hfsdebug: Command Line Options
The following output is also available using hfsdebug --help.
hfsdebug (version 2.0 beta)
Copyright (c) 2004-2005 Amit Singh. All Rights Reserved.
A read-only debugger for HFS Plus filesystem volumes. Usage:
hfsdebug PATH example: hfsdebug /mach_kernel
hfsdebug OPTION ... example: hfsdebug -V /Volumes/Foo -j
In its simplest form, hfsdebug accepts one argument: a path to a file or a
folder about which it prints all information it can retrieve from the "raw"
filesystem. hfsdebug also accepts the following options:
-0, --freespace display all free extents on the volume.
-b BTREE, --btree=BTREE specify an HFS+ B-Tree, where BTREE is one of
"attributes", "catalog", "extent", or "hotfile".
-c CNID, --cnid=CNID specify an HFS+ catalog node ID.
-d DEVICE, --device=DEVICE specify an HFS+ volume's raw device node.
-e, --examples display some usage examples.
-f, --fragmentation display all fragmented files on the volume.
-F, --fsspec=CNID:NAME
specify parent's catalog node ID and a node name.
-h, --help print this help message and exit.
-H, --hotfiles display the hottest files on the volume; requires
the -t (--top=TOP) option for the number to list.
-j, --journal display information about the volume's journal.
-l TYPE, --list=TYPE specify an HFS+ B-Tree's leaf nodes' type, where
TYPE is one of "file", "folder", "filethread", or
"folderthread" (for the Catalog B-Tree); one of
"hfcfile" or "hfcthread" for the Hot Files B-Tree
B-Tree; or "extent" for the Extents B-Tree.
You can use the type "any" if you wish to display
all node types.
-p, --path=PATH specify a file or folder's POSIX path.
-s, --summary calculate and display volume usage summary.
-t, --top=TOP specify the number of most fragmented files
to display (when used with the --fragmentation
option), or the number of largest files to display
(when used with the --summary option).
--version display version information and quit.
-v, --volumeheader display information about the volume's header.
-V VOLUME, --volume=VOLUME specify an HFS+ volume, where VOLUME is its mount
point. VOLUME may also be the path of any file
within the volume.
If you do not specify a volume using the '-V' or the '-d' options, hfsdebug
tries to determine the volume from a PATH specifier, if present, failing which
the root volume is used by default. Note that hfsdebug requires read-only access
to the raw device corresponding to an HFS+ volume, and may need to be run as
the super-user for certain volumes (such as the root volume).
Please report bugs using the following contact information:
<URL:http://www.kernelthread.com/software/hfsdebug/#BUGS>.