Linux command
dump.exfat 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
Example
dump.exfat [/dev/sdXY]
Example
dump.exfat -d [/path/to/file] [/dev/sdXY]
Scan
dump.exfat -s [/] -r [/dev/sdXY]
Example
dump.exfat -d [/path/to/file] -c [/dev/sdXY]
Example
dump.exfat -V
说明
dump.exfat displays detailed on-disk structural information for exFAT (Extended File Allocation Table) filesystems. It reads and presents filesystem metadata including boot sector parameters, FAT (File Allocation Table) region layout, cluster sizes, volume serial numbers, and other low-level details. The tool is primarily used for forensic analysis, debugging filesystem issues, and understanding exFAT structure. It reveals information like volume label, filesystem version, bytes per sector, sectors per cluster, FAT offset and length, cluster heap offset, and root directory location. exFAT is commonly used on flash media (SD cards, USB drives) and external drives due to its support for large files and broad compatibility across Windows, macOS, and Linux. dump.exfat helps diagnose corruption, verify filesystem parameters, and analyze how data is organized on the storage device. The tool operates as a read-only utility and does not modify the filesystem. For accurate results, the filesystem should ideally be unmounted, though read-only access to mounted filesystems is possible.
参数
- -V
- Print version and exit.
- -d, --dentry-set=_path_
- Print directory entry information for a given path on the device.
- -s, --scan-dir=_dir-path_
- Scan and print directory entry information from a given path.
- -r, --recursive
- Scan directory entries recursively. Only works with -s.
- -c, --cluster-chain
- Print cluster chain information alongside directory entries. Only works with -d or -s.
FAQ
What is the dump.exfat command used for?
dump.exfat displays detailed on-disk structural information for exFAT (Extended File Allocation Table) filesystems. It reads and presents filesystem metadata including boot sector parameters, FAT (File Allocation Table) region layout, cluster sizes, volume serial numbers, and other low-level details. The tool is primarily used for forensic analysis, debugging filesystem issues, and understanding exFAT structure. It reveals information like volume label, filesystem version, bytes per sector, sectors per cluster, FAT offset and length, cluster heap offset, and root directory location. exFAT is commonly used on flash media (SD cards, USB drives) and external drives due to its support for large files and broad compatibility across Windows, macOS, and Linux. dump.exfat helps diagnose corruption, verify filesystem parameters, and analyze how data is organized on the storage device. The tool operates as a read-only utility and does not modify the filesystem. For accurate results, the filesystem should ideally be unmounted, though read-only access to mounted filesystems is possible.
How do I run a basic dump.exfat example?
Run `dump.exfat [/dev/sdXY]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -V do in dump.exfat?
Print version and exit.