ntfscat(1m) - osol9

1ntfscat(1M)             System Administration Commands             ntfscat(1M)
2
3
4

NAME

6       ntfscat - display NTFS files and streams on the standard output
7

SYNOPSIS

9       ntfscat [options] device [file]
10
11

DESCRIPTION

13       The ntfscat command reads a file or stream from an NTFS volume and dis‐
14       play the contents on the standard output.
15
16
17       The case of the filename passed to ntfscat is ignored.
18

OPTIONS

20       Supported options are listed below. Most options have both  single-let‐
21       ter  and  full-name  forms.  Multiple single-letter options that do not
22       take an argument can be combined. For example, -fv is the equivalent of
23       -f  -v. A full-name option can be abbreviated to a unique prefix of its
24       name.
25
26       -a, --attribute type
27
28           Display the contents of a particular attribute  type.  By  default,
29           the  unnamed  $DATA  attribute  will be shown. The attribute can be
30           specified by a number in decimal or hexadecimal, or by name.
31
32             Hex     Decimal Name
33             0x10    16      "$STANDARD_INFORMATION"
34             0x20    32      "$ATTRIBUTE_LIST"
35             0x30    48      "$FILE_NAME"
36             0x40    64      "$OBJECT_ID"
37             0x50    80      "$SECURITY_DESCRIPTOR"
38             0x60    96      "$VOLUME_NAME"
39             0x70    112     "$VOLUME_INFORMATION"
40             0x80    128     "$DATA"
41             0x90    144     "$INDEX_ROOT"
42             0xA0    160     "$INDEX_ALLOCATION"
43             0xB0    176     "$BITMAP"
44             0xC0    192     "$REPARSE_POINT"
45             0xD0    208     "$EA_INFORMATION"
46             0xE0    224     "$EA"
47             0xF0    240     "$PROPERTY_SET"
48             0x100   256     "$LOGGED_UTILITY_STREAM"
49
50
51           The attribute names can be specified  without  the  leading  dollar
52           sign  ($)  symbol. If you use the $ symbol, you must quote the name
53           to prevent the shell from interpreting the name.
54
55
56       -f, --force
57
58           Overrides some sensible defaults, such as not using a mounted  vol‐
59           ume. Use this option with caution.
60
61
62       -h, --help
63
64           Show a list of options with a brief description of each.
65
66
67       -i, --inode num
68
69           Specify a file by its inode number instead of its name.
70
71
72       -n, --attribute-name name
73
74           Display the attribute identified by name.
75
76
77       -q, --quiet
78
79           Suppress some debug, warning, and error messages.
80
81
82       -V, --version
83
84           Show the version number, copyright, and license information.
85
86
87       -v, --verbose
88
89           Display more debug, warning, and error messages.
90
91

EXAMPLES

93       Example 1 Displaying Contents of File in Root
94
95
96       The following command displays the contents of a file in the root of an
97       NTFS volume.
98
99
100         # ntfscat /dev/dsk/c0d0p1 boot.ini
101
102
103
104       Example 2 Displaying Contents of File in Subdirectory
105
106
107       The following command displays the contents of a file in a subdirectory
108       of an NTFS volume.
109
110
111         # ntfscat /dev/dsk/c0d0p1 /winnt/system32/drivers/etc/hosts
112
113
114
115       Example 3 Display Contents of an Attribute
116
117
118       The   following  command  displays  the  contents  of  the  $INDEX_ROOT
119       attribute of the root directory (inode 5).
120
121
122         # ntfscat /dev/dsk/c0d0p1 -a INDEX_ROOT -i 5
123
124
125

ATTRIBUTES

127       See attributes(5) for descriptions of the following attributes:
128
129
130
131
132       ┌─────────────────────────────┬─────────────────────────────┐
133       │      ATTRIBUTE TYPE         │      ATTRIBUTE VALUE        │
134       ├─────────────────────────────┼─────────────────────────────┤
135       │Availability                 │SUNWntfsprogs                │
136       ├─────────────────────────────┼─────────────────────────────┤
137       │Interface Stability          │Uncommitted                  │
138       └─────────────────────────────┴─────────────────────────────┘
139

AUTHORS

147       ntfscat was written by Richard Russon, Anton Altaparmakov and  Szabolcs
148       Szakacsits.
149
150
151
152SunOS 5.11                        28 May 2009                      ntfscat(1M)