elf(1)

NAME
elf - command-line ELF object file header analyzer

SYNOPSIS
elf -[acdefmnoprstiuvxzAXIHQ] [file]

DESCRIPTION
elf is an ELF header (e_header) statistics tool. It allows you to gather various statistics about a binary's ELF header, elf concentrates on the e_header itself. This allows for some more usability in many instances (be it by an end-user or application).

ELF is the acroynm for "executable and linkable format". It is the standard executable format amongst most modern UNIX and UNIX-like operating systems. For more information consult your local ELF header file (usually /usr/include/elf.h).

For a list of elf's current features, please use the help command in elf.

COMMANDLINE OPTIONS
elf has many command-line options to allow verbose information to be presented based on the values inside a file's ELF header (if existant). -a output ABI of selected ELF object file -c output class-object sizes -d output data encoding type -e output virtual entry point -f output processor specific flags -m output architecture meant for object file -n output program header entry count -o output section header entry size -p output program header offset -r output ELF header size -s output section header offset (in bytes) -t output ELF object file type -i output ELF magic values -u output section header entry count -v output ELF version used in object file -x output section header string index -z output program header entry size -A output all information provided by ELF header -X output any selected information in hex -I output any selected information in decimal (base 10) -H output any selected information in human-centric values (default) Geeks may use above options -Q this sets level of verbosity. The more times repeated, the less verbose output will be

INTERACTIVE MODE OPTIONS
There are many options in elf's interactive mode to show specific information about the ELF header. These options can be listed with the following command: (elf) help info

These are the info Options:

ALL

Show all of the ELF header information.

IDENT

Show ELF header ident.

CLASS

Show class object sizes.

DATA

Show data encoding.

ABI

Show ELF header operating system ABI.

TYPE

Show ELF object file type.

MACHINE

Show ELF object file machine information.

VERSION

Show ELF version of object file.

ENTRY

Show virtual entry point of ELF object file.

PHOFF

Show program header offset.

FLAGS

Show processor specific flags of object file

EHSIZE

Show ELF header size.

PHENTSIZE

Show program entry size.

PHNUM

Show number of program header entries.

SHENTSIZE

Show section header entry size.

SHNUM

Show number of section header entries.

SHSTRNDX

Show section header string table index.

There are also three modifiers that can be used with the above options. They are:

hex

Show the output in hex format.

int

Show the output in integer format.

hum

Show the output in human readable format

SEE ALSO
 as(1), gdb(1), ld(1), execve(2), core(5), elf(5), link(5)

AUTHORS

Samy Al Bahra <samy@kerneled.com>

CONTRIBUTORS
Eirik Nygaard <eirikn@bluezone.no> , Vanya Sergeev

DISTRIBUTION
The latest version of elf can be obtained from

http://www.kerneled.com/projects/elf/index.html Consult the GNU General Public License for more information (it is located in the COPYING file of the elf distribution).

BUGS
Report bugs to <samy@kerneled.com>