriting an existing
file. Use this option with caution.
Show a list of options with a brief description of each one.
-i, --inode NUM
Show information about this inode.
Show information about the volume.
Produce less output.
Do not display timestamps in the output.
Increase the amount of output that ntfsinfo prints.
Show the version number, copyright and license.
There are no known problems with ntfsinfo. If you find a bug please send an email
describing the problem to the development team:
ntfsinfo was written by Matthew J. Fanto, Anton Altaparmakov, Richard Russon, Szabolcs
Szakacsits, Yuval Fledel, Yura Pakhuchiy and Cristian Klein. It was ported to ntfs-3g by
Erik Larsson and Jean-Pierre Andre.
ntfsinfo is part of the ntfs-3g package and is available from:
ntfs-3g 2011.4.12AR.4 April 2006 NTFSINFO(8)