NAME¶

fsntfsinfo — determines information about a New Technology File System (NTFS) volume

SYNOPSIS¶

DESCRIPTION¶

fsntfsinfo is a utility to determine information about a New Technology File System (NTFS) volume

fsntfsinfo is part of the libfsntfs package. libfsntfs is a library to access the New Technology File System (NTFS) format

source is the source volume.

The options are as follows:

-B bodyfile

output file system information as a bodyfile

-d

calculate a MD5 hash of a file entry to include in the bodyfile

-E mft_entry_index

show information about a specific MFT entry index or "all"

-F path

show information about a specific file entry path

-h

shows this help

-H

shows the file system hierarchy

-o offset

specify the volume offset in bytes

-U

shows information from the USN change journal ($UsnJrnl)

-v

verbose output to stderr

-V

print version

ENVIRONMENT¶

None

FILES¶

None

EXAMPLES¶

# fsntfsinfo ntfs-img-kw-1.dd
fsntfsinfo 20240521

New Technology File System information:

Volume information:
	Name				: KW-SRCH-1
	Version				: 3.1
	Serial number			: ba50ed9250ed5623
	Cluster block size		: 512
	MFT entry size			: 1024
	Index entry size		: 4096

DIAGNOSTICS¶

Errors, verbose and debug output are printed to stderr when verbose output -v is enabled. Verbose and debug output are only printed when enabled at compilation.

SEE ALSO¶

fsntfsmount(1)

AUTHORS¶

Joachim Metz <joachim.metz@gmail.com>

BUGS¶

Please report bugs of any kind on the project issue tracker: https://github.com/libyal/libfsntfs/issues

COPYRIGHT¶

Copyright (C) 2010-2026, Joachim Metz <joachim.metz@gmail.com>.

This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.