Thanks for responding Bill. I haven't tried unpack on the string yet, I will give that a go and see what it returns.

You are right that the address of the following bytes is correct, in the Perl hexdump output it is showing four hex characters whereas the Linux hexdump output only shows two, so something is translating the code internally, as @Veltro suggests below.