[SOLVED] Parsing a binary file

RayK · 03-17-2011, 09:07 AM

Is it possible to parse through a binary file using a script using either Korn shell or Bash

TB0ne · 03-17-2011, 09:35 AM

Quote:

Originally Posted by RayK

Is it possible to parse through a binary file using a script using either Korn shell or Bash

No way for anyone to answer this, based on what you ask. What kind of file, and what do you mean by 'parse'??

knudfl · 03-17-2011, 10:16 AM

Looking for an object ?

readelf -s <file> | less
readelf -s <file> | grep <name>

objdump -Dslx <file> | more

Telengard · 03-17-2011, 11:20 AM

Quote:

Originally Posted by RayK

Is it possible to parse through a binary file using a script using either Korn shell or Bash

You haven't given us enough context to answer fully, but I'll take a stab at it.

Code:

~$ file /bin/bash
/bin/bash: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for GNU/Linux 2.6.8, dynamically linked (uses shared libs), stripped
~$ strings /bin/bash | tail
bcoalesce: CHAIN(mp2) != mp1
malloc: %s:%d: assertion botched
free: called with already freed block argument
free: called with unallocated block argument
free: underflow detected; mh_nbytes out of range
free: start and end chunk sizes differ
malloc: block on free list clobbered
realloc: called with unallocated block argument
realloc: underflow detected; mh_nbytes out of range
realloc: start and end chunk sizes differ
~$ hd /bin/bash | tail
000ab640  20 6a 0a 00 64 47 00 00  00 00 00 00 00 00 00 00  | j..dG..........|
000ab650  20 00 00 00 00 00 00 00  cb 00 00 00 08 00 00 00  | ...............|
000ab660  03 00 00 00 a0 41 0f 08  84 b1 0a 00 18 4d 00 00  |.....A.......M..|
000ab670  00 00 00 00 00 00 00 00  20 00 00 00 00 00 00 00  |........ .......|
000ab680  d0 00 00 00 01 00 00 00  00 00 00 00 00 00 00 00  |................|
000ab690  84 b1 0a 00 0c 00 00 00  00 00 00 00 00 00 00 00  |................|
000ab6a0  01 00 00 00 00 00 00 00  01 00 00 00 03 00 00 00  |................|
000ab6b0  00 00 00 00 00 00 00 00  90 b1 0a 00 df 00 00 00  |................|
000ab6c0  00 00 00 00 00 00 00 00  01 00 00 00 00 00 00 00  |................|
000ab6d0
~$

To get more useful responses you should consider the following:

What do you mean by parse?
Are the binary files executables, compressed archives, encoded data, or what?
What do you hope to accomplish in terms of an end goal?
http://www.catb.org/~esr/faqs/smart-questions.html