I have three binary files (memory dumps). Call them file1
, file2
, file3
.
I'm trying to debug some software, and I'm toggling a switch.
file1
= switch offfile2
= switch onfile3
= switch off
I need to know which bytes changed between file1
and file2
, which then also changed back to the same values (as file1
) in file3
.
There are a lot of unrelated changes between file1
, file2
so that diff
alone is not enough for me to determine what is changing when I toggle this switch, I'm trying to identify the unique bytes of entropy that change from file1
,2
,3
,…
I know there are tools such as xxd
, diff
, vimdiff
, colordiff
. I'm just not sure how best to use them for this problem.
diff
alone is not enough" – General note: tools that work with text (lines) cannot handle binary (i.e. non-text) input nicely. Even if they can in some cases, their output may not be what you expect.