2015-07-10 19:31:35 +02:00
|
|
|
|
XXD(1) General Commands Manual XXD(1)
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
NAME
|
2023-09-27 23:33:39 +02:00
|
|
|
|
xxd - make a hex dump or do the reverse.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
SYNOPSIS
|
|
|
|
|
xxd -h[elp]
|
|
|
|
|
xxd [options] [infile [outfile]]
|
|
|
|
|
xxd -r[evert] [options] [infile [outfile]]
|
|
|
|
|
|
|
|
|
|
DESCRIPTION
|
2004-12-09 21:34:53 +00:00
|
|
|
|
xxd creates a hex dump of a given file or standard input. It can also
|
|
|
|
|
convert a hex dump back to its original binary form. Like uuencode(1)
|
|
|
|
|
and uudecode(1) it allows the transmission of binary data in a `mail-
|
2015-07-10 19:31:35 +02:00
|
|
|
|
safe' ASCII representation, but has the advantage of decoding to stan‐
|
2004-12-09 21:34:53 +00:00
|
|
|
|
dard output. Moreover, it can be used to perform binary file patching.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
OPTIONS
|
2015-07-10 19:31:35 +02:00
|
|
|
|
If no infile is given, standard input is read. If infile is specified
|
|
|
|
|
as a `-' character, then input is taken from standard input. If no
|
2004-12-09 21:34:53 +00:00
|
|
|
|
outfile is given (or a `-' character is in its place), results are sent
|
|
|
|
|
to standard output.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Note that a "lazy" parser is used which does not check for more than
|
|
|
|
|
the first option letter, unless the option is followed by a parameter.
|
|
|
|
|
Spaces between a single option letter and its parameter are optional.
|
2004-12-09 21:34:53 +00:00
|
|
|
|
Parameters to options can be specified in decimal, hexadecimal or octal
|
|
|
|
|
notation. Thus -c8, -c 8, -c 010 and -cols 8 are all equivalent.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-a | -autoskip
|
2023-09-27 23:33:39 +02:00
|
|
|
|
Toggle autoskip: A single '*' replaces NUL-lines. Default off.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-b | -bits
|
2023-09-27 23:33:39 +02:00
|
|
|
|
Switch to bits (binary digits) dump, rather than hex dump. This
|
2024-09-15 20:03:05 +02:00
|
|
|
|
option writes octets as eight digits "1"s and "0"s instead of a
|
|
|
|
|
normal hexadecimal dump. Each line is preceded by a line number
|
|
|
|
|
in hexadecimal and followed by an ASCII (or EBCDIC) representa‐
|
|
|
|
|
tion. The command line switch -p does not work with this mode.
|
|
|
|
|
Can be combined with -i.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-c cols | -cols cols
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Format <cols> octets per line. Default 16 (-i: 12, -ps: 30, -b:
|
|
|
|
|
6). Max 256. No maximum for -ps. With -ps, 0 results in one
|
2022-01-14 11:58:48 +00:00
|
|
|
|
long line of output.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2018-04-03 14:21:16 +02:00
|
|
|
|
-C | -capitalize
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Capitalize variable names in C include file style, when using
|
2018-04-03 14:21:16 +02:00
|
|
|
|
-i.
|
|
|
|
|
|
2024-05-10 14:17:26 +02:00
|
|
|
|
-d show offset in decimal instead of hex.
|
|
|
|
|
|
2004-06-13 20:20:40 +00:00
|
|
|
|
-E | -EBCDIC
|
2004-12-09 21:34:53 +00:00
|
|
|
|
Change the character encoding in the righthand column from ASCII
|
|
|
|
|
to EBCDIC. This does not change the hexadecimal representation.
|
|
|
|
|
The option is meaningless in combinations with -r, -p or -i.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2024-09-15 20:03:05 +02:00
|
|
|
|
-e Switch to little-endian hex dump. This option treats byte
|
2023-09-27 23:33:39 +02:00
|
|
|
|
groups as words in little-endian byte order. The default group‐
|
|
|
|
|
ing of 4 bytes may be changed using -g. This option only ap‐
|
|
|
|
|
plies to the hex dump, leaving the ASCII (or EBCDIC) representa‐
|
2024-09-15 20:03:05 +02:00
|
|
|
|
tion unchanged. The command line switches -r, -p, -i do not
|
2023-09-27 23:33:39 +02:00
|
|
|
|
work with this mode.
