Fedora 15 hex editor

hemantnavarkar · #1 10th October 2011, 07:27 PM

Hi all,
i eagly want to study different file syaems for linux.i want o undersand how data is stored in file system in linux and how it is interpreted back.so i want to know that Is Their any tool available in fedora using which i can able to see linux file system ie either EXT3 or EXT4 in Hexadecimal Format.Give me sol...
Thanks To all

pete_1967 · #2 10th October 2011, 08:15 PM

Install hex editor of your choice. Several available in repositories.

RupertPupkin · #3 11th October 2011, 03:34 AM

You could also use emacs as a hex editor if you already have that installed. Just open a binary file in emacs then do Alt-x hex-mode.

lsatenstein · #4 11th October 2011, 02:42 PM

When you say file system, I presume you mean the contents of a file. If it is truly the contents of a file system, you could use the DD command to copy a partition to a sequential file, and then subsequently use hexdump or hexedit to view the contents of the partition image, which is of course, the file system.

Use a small partition that you create for this learning purpose.

hemantnavarkar · #5 13th October 2011, 03:20 PM

Thanks to all of u ......

PabloTwo · #6 13th October 2011, 04:46 PM

Hexedit can view/edit directly from a block device as well as from a file. I just tried this and it works.

Code:

Description : Hexedit shows a file both in ASCII and in hexadecimal. The file can be a device
            : as the file is read a piece at a time. Hexedit can be used to modify the file
            : and search through it.

rmferris · #7 18th October 2011, 02:42 AM

Quote:

Originally Posted by RupertPupkin

You could also use emacs as a hex editor if you already have that installed. Just open a binary file in emacs then do Alt-x hex-mode.

Ohhhh I don't think my fingers could handle it.

hemantnavarkar · #8 16th February 2012, 10:45 AM

Hi all,

I have a pendrive which having FAT32 file system previously.now what i did i open the pendrive in hex editor.i found that root directory contain entries about

myfiles.and it having high order cluster byte set to some value . now i traverse the file system with corresponing cluster no. by conveting it in offset value .i found the data of my file at the corresponding offset.

Now what i do i format the pendrive . due to formatting the pendrive the high cluster byte of corresponding file in root directory set to 0,so i am unable to traverse data. of file.

is their any solution so that i can found my data...............