Commands using grep sorted by votes

Commands using grep (1,935)

sorted by

List Server IP address

I just use this to see my ip on the server I'm working on Show Sample Output
This is sample output - yours may be different.
```
addr:xxx.xxx.xxx.xxx
addr:
```
0

ifconfig eth0 | grep inet | awk '{ print $2 }'

smorg · 2014-07-23 20:43:15 6
Show a running count of CLOSE_WAIT and TIME_WAIT connections for debugging network apps

Uses the suggestions by jld on #12421 as well as the new iproute2 tools instead of old net-tools.
This is sample output - yours may be different.
0

watch -n5 ss \| grep -c WAIT

djpohly · 2014-07-30 17:09:08 6
List all Centos intalled packages

Great for moves, re-installs etc since it is not version specific yet is architecture specific. Centos yum list is well know for wrapping lines . Show Sample Output
This is sample output - yours may be different.
```
acl.x86_64
aic94xx-firmware.noarch
atmel-firmware.noarch
attr.x86_64
audit-libs.x86_64
audit.x86_64
authconfig.x86_64
autoconf.noarch
automake.noarch
b43-openfwwf.noarch
```
0

yum list installed| awk '{print $1}'| grep -e "x86" -e "noarch" | grep -v -e '^@'| sort

serverwholesale · 2014-08-06 23:13:24 8
Tail -f: truncate and search

Outputs / monitors the content of the LOG_FILE , which matches the SEARCH_STR. The output is cutted by spaces (as delimiter) starting from column 7 till the end.
This is sample output - yours may be different.
0

tail -f LOG_FILE | grep --line-buffered SEARCH_STR | cut -d " " -f 7-

pjsb · 2014-08-07 10:40:45 8
Grep auth log and print ip of attackers

Find the failed lines, reverse the output because I only see 3 indicators after the IP address, i.e. port, port#, ssh2 (in my file), cut to the 4th field (yes, you could awk '{print $4}'), reverse the output back to normal and then sort -u (for uniq, or sort | uniq). Show Sample Output
This is sample output - yours may be different.
```
192.168.1.1
192.168.2.2
10.0.0.1
```
0

grep Failed auth.log | rev | cut -d\ -f4 | rev | sort -u

supradave · 2014-08-14 14:57:41 8

This is a specialized command for Ericsson CS5.2 - Getting the test case trace on SDP

This command allows to follow up a trace on SDP (CS5.2), at the same time as the trace records are stored in the file with "raw" format. Trace files in native format are useful to filter the records before to translation from '|' to '\n'. Example: grep -v OP_GET <raw-records>.trace | tr '|' '\n' Show Sample Output

tail -1f /var/opt/fds/logs/TraceEventLogFile.txt.0 | grep <msisdn> | tee <test-case-id>.trace | tr '|' '\n'

neomefistox · 2014-08-21 19:29:07 11

search system log for spamassassin score and list only 15th column
This is sample output - yours may be different.
0

cat /var/log/syslog | grep score= | awk '{print $15}' | more

unix1776 · 2014-08-21 21:40:17 8
monitor all open connections to specific port
This is sample output - yours may be different.
0

netstat -anp | grep ":<port>"

erez83 · 2014-08-22 07:01:38 9
Unlock your KDE4 session over SSH

So this first obtains address of the DBUS session, as it's not available by default over SSH. Then it tells plasma-overlay to exit. `kquitapp` is pretty much an equivalent of the qdbus calls.
This is sample output - yours may be different.
0

( eval $(grep -z '^DBUS_SESSION_BUS_ADDRESS' /proc/$(pgrep -u $USER plasma-overlay)/environ); export DBUS_SESSION_BUS_ADDRESS; kquitapp plasma-overlay )

mig_hg · 2014-09-01 12:49:58 9
List Canon CR2 raw files which have been in-camera rated (5Dmk3+)
This is sample output - yours may be different.
0

for I in *.CR2; do if [ `exiv2 pr -p a -u $I | grep 'xmp.Rating' | awk '{ print $4 }'` == "1" ]; then echo $I; fi; done

jbuchbinder · 2014-09-10 03:31:44 8
Docker - delete all non-running container
This is sample output - yours may be different.
0

docker ps -a | grep 'Exit' | awk '{print $1}' | xargs docker rm

j0hnb · 2014-09-19 15:23:42 8
Docker - delete unused images
This is sample output - yours may be different.
0