|
2015-07-10 19:31:35 +02:00
|
|
|
|
|
2004-06-13 20:20:40 +00:00
|
|
|
|
-g bytes | -groupsize bytes
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Separate the output of every <bytes> bytes (two hex characters
|
2023-09-27 23:33:39 +02:00
|
|
|
|
or eight bit digits each) by a whitespace. Specify -g 0 to sup‐
|
2015-07-10 19:31:35 +02:00
|
|
|
|
press grouping. <Bytes> defaults to 2 in normal mode, 4 in lit‐
|
2024-09-15 20:03:05 +02:00
|
|
|
|
tle-endian mode and 1 in bits mode. Grouping does not apply to
|
2023-09-27 23:33:39 +02:00
|
|
|
|
PostScript or include style.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-h | -help
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Print a summary of available commands and exit. No hex dumping
|
2004-12-09 21:34:53 +00:00
|
|
|
|
is performed.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-i | -include
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Output in C include file style. A complete static array defini‐
|
|
|
|
|
tion is written (named after the input file), unless xxd reads
|
|
|
|
|
from stdin. Can be combined with -b.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-l len | -len len
|
2018-04-03 14:21:16 +02:00
|
|
|
|
Stop after writing <len> octets.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2022-07-01 18:45:04 +01:00
|
|
|
|
-n name | -name name
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Override the variable name output when -i is used. The array is
|
2022-07-01 18:45:04 +01:00
|
|
|
|
named name and the length is named name_len.
|
|
|
|
|
|
2015-07-10 19:31:35 +02:00
|
|
|
|
-o offset
|
2018-04-03 14:21:16 +02:00
|
|
|
|
Add <offset> to the displayed file position.
|
2015-07-10 19:31:35 +02:00
|
|
|
|
|
2004-06-13 20:20:40 +00:00
|
|
|
|
-p | -ps | -postscript | -plain
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Output in PostScript continuous hex dump style. Also known as
|
2023-09-27 23:33:39 +02:00
|
|
|
|
plain hex dump style.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-r | -revert
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Reverse operation: convert (or patch) hex dump into binary. If
|
|
|
|
|
not writing to stdout, xxd writes into its output file without
|
2015-07-10 19:31:35 +02:00
|
|
|
|
truncating it. Use the combination -r -p to read plain hexadeci‐
|
|
|
|
|
mal dumps without line number information and without a particu‐
|
2023-09-27 23:33:39 +02:00
|
|
|
|
lar column layout. Additional whitespace and line breaks are al‐
|
2024-05-10 14:17:26 +02:00
|
|
|
|
lowed anywhere. Use the combination -r -b to read a bits dump
|
2023-10-06 19:51:13 +02:00
|
|
|
|
instead of a hex dump.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2023-09-27 23:33:39 +02:00
|
|
|
|
-R when
|
2024-05-10 14:17:26 +02:00
|
|
|
|
In the output the hex-value and the value are both colored with
|
|
|
|
|
the same color depending on the hex-value. Mostly helping to
|
|
|
|
|
differentiate printable and non-printable characters. when is
|
|
|
|
|
never, always, or auto (default: auto). When the $NO_COLOR en‐
|
|
|
|
|
vironment variable is set, colorization will be disabled.
|
2023-09-27 23:33:39 +02:00
|
|
|
|
|
2004-06-13 20:20:40 +00:00
|
|
|
|
-seek offset
|
2005-03-18 20:30:32 +00:00
|
|
|
|
When used after -r: revert with <offset> added to file positions
|
2023-09-27 23:33:39 +02:00
|
|
|
|
found in hex dump.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-s [+][-]seek
|
2018-04-03 14:21:16 +02:00
|
|
|
|
Start at <seek> bytes abs. (or rel.) infile offset. + indicates
|
2024-05-10 14:17:26 +02:00
|
|
|
|
that the seek is relative to the current stdin file position
|
2007-05-05 18:27:07 +00:00
|
|
|
|
(meaningless when not reading from stdin). - indicates that the
|
2024-09-15 20:03:05 +02:00
|
|
|
|
seek should be that many characters from the end of the input
|
2007-05-05 18:27:07 +00:00
|
|
|
|
(or if combined with +: before the current stdin file position).
