El comando od en Linux: volcar archivos en formato octal y hexadecimal

Introduction to command od

The commandod(octal dump) is a standard Linux tool that allows you to flip the content of any file in different numerical representations, the most used being the octal and the hexadecimal. Its name comes from octal dump, although over time it has acquired the ability to display data in hexadecimal, decimal, ASCII characters and more. This utility is essential for programmers, system administrators and security analysts who need to inspect binary data, verify file integrity or debug applications at a low level.

Basic syntax

The simplest way to useodis to specify the file to be examined and, optionally, the output format. The general syntax is:

od [opciones] archivo

If no file is indicated,odRead from the standard input, which allows you to combine it with pipes and other commands.

Flying in octal format

By default,odshows the data in octal of two bytes per word (format-oor simply without options). Each line starts with the offset address in octal followed by groups of octal values.

Basic example:

od -o archivo.bin

This will produce an output where each number represents three bits, useful when you need to inspect file permissions or data structures that line up at three bit limits.

Failed in hexadecimal format

To obtain a hexadecimal representation, the option is used-x(two bytes hexadecimal) or-X(four bytes hexadecimal). This format is the most common in debugging because it matches the way most hexadecimal editors show the data.

Example:

od -x archivo.bin

Each line shows the offset in octal (default) followed by hexadecimal values of 16 bits. If the offset is preferred to also appear in hexadecimal, it can be added-A x.

Other useful formats

In addition to octal and hexadecimal,odsupports several formats that can be adapted to different needs:

-b: shows each byte as a three-digit octal number.
-c: interprets the data as ASCII characters, showing non-printable characters as exhaust codes.
-d: decimal turn of two bytes per word.
-f: interprets data as simple precision floating point numbers.
-t tipo: allows to specify a custom format by means of specifications such asa(named characters),c(characters),d(decimal),o(octal),x(hexadecimal) andu(decimal without sign).

Practical examples

Suppose we want to examine the first 20 bytes of an executable file to identify your magic (the number that identifies the file type). We can combineodwithheador use the option-jto jump an offset and-Nto limit the amount of bytes:

od -x -j 0 -N 20 /bin/bash

This command shows the first 20 bytes in hexadecimal format, facilitating comparison with the ELF header (7f 45 4c 46).

Another typical case is to verify that a text file does not contain unexpected control characters. Using-cWe can see any line jump or tabulation:

od -c archivo.txt | head -5

If we need a continuous view without offset addresses, the option-A ndeletes the offset, leaving only the data turned over:

od -t x1 -A n archivo.bin | tr -d ' '

The previous command flies each byte as a hexadecimal of a byte (t x1) and eliminates the spaces, producing a continuous chain useful for scripts.

Combining`od`with other tools

Thanks to its ability to read from the standard input,odis easily integrated into more complex workflows. For example, to generate a hash summary of the data in octal we can do:

cat archivo.bin | od -o | sha256sum

Or, to compare two files at binary level and see where they differ, you can use:

diff <(od -x archivo1.bin) <(od -x archivo2.bin)

These combinations take advantage of the power of the Linux command line for deep analysis without the need for specialized software.

Tips and good practices

Always specify the format explicitly with-tif clarity is essential; thus it avoids confusion between the default offset and the data.
Use-vto show identical lines that would otherwise be compressed with an asterisk.
When working with very large files, limit the output with-Norhead/tailto avoid saturation of the terminal.
Remember that the offset is shown in octal by default; change the base with-A d(decimal),-A o(octal) or-A x(hexadecimal) as it is more comfortable.

History and evolution of command od

The command od was born in the first Unix systems as part of the set of utilities to manipulate and examine data in octal format, which was the default representation on many machines at that time. Over the years, it was added options to support other formats, reflecting the growing need of programmers to work with hexadecimal and floating-point values. Today, od is included in the choreutils package of virtually all Linux distributions and maintains back compatibility with inherited scripts while still relevant to modern forensic analysis and debugging tasks.

Its simple design and focus on text output make it ideal for use in environments where graphic interfaces are not available, such as remote servers or embedded systems.

Conclusion

The commandodis a versatile and powerful tool to inspect the binary content of any Linux file. Its ability to turn data into octal, hexadecimal, decimal and character format makes it an essential ally for developers, administrators and command line enthusiasts. Dominating your options and knowing how to combine it with other utilities allows for detailed analysis, problem-cleansing and better understanding of the internal functioning of systems and applications.