On Sat, Jul 23, 2016 at 7:46 PM, Chris Murphy [off-list ref] wrote:
Something like this:
[root@f24s ~]# dd if=/dev/sda | hexdump -C | egrep '5f 42 48 52 66 53 5f'
00110040 5f 42 48 52 66 53 5f 4d 8d 4f 04 00 00 00 00 00 |_BHRfS_M.O......|
Ha so originally I was planning on putting in the dd portion a count
limit, like count=20480 for a 10MiB search from the start of the
drive. You could just do
# hexdump -C /dev/sda | egrep '5f 42 48 52 66 53 5f'
And then control-C to cancel it once the first super shows up.
--
Chris Murphy