|
|
|
|
|
Without -s option, xxd starts at the current file position.
|
2004-12-09 21:34:53 +00:00
|
|
|
|
|
2023-09-27 23:33:39 +02:00
|
|
|
|
-u Use upper-case hex letters. Default is lower-case.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
-v | -version
|
2018-04-03 14:21:16 +02:00
|
|
|
|
Show version string.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
CAVEATS
|
2024-05-10 14:17:26 +02:00
|
|
|
|
xxd -r has some built-in magic while evaluating line number informa‐
|
|
|
|
|
tion. If the output file is seekable, then the line numbers at the
|
|
|
|
|
start of each hex dump line may be out of order, lines may be missing,
|
|
|
|
|
or overlapping. In these cases xxd will lseek(2) to the next position.
|
|
|
|
|
If the output file is not seekable, only gaps are allowed, which will
|
2023-09-27 23:33:39 +02:00
|
|
|
|
be filled by null-bytes.
|
2004-12-09 21:34:53 +00:00
|
|
|
|
|
|
|
|
|
xxd -r never generates parse errors. Garbage is silently skipped.
|
|
|
|
|
|
2023-09-27 23:33:39 +02:00
|
|
|
|
When editing hex dumps, please note that xxd -r skips everything on the
|
2004-12-09 21:34:53 +00:00
|
|
|
|
input line after reading enough columns of hexadecimal data (see option
|
2024-05-10 14:17:26 +02:00
|
|
|
|
-c). This also means that changes to the printable ASCII (or EBCDIC)
|
2023-09-27 23:33:39 +02:00
|
|
|
|
columns are always ignored. Reverting a plain (or PostScript) style hex
|
2024-09-15 20:03:05 +02:00
|
|
|
|
dump with xxd -r -p does not depend on the correct number of columns.
|
2023-09-27 23:33:39 +02:00
|
|
|
|
Here, anything that looks like a pair of hex digits is interpreted.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
Note the difference between
|
|
|
|
|
% xxd -i file
|
|
|
|
|
and
|
|
|
|
|
% xxd -i < file
|
|
|
|
|
|
2024-09-15 20:03:05 +02:00
|
|
|
|
xxd -s +seek may be different from xxd -s seek, as lseek(2) is used to
|
2004-12-09 21:34:53 +00:00
|
|
|
|
"rewind" input. A '+' makes a difference if the input source is stdin,
|
2024-05-10 14:17:26 +02:00
|
|
|
|
and if stdin's file position is not at the start of the file by the
|
|
|
|
|
time xxd is started and given its input. The following examples may
|
2023-09-27 23:33:39 +02:00
|
|
|
|
help to clarify (or further confuse!):
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2024-05-10 14:17:26 +02:00
|
|
|
|
Rewind stdin before reading; needed because the `cat' has already read
|
2004-12-09 21:34:53 +00:00
|
|
|
|
to the end of stdin.
|
2006-03-27 17:01:56 +00:00
|
|
|
|
% sh -c "cat > plain_copy; xxd -s 0 > hex_copy" < file
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2024-05-10 14:17:26 +02:00
|
|
|
|
Hex dump from file position 0x480 (=1024+128) onwards. The `+' sign
|
2004-12-09 21:34:53 +00:00
|
|
|
|
means "relative to the current position", thus the `128' adds to the 1k
|
|
|
|
|
where dd left off.
|
2024-09-15 20:03:05 +02:00
|
|
|
|
% sh -c "dd of=plain_snippet bs=1k count=1; xxd -s +128 > hex_snippet"
|
2004-12-09 21:34:53 +00:00
|
|
|
|
< file
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2023-09-27 23:33:39 +02:00
|
|
|
|
Hex dump from file position 0x100 (=1024-768) onwards.
|
2006-03-27 17:01:56 +00:00
|
|
|
|
% sh -c "dd of=plain_snippet bs=1k count=1; xxd -s +-768 > hex_snippet"
|
2004-12-09 21:34:53 +00:00
|
|
|
|
< file
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2024-05-10 14:17:26 +02:00
|
|
|
|
However, this is a rare situation and the use of `+' is rarely needed.