docker images | grep '' | awk '{print $3}' | xargs docker rmi

j0hnb · 2014-09-19 15:24:12 25
Resource Monitoring

Monitoring system in one line : DISK : disk space MEM: memory ( mem , swap, Total) CPU : all information about cpu activity LOAD : load average Show Sample Output
This is sample output - yours may be different.
```
DISK:
94% /
6% /boot
0% /dev/shm
MEM:
total used free shared
Mem: 7983 7580 403
Swap: 12287 6 12281
Total: 20271 7586 12685
CPU:
0.3%us, 0.2%sy, 0.1%ni, 98.2%id, 1.1%wa, 0.0%hi, 0.1%si, 0.0%st
LOAD:
0.02 0.03 0.00 1/417 15018
```
0

echo "DISK:";df -Pl | grep -v "Filesystem" | awk '{print $5,$6}' ; echo "MEM:" ; free -mto | awk '{ print $1,$2,$3,$4 }'; echo "CPU:"; top -b -d1 -n1 | grep Cpu | awk '{print $2,$3,$4,$5,$6,$7,$8,$9}';echo "LOAD:"; cat /proc/loadavg

injez · 2014-09-29 12:43:52 35
Git branches I checked-out on a specific date

Replace "Oct 2" in the first grep pattern to be the date to view branch work from Show Sample Output
This is sample output - yours may be different.
```
my_new_feature
my_second_new_feature
master
```
0

git reflog --date=local | grep "Oct 2 .* checkout: moving from .* to" | grep -o "[a-zA-Z0-9\-]*$" | sort | uniq

Trindaz · 2014-10-03 15:12:22 8
BOFH Excuse using curl

Sure, it's dirty, but it's quick, it only displays the excuse, and it works. Show Sample Output
This is sample output - yours may be different.
```
Rhythmic variations in the voltage reaching the power supply.
```
0

curl -s http://pages.cs.wisc.edu/~ballard/bofh/bofhserver.pl |grep 'is:' |awk 'BEGIN { FS=">"; } { print $10; }'

toj · 2014-10-10 21:17:33 7
Basic search for Quassel PostgreSQL database

Replace the credentials to psql if necessary, and the my-query part with your query. Show Sample Output
This is sample output - yours may be different.
```
alias quassel-grep='psql -U quassel quassel -c "SELECT message FROM backlog ORDER BY time DESC LIMIT 1000;" | grep'

# Get messages directed at me
quassel-grep -E Tatsh[,\:]
```
0

psql -U quassel quassel -c "SELECT message FROM backlog ORDER BY time DESC LIMIT 1000;" | grep my-query

Tatsh · 2014-10-12 19:53:06 7
Install every (not already installed) component of the Google Cloud SDK

Google Cloud SDK comes with a package manager `gcloud components` but it needs a bit of `sed` to work. Modify the "^| Not" bit to change the package selection. (The gcloud --format option is currently broken) Show Sample Output
This is sample output - yours may be different.
```
gcloud components update pkg-go pkg-java pkg-python app gae-python-launcher-mac gae-go gae-java gae-python
```
0

gcloud components list | grep "^| Not" | sed "s/|$.*$|$.*$|$.*$|/\2/" | xargs echo gcloud components update

wires · 2014-10-13 20:52:25 11
Get domains on the server

Allows you to have a list of the domains on the server.
This is sample output - yours may be different.
0

cat /etc/named.conf | grep -Po '(?<=(named/)).*(?=\.db)'

KonKar · 2014-10-25 20:16:17 6
Get all URL With Extension from File
This is sample output - yours may be different.
0

cat File.txt | grep -io 'http://www.acme.com/a/files/.*.pdf'| uniq

nedzoul · 2014-10-31 14:51:57 8
Regex to reliably search a file for valid IP addresses (and external IP addresses)

Command returns valid IP addresses. Append the following regex to additionally filter out NAT and reserved IP addresses | grep -Ev "^0|\.0[0-9]|^10\.|^127\.|^169\.|^172\.(1[6-9]|2[0-9]|3[01])|^192.168.|^2(2[4-9]|3[0-9])|^2(4[0-9]|5[0-5])"
This is sample output - yours may be different.
0

grep -Eoa "\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b" Filetosearch.txt

jsbrown · 2014-11-02 19:50:54 8
List fonts used by an SVG file

List all fonts used by an SVG file. Useful to find out which fonts you need to have installed in order to open/edit an SVG file appropriately. Show Sample Output
This is sample output - yours may be different.
```
Candara
Caviar Dreams
Chubby Cheeks
ComickBook
Folks
FolksBlack
Folks-Bold
```
0

grep 'font-family:[^;]*' <input file.svg> | sed 's/.*font-family:$[^;]*$.*/\1/g' | sort | uniq

caiosba · 2014-11-03 20:38:08 80
Find a process by name and automatically kill it
This is sample output - yours may be different.
0

