Grep最全版.pptVIP

Grep Searches for text in a file Can search for simple words: “chair” Can look for “regular expressions”; more complex character strings such as “chair” followed by any number of spaces, followed by a digit or lowercase letter. Grep usage grep “something” somefile.txt returns all lines with the word something from somefile.txt grep -v “something” something.txt returns all lines that dont have the word something in them grep -i “something” something.txt returns all lines with a mixed upper and lowercase something in them. Simple regular expressions “[0-9]” look for any digit “[a-zA-Z]” look for one upper or lowercase letter “.” look for one character “.*” any number of characters “\.” a literal decimal point “\.161:” dot, then 161, then colon “\.161[: ]” dot, then 161, then colon or space Advanced regular expressions Look for lines that hold either “dog” or “cat” grep -e (dog|cat) animalfarm.txt Lines that have cat followed by dog on the same line, but possibly with other characters in between: grep cat.*dog animalfarm.txt cat has to be at the beginning of the line: grep ^cat animalfarm.txt Look for it at the end of the line: grep cat$ animalfarm.txt Ways to use it Three identical ways to search in a file: grep promiscuous messages cat messages | grep promiscuous grep promiscuous messages Look for something in multiple files: (zcat /var/log/messages.*.gz ; cat /var/log/messages ) | grep promiscuous | less Lab answers SNMP probes: 161,162 Grep “\.16[12][: ].*udp” firewall.log snmp.txt Inbound Unix traceroute grep “\.33[45][0-9][0-9][: ].*udp” firewall.log traceroute.txt FW-1 256-259, 260-261, 264-265, 900, 18207 grep -e “(\.25[6-9][: ]|\.26[0145][: ]|\.900[: ]|\.18207[: ])” firewall.log fw1.txt Half-life grep “\.27015[: ].*udp” firewall.log halflife.txt AIX/broken PMTU Size 1500 icmp echo request DF grep “icmp: echo request (DF).*len 1500” firewall.log aix.txt Note we only get one of these (fw1?) firewall.log answers 197,128 lines “\.4040[: ]” #CipherIM