|
|
|
|
|
The author prefers to monitor the effect of xxd with strace(1) or
|
2004-12-09 21:34:53 +00:00
|
|
|
|
truss(1), whenever -s is used.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
EXAMPLES
|
2006-03-27 17:01:56 +00:00
|
|
|
|
Print everything but the first three lines (hex 0x30 bytes) of file.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
% xxd -s 0x30 file
|
|
|
|
|
|
2006-03-27 17:01:56 +00:00
|
|
|
|
Print 3 lines (hex 0x30 bytes) from the end of file.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
% xxd -s -0x30 file
|
|
|
|
|
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Note: The results of the examples below are relevant to the xxd.1 man
|
2024-08-15 21:39:33 +02:00
|
|
|
|
page as of May 2024
|
|
|
|
|
|
2023-09-27 23:33:39 +02:00
|
|
|
|
Print 120 bytes as a continuous hex dump with 20 octets per line.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
% xxd -l 120 -ps -c 20 xxd.1
|
2024-08-15 21:39:33 +02:00
|
|
|
|
2e544820585844203120224d6179203230323422
|
|
|
|
|
20224d616e75616c207061676520666f72207878
|
|
|
|
|
64220a2e5c220a2e5c222032317374204d617920
|
|
|
|
|
313939360a2e5c22204d616e2070616765206175
|
|
|
|
|
74686f723a0a2e5c2220202020546f6e79204e75
|
|
|
|
|
67656e74203c746f6e79407363746e7567656e2e
|
2004-12-09 21:34:53 +00:00
|
|
|
|
|
2023-09-27 23:33:39 +02:00
|
|
|
|
Hex dump the first 120 bytes of this man page with 12 octets per line.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
% xxd -l 120 -c 12 xxd.1
|
2024-08-15 21:39:33 +02:00
|
|
|
|
00000000: 2e54 4820 5858 4420 3120 224d .TH XXD 1 "M
|
|
|
|
|
0000000c: 6179 2032 3032 3422 2022 4d61 ay 2024" "Ma
|
|
|
|
|
00000018: 6e75 616c 2070 6167 6520 666f nual page fo
|
|
|
|
|
00000024: 7220 7878 6422 0a2e 5c22 0a2e r xxd"..\"..
|
|
|
|
|
00000030: 5c22 2032 3173 7420 4d61 7920 \" 21st May
|
|
|
|
|
0000003c: 3139 3936 0a2e 5c22 204d 616e 1996..\" Man
|
|
|
|
|
00000048: 2070 6167 6520 6175 7468 6f72 page author
|
|
|
|
|
00000054: 3a0a 2e5c 2220 2020 2054 6f6e :..\" Ton
|
|
|
|
|
00000060: 7920 4e75 6765 6e74 203c 746f y Nugent <to
|
|
|
|
|
0000006c: 6e79 4073 6374 6e75 6765 6e2e ny@sctnugen.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
Display just the date from the file xxd.1
|
2024-08-15 21:39:33 +02:00
|
|
|
|
% xxd -s 0x33 -l 13 -c 13 xxd.1
|
2024-08-16 21:03:58 +02:00
|
|
|
|
00000033: 3231 7374 204d 6179 2031 3939 36 21st May 1996
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2004-12-09 21:34:53 +00:00
|
|
|
|
Copy input_file to output_file and prepend 100 bytes of value 0x00.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
% xxd input_file | xxd -r -s 100 > output_file
|
|
|
|
|
|
|
|
|
|
Patch the date in the file xxd.1
|
2024-08-15 21:39:33 +02:00
|
|
|
|
% echo "0000034: 3574 68" | xxd -r - xxd.1
|
|
|
|
|
% xxd -s 0x33 -l 13 -c 13 xxd.1
|
2024-08-16 21:03:58 +02:00
|
|
|
|
00000033: 3235 7468 204d 6179 2031 3939 36 25th May 1996
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2024-09-15 20:03:05 +02:00
|
|
|
|
Create a 65537 byte file with all bytes 0x00, except for the last one
|
2004-12-09 21:34:53 +00:00
|
|
|
|
which is 'A' (hex 0x41).
|
2006-03-27 17:01:56 +00:00
|
|
|
|
% echo "010000: 41" | xxd -r > file
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2023-09-27 23:33:39 +02:00
|
|
|
|
Hex dump this file with autoskip.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
% xxd -a -c 12 file
|
2024-08-16 21:03:58 +02:00
|
|
|
|
00000000: 0000 0000 0000 0000 0000 0000 ............
