ntfscluster [options] device
ntfscluster has three modes of operation: info, sector and cluster.
The default mode, info is currently not implemented. It will display general information about the NTFS volume when it is working.
The sector mode will display a list of files that have data in the specified range of sectors.
Below is a summary of all the options that ntfscluster accepts. Nearly all options have two equivalent names. The short name is preceded by - and the long name is preceded by --. Any single letter options, that don't take an argument, can be combined into a single command, e.g. -fv is equivalent to -f -v. Long named options can be abbreviated to any unique prefix of their name.
Get some information about the volume /dev/hda1.
ntfscluster -c 0-500 /dev/hda1
The info mode isn't implemented yet. ntfscluster is quite limited, but it has no known bugs. If you find a bug please send an email describing the problem to the development team: email@example.com
ntfscluster was written by Richard Russon, with contributions from Anton Altaparmakov. It was ported to ntfs-3g by Erik Larsson.
ntfscluster is part of the ntfs-3g package and is available from: http://www.tuxera.com/community/