PID=$(ps -ef | grep processName | grep -v grep | awk '{print $2'}); kill -9 $PID

lysergication · 2014-11-11 05:12:19 10
Check if a port is open to the internet using canyouseeme.org

For now just returns either "Success" or "Error". My awk-fu isn't strong enough to hackily parse out the error in case there is one, so I kept it simple. Show Sample Output
This is sample output - yours may be different.
```
~ user@host
&#10095; cysm 80
Success

~ user@host
&#10095; cysm 443
Error
```
0

cysm() { curl -sd port="$1" http://canyouseeme.org |grep -o 'Success\|Error' }

awh · 2014-11-11 23:30:39 8
Count the number of pages of all PDFs in current directory and all subdirs, recursively

using awk, changed the line given by sucotronic in command #11733 to print the first and second columns Show Sample Output
This is sample output - yours may be different.
```
NumberOfPages: 190
NumberOfPages: 96
NumberOfPages: 92
NumberOfPages: 152
NumberOfPages: 102
NumberOfPages: 126
NumberOfPages: 156
NumberOfPages: 84
NumberOfPages: 110
NumberOfPages: 170
NumberOfPages: 72
NumberOfPages: 98
NumberOfPages: 154
NumberOfPages: 131
NumberOfPages: 84
```
0

find . -name "*.pdf" -exec pdftk {} dump_data output \; | grep NumberOfPages | awk '{print $1,$2}'

mtrgrrl · 2014-11-14 23:36:56 8
Show your font name list
This is sample output - yours may be different.
0

fc-query ./fonts/* | grep "family:" | cut -d '"' -f 2 | sort -u

kokoye2007 · 2014-11-16 22:12:07 8
‹ First < 51 52 53 54 55 > Last ›

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Check These Out

grep for minus (-) sign

Use flag "--" to stop switch parsing

keylogger

$python -c "DEV = '/dev/input/event4' #if event0 doesn't work, try event1 event2 etc fo = open(DEV) def interpret(keycode,state): if state == 0: print '%i up'%keycode if state == 1: print '%i down'%keycode if state == 2: print '%i repeat'%keycode while 1: line = fo.read(16) if ord(line[10]) != 0: keycode,state = line[10],line[12] interpret(ord(keycode),ord(state)) "

Check for login failures and summarize

This command checks for the number of times when someone has tried to login to your server and failed. If there are a lot, then that user is being targeted on your system and you might want to make sure that user either has remote logins disabled, or has a strong password, or both. If your output has an "invalid" line, it is a summary of all logins from users that don't exist on your system.

Hits per hour apache log

Look for English words in /dev/urandom

* to get the English dictionary: wget http://www.mavi1.org/web_security/wordlists/webster-dictionary.txt

Get AWS temporary credentials ready to export based on a MFA virtual appliance

You might want to secure your AWS operations requiring to use a MFA token. But then to use API or tools, you need to pass credentials generated with a MFA token. This commands asks you for the MFA code and retrieves these credentials using AWS Cli. To print the exports, you can use: `awk '{ print "export AWS_ACCESS_KEY_ID=\"" $1 "\"\n" "export AWS_SECRET_ACCESS_KEY=\"" $2 "\"\n" "export AWS_SESSION_TOKEN=\"" $3 "\"" }'` You must adapt the command line to include: * $MFA_IDis ARN of the virtual MFA or serial number of the physical one * TTL for the credentials

Find the package that installed a command

Add fade in/out to first & last 25 frames of a video

Replace vid.mp4 with the path to your original video file, and out.mp4 to the path where you want to save the new file. To view the output first before saving, remove "-consumer avformat:out.mp4" from the end. Documentation for mlt framework and melt command can be found here: http://www.mltframework.org/bin/view/MLT/Documentation

Convert seconds to [DD:][HH:]MM:SS

Converts any number of seconds into days, hours, minutes and seconds. sec2dhms() { declare -i SS="$1" D=$(( SS / 86400 )) H=$(( SS % 86400 / 3600 )) M=$(( SS % 3600 / 60 )) S=$(( SS % 60 )) [ "$D" -gt 0 ] && echo -n "${D}:" [ "$H" -gt 0 ] && printf "%02g:" "$H" printf "%02g:%02g\n" "$M" "$S" }

repeat a command every one second

Short method of "while x=0; do foo ; sleep 1 ; done"

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)
» commands using grep

Commands using grep (1,935) the last day the last week the last month all time sorted by date votes

What's this?

Check These Out

Stay in the loop…

Commands using grep (1,935)

sorted by