|
2004-06-13 20:20:40 +00:00
|
|
|
|
*
|
2024-08-16 21:03:58 +02:00
|
|
|
|
0000fffc: 0000 0000 41 ....A
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2022-07-01 18:45:04 +01:00
|
|
|
|
Create a 1 byte file containing a single 'A' character. The number af‐
|
2024-05-10 14:17:26 +02:00
|
|
|
|
ter '-r -s' adds to the line numbers found in the file; in effect, the
|
2004-12-09 21:34:53 +00:00
|
|
|
|
leading bytes are suppressed.
|
2006-03-27 17:01:56 +00:00
|
|
|
|
% echo "010000: 41" | xxd -r -s -0x10000 > file
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2024-05-10 14:17:26 +02:00
|
|
|
|
Use xxd as a filter within an editor such as vim(1) to hex dump a re‐
|
2023-09-27 23:33:39 +02:00
|
|
|
|
gion marked between `a' and `z'.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
:'a,'z!xxd
|
|
|
|
|
|
2004-12-09 21:34:53 +00:00
|
|
|
|
Use xxd as a filter within an editor such as vim(1) to recover a binary
|
2023-09-27 23:33:39 +02:00
|
|
|
|
hex dump marked between `a' and `z'.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
:'a,'z!xxd -r
|
|
|
|
|
|
2004-12-09 21:34:53 +00:00
|
|
|
|
Use xxd as a filter within an editor such as vim(1) to recover one line
|
2023-09-27 23:33:39 +02:00
|
|
|
|
of a hex dump. Move the cursor over the line and type:
|
2004-06-13 20:20:40 +00:00
|
|
|
|
!!xxd -r
|
|
|
|
|
|
|
|
|
|
Read single characters from a serial line
|
|
|
|
|
% xxd -c1 < /dev/term/b &
|
|
|
|
|
% stty < /dev/term/b -echo -opost -isig -icanon min 1
|
|
|
|
|
% echo -n foo > /dev/term/b
|
|
|
|
|
|
|
|
|
|
RETURN VALUES
|
|
|
|
|
The following error values are returned:
|
|
|
|
|
|
|
|
|
|
0 no errors encountered.
|
|
|
|
|
|
2023-09-27 23:33:39 +02:00
|
|
|
|
-1 operation not supported (xxd -r -i still impossible).
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
1 error while parsing options.
|
|
|
|
|
|
|
|
|
|
2 problems with input file.
|
|
|
|
|
|
|
|
|
|
3 problems with output file.
|
|
|
|
|
|
|
|
|
|
4,5 desired seek position is unreachable.
|
|
|
|
|
|
|
|
|
|
SEE ALSO
|
|
|
|
|
uuencode(1), uudecode(1), patch(1)
|
|
|
|
|
|
|
|
|
|
WARNINGS
|
2023-09-27 23:33:39 +02:00
|
|
|
|
The tool's weirdness matches its creator's brain. Use entirely at your
|
2004-12-09 21:34:53 +00:00
|
|
|
|
own risk. Copy files. Trace it. Become a wizard.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
VERSION
|
2024-08-15 21:39:33 +02:00
|
|
|
|
This manual page documents xxd version 1.7 from 2024-05.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
|
|
|
|
AUTHOR
|
|
|
|
|
(c) 1990-1997 by Juergen Weigert
|
|
|
|
|
<jnweiger@informatik.uni-erlangen.de>
|
|
|
|
|
|
|
|
|
|
Distribute freely and credit me,
|
|
|
|
|
make money and share with me,
|
|
|
|
|
lose money and don't ask me.
|
|
|
|
|
|
|
|
|
|
Manual page started by Tony Nugent
|
|
|
|
|
<tony@sctnugen.ppp.gu.edu.au> <T.Nugent@sct.gu.edu.au>
|
2004-12-09 21:34:53 +00:00
|
|
|
|
Small changes by Bram Moolenaar. Edited by Juergen Weigert.
|
2004-06-13 20:20:40 +00:00
|
|
|
|
|
2024-08-15 21:39:33 +02:00
|
|
|
|
Manual page for xxd May 2024 XXD(1)
|