Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

If I'm using Firefox and filling out a big form (with lots of text to write), and for some reason I accidentally press F5 and all my text in the forms is lost, I can use e.g. HxD on Windows to retrieve the text, because they're still in memory. How can I do the same under Linux? (e.g. Fedora)

share|improve this question
I'm not sure what your title has to do with this; are you just looking for hex editor recommendations? Or do you want something that will dump the contents of memory? – Michael Mrozek May 25 '11 at 15:20
thx, updated title – LanceBaynes May 25 '11 at 15:23

I'd try something like this:

strings /proc/$PID/mem | grep $MYTEXT

Where $PID is process id of your running browser program and $MYTEXT is a substring of the text you remember typing in.

share|improve this answer
good idea but: [root@g2 10653]# ls -lah /proc/10653/ | grep -i mem -rw-------. 1 USER USER 0 máj 25 20.29 mem [root@g2 10653]# – LanceBaynes May 25 '11 at 18:39
@LanceBaynes: This comment is meaningless. As it happens, I can guess that you saw an error message and misinterpreted it, but you should have copy-pasted the command you ran and the error message, not some random other command. Reading from /proc/$PID/mem is not straightforward, see How do I read from /proc/$pid/mem under Linux?. – Gilles May 25 '11 at 22:08
ohh, thanks! I tried you're python script (you didn't wrote a small howto, how to parameter it, or how to use it?) I tried: pastebin.com/raw.php?i=ZeQs50g1 - Fedora14/bash – LanceBaynes May 26 '11 at 8:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.