Doing a Reverse Hex Dump
June 2nd, 2008 by Mitch Frazier in
If you work with the command line you've most likely used hexdump or od to dump binary files, but what do you do if you have a hex dump of something and you want to create the binary version of the data? Assuming your needs aren't too complex, the answer may be xxd. You can use xxd to dump binary files just like hexdump and od, but you can also use it to do the reverse: turn a hex dump back into binary.
If you run xxd with just a file name it dumps the data in a fairly standard hex dump format:
# xxd bdata 0000000: 0001 0203 0405 ......Now if you pipe the output back to xxd with the -r option and redirect that to a new file, you can convert the hex dump back to binary:
# xxd bdata | xxd -r >bdata2 # cmp bdata bdata2 # xxd bdata2 0000000: 0001 0203 0405 ......Note that when doing reverse conversions with xxd, the data needs to look like a hex dump: there needs to be an offset and the data needs to be formatted correctly. So, for example, this works:
# echo 01: 01 02 03 04 | xxd -r >outputbut this does not because the data is not formatted correctly:
# echo 01: 1 2 3 4 | xxd -r >output
As a more concrete example, I recently had a need to create a Motorola S-Record file containing a MAC Address. First thing I needed was a way to create a binary file with the MAC Address so that I could use objcopy to convert it to an S-Record file. A bit of pondering produced no good ideas. Linux and its brethren have a lot of command line utilities for manipulating text but not many for manipulating binary data. Of course, I could have written a C program to create the binary file or to create the S-Record file itself, but that seemed a bit much considering I was only talking about 6 bytes of data.
After a fair bit of searching the net I came across xxd. In OpenSuSE xxd is part of the vim-base package. I'm not sure if that's where it is in all distros, since it doesn't seem to have any relationship to vim.
The script takes a MAC Address and outputs S-Record data:
# sh macid.sh 00:11:22:33:44:55 S00D0000333737382D322E746D703B S1090000001122334455F7 S9030000FCOptionally, you can specify an address for re-basing the S-Record file and an output file name:
# sh macid.sh --address 0xffff0000 --output ma 00:11:22:33:44:55 # cat ma S00D0000333733302D322E746D7047 S30BFFFF0000001122334455F7 S705FFFF0000FCSee the entire script is here __________________________
Mitch Frazier is an Associate Editor for Linux Journal and the Web Editor for linuxjournal.com.
Special Magazine Offer -- Free Gift with Subscription
Receive a free digital copy of Linux Journal's System Administration Special Edition as well as instant online access to current and past issues. CLICK HERE for offer
Linux Journal: delivering readers the advice and inspiration they need to get the most out of their Linux systems since 1994.
Subscribe now!
The Latest
Newsletter
Tech Tip Videos
- Jul-01-09
- Jun-29-09
Recently Popular
From the Magazine
July 2009, #183
News Flash: Linux Kernel 3.0 to include an on-the-go Expresso machine interface! Ok, maybe not, but Linux is definitely going mobile, from phones to e-readers. Find out more inside about Android, the Kindle 2, the Western Digital MyBook II, The Bug, and Indamixx (a portable recording studio). And if you've gone mobile and you been wanting more Emacs in your life then check out Conkeror.
To compliment the mobile we've got the stationary: parsing command line options with getopt, checking your Ruby code with metric_fu, and building a secure Squid proxy. How is this stationary you ask? What can we say? It's not. We just wanted to see if anybody actually read this part of the page :) .
All this and more, and all you have to do is get your hot sweaty hands on the latest copy of Linux Journal.
Delicious
Digg
StumbleUpon
Reddit
Facebook








Wow
On June 5th, 2008 Alexander Janssen (not verified) says:
Mitch, I'm deeply impressed. I'm just wondering how I could have live without that tool? I remember several cases when I needed to do exactly that thing and I always ended up writing a program of some sort which was dumped afterwards...
Very cool!
Alex.
Post new comment