{ "mode": "man", "parameter": "ntfscluster", "section": "8", "url": "https://www.chedong.com/phpMan.php/man/ntfscluster/8/json", "generated": "2026-06-15T18:53:27Z", "synopsis": "ntfscluster [options] device", "sections": { "NAME": { "content": "ntfscluster - identify files in a specified region of an NTFS volume.\n", "subsections": [] }, "SYNOPSIS": { "content": "ntfscluster [options] device\n", "subsections": [] }, "DESCRIPTION": { "content": "ntfscluster has three modes of operation: info, sector and cluster.\n", "subsections": [ { "name": "Info", "content": "The default mode, info is currently not implemented. It will display general information\nabout the NTFS volume when it is working.\n" }, { "name": "Sector", "content": "The sector mode will display a list of files that have data in the specified range of sec‐\ntors.\n" }, { "name": "Cluster", "content": "The cluster mode will display a list of files that have data in the specified range of clus‐\nters. When the cluster size is one sector, this will be equivalent to the sector mode of op‐\neration.\n" } ] }, "OPTIONS": { "content": "Below is a summary of all the options that ntfscluster accepts. Nearly all options have two\nequivalent names. The short name is preceded by - and the long name is preceded by --. Any\nsingle letter options, that don't take an argument, can be combined into a single command,\ne.g. -fv is equivalent to -f -v. Long named options can be abbreviated to any unique prefix\nof their name.\n", "subsections": [ { "name": "-c --cluster", "content": "Any files whose data is in this range of clusters will be displayed.\n", "flag": "-c", "long": "--cluster" }, { "name": "-F --filename", "content": "Show information about this file.\n", "flag": "-F", "long": "--filename" }, { "name": "-f --force", "content": "This will override some sensible defaults, such as not working with a mounted volume.\nUse this option with caution.\n", "flag": "-f", "long": "--force" }, { "name": "-h --help", "content": "Show a list of options with a brief description of each one.\n", "flag": "-h", "long": "--help" }, { "name": "-I --inode", "content": "Show information about this inode.\n", "flag": "-I", "long": "--inode" }, { "name": "-i --info", "content": "This option is not yet implemented.\n", "flag": "-i", "long": "--info" }, { "name": "-q --quiet", "content": "Reduce the amount of output to a minimum. Naturally, it doesn't make sense to combine\nthis option with --verbose\n", "flag": "-q", "long": "--quiet" }, { "name": "-s --sector", "content": "Any files whose data is in this range of sectors will be displayed.\n", "flag": "-s", "long": "--sector" }, { "name": "-v --verbose", "content": "Increase the amount of output that ntfscluster prints.\n", "flag": "-v", "long": "--verbose" }, { "name": "-V --version", "content": "Show the version number, copyright and license for ntfscluster.\n", "flag": "-V", "long": "--version" } ] }, "EXAMPLES": { "content": "Get some information about the volume /dev/hda1.\n\nntfscluster /dev/hda1\n\nLook for files in the first 500 clusters of /dev/hda1.\n\nntfscluster -c 0-500 /dev/hda1\n\n", "subsections": [] }, "BUGS": { "content": "The info mode isn't implemented yet. ntfscluster is quite limited, but it has no known bugs.\nIf you find a bug please send an email describing the problem to the development team:\nntfs-3g-devel@lists.sf.net\n", "subsections": [] }, "AUTHORS": { "content": "ntfscluster was written by Richard Russon, with contributions from Anton Altaparmakov. It\nwas ported to ntfs-3g by Erik Larsson.\n", "subsections": [] }, "AVAILABILITY": { "content": "ntfscluster is part of the ntfs-3g package and is available from:\nhttps://github.com/tuxera/ntfs-3g/wiki/\n", "subsections": [] }, "SEE ALSO": { "content": "ntfsinfo(8), ntfsprogs(8)\n\n\n\nntfs-3g 2021.8.22 November 2005 NTFSCLUSTER(8)", "subsections": [] } }, "summary": "ntfscluster - identify files in a specified region of an NTFS volume.", "flags": [ { "flag": "-c", "long": "--cluster", "arg": null, "description": "Any files whose data is in this range of clusters will be displayed." }, { "flag": "-F", "long": "--filename", "arg": null, "description": "Show information about this file." }, { "flag": "-f", "long": "--force", "arg": null, "description": "This will override some sensible defaults, such as not working with a mounted volume. Use this option with caution." }, { "flag": "-h", "long": "--help", "arg": null, "description": "Show a list of options with a brief description of each one." }, { "flag": "-I", "long": "--inode", "arg": null, "description": "Show information about this inode." }, { "flag": "-i", "long": "--info", "arg": null, "description": "This option is not yet implemented." }, { "flag": "-q", "long": "--quiet", "arg": null, "description": "Reduce the amount of output to a minimum. Naturally, it doesn't make sense to combine this option with --verbose" }, { "flag": "-s", "long": "--sector", "arg": null, "description": "Any files whose data is in this range of sectors will be displayed." }, { "flag": "-v", "long": "--verbose", "arg": null, "description": "Increase the amount of output that ntfscluster prints." }, { "flag": "-V", "long": "--version", "arg": null, "description": "Show the version number, copyright and license for ntfscluster." } ], "examples": [ "Get some information about the volume /dev/hda1.", "ntfscluster /dev/hda1", "Look for files in the first 500 clusters of /dev/hda1.", "ntfscluster -c 0-500 /dev/hda1" ], "see_also": [ { "name": "ntfsinfo", "section": "8", "url": "https://www.chedong.com/phpMan.php/man/ntfsinfo/8/json" }, { "name": "ntfsprogs", "section": "8", "url": "https://www.chedong.com/phpMan.php/man/ntfsprogs/8/json" } ] }