Commands using grep sorted by votes

Commands using grep (1,935)

sorted by

List Server IP address

I just use this to see my ip on the server I'm working on Show Sample Output
This is sample output - yours may be different.
```
addr:xxx.xxx.xxx.xxx
addr:
```
0

ifconfig eth0 | grep inet | awk '{ print $2 }'

smorg · 2014-07-23 20:43:15 6
Show a running count of CLOSE_WAIT and TIME_WAIT connections for debugging network apps

Uses the suggestions by jld on #12421 as well as the new iproute2 tools instead of old net-tools.
This is sample output - yours may be different.
0

watch -n5 ss \| grep -c WAIT

djpohly · 2014-07-30 17:09:08 6
List all Centos intalled packages

Great for moves, re-installs etc since it is not version specific yet is architecture specific. Centos yum list is well know for wrapping lines . Show Sample Output
This is sample output - yours may be different.
```
acl.x86_64
aic94xx-firmware.noarch
atmel-firmware.noarch
attr.x86_64
audit-libs.x86_64
audit.x86_64
authconfig.x86_64
autoconf.noarch
automake.noarch
b43-openfwwf.noarch
```
0

yum list installed| awk '{print $1}'| grep -e "x86" -e "noarch" | grep -v -e '^@'| sort

serverwholesale · 2014-08-06 23:13:24 8
Tail -f: truncate and search

Outputs / monitors the content of the LOG_FILE , which matches the SEARCH_STR. The output is cutted by spaces (as delimiter) starting from column 7 till the end.
This is sample output - yours may be different.
0

tail -f LOG_FILE | grep --line-buffered SEARCH_STR | cut -d " " -f 7-

pjsb · 2014-08-07 10:40:45 8
Grep auth log and print ip of attackers

Find the failed lines, reverse the output because I only see 3 indicators after the IP address, i.e. port, port#, ssh2 (in my file), cut to the 4th field (yes, you could awk '{print $4}'), reverse the output back to normal and then sort -u (for uniq, or sort | uniq). Show Sample Output
This is sample output - yours may be different.
```
192.168.1.1
192.168.2.2
10.0.0.1
```
0

grep Failed auth.log | rev | cut -d\ -f4 | rev | sort -u

supradave · 2014-08-14 14:57:41 8

This is a specialized command for Ericsson CS5.2 - Getting the test case trace on SDP

This command allows to follow up a trace on SDP (CS5.2), at the same time as the trace records are stored in the file with "raw" format. Trace files in native format are useful to filter the records before to translation from '|' to '\n'. Example: grep -v OP_GET <raw-records>.trace | tr '|' '\n' Show Sample Output

tail -1f /var/opt/fds/logs/TraceEventLogFile.txt.0 | grep <msisdn> | tee <test-case-id>.trace | tr '|' '\n'

neomefistox · 2014-08-21 19:29:07 11

search system log for spamassassin score and list only 15th column
This is sample output - yours may be different.
0

cat /var/log/syslog | grep score= | awk '{print $15}' | more

unix1776 · 2014-08-21 21:40:17 8
monitor all open connections to specific port
This is sample output - yours may be different.
0

netstat -anp | grep ":<port>"

erez83 · 2014-08-22 07:01:38 9
Unlock your KDE4 session over SSH

So this first obtains address of the DBUS session, as it's not available by default over SSH. Then it tells plasma-overlay to exit. `kquitapp` is pretty much an equivalent of the qdbus calls.
This is sample output - yours may be different.
0

( eval $(grep -z '^DBUS_SESSION_BUS_ADDRESS' /proc/$(pgrep -u $USER plasma-overlay)/environ); export DBUS_SESSION_BUS_ADDRESS; kquitapp plasma-overlay )

mig_hg · 2014-09-01 12:49:58 9
List Canon CR2 raw files which have been in-camera rated (5Dmk3+)
This is sample output - yours may be different.
0

for I in *.CR2; do if [ `exiv2 pr -p a -u $I | grep 'xmp.Rating' | awk '{ print $4 }'` == "1" ]; then echo $I; fi; done

jbuchbinder · 2014-09-10 03:31:44 8
Docker - delete all non-running container
This is sample output - yours may be different.
0

docker ps -a | grep 'Exit' | awk '{print $1}' | xargs docker rm

j0hnb · 2014-09-19 15:23:42 8
Docker - delete unused images
This is sample output - yours may be different.
0

docker images | grep '' | awk '{print $3}' | xargs docker rmi

j0hnb · 2014-09-19 15:24:12 25
Resource Monitoring

Monitoring system in one line : DISK : disk space MEM: memory ( mem , swap, Total) CPU : all information about cpu activity LOAD : load average Show Sample Output
This is sample output - yours may be different.
```
DISK:
94% /
6% /boot
0% /dev/shm
MEM:
total used free shared
Mem: 7983 7580 403
Swap: 12287 6 12281
Total: 20271 7586 12685
CPU:
0.3%us, 0.2