Table of Contents

Name

ntfscat - concatenate files and print them on the standard output

Synopsis

ntfscat [ options ] device file

Description

ntfscat will read a file from an NTFS volume and display the contents on the standard output.

The case of the filename passed to ntfscat is ignored.

Options

Below is a summary of all the options that ntfscat accepts. All options have two equivalent names. The short name is preceded by - and the long name is preceded by --. Any single letter options, that don’t take an argument, can be combined into a single command, e.g. -fv is equivalent to -f -v. Long named options can be abbreviated to any unique prefix of their name.
-f

--force
This will override some sensible defaults, such as not working with a mounted volume. Use this option with caution.
-h

--help
Show a list of options with a brief description of each one.
-q

--quiet
Suppress some debug/warning/error messages.
-V

--version
Show the version number, copyright and license ntfscat.
-v

--vebose
Display more debug/warning/error messages.

Examples

Display the contents of a file in the root of an NTFS volume.

ntfscat /dev/hda1 boot.ini

Display the contents of a file in a subdirectory of an NTFS volume.

ntfscat /dev/hda1 /winnt/system32/drivers/etc/hosts

Bugs

ntfscat was written in a short time, to get something "out there". It needs a lot more work. If you find any bugs, please send an email to <linux-ntfs-dev@lists.sourceforge.net>

Author

ntfscat was written by Richard Russon (FlatCap) <ntfs@flatcap.org>
If you find this tool useful, make FlatCap happy and send him an email.

Availability

ntfscat is part of the ntfsprogs package and is available from
http://linux-ntfs.sourceforge.net/downloads.html

See Also

ntfsls(8) , ntfsprogs(8)


Table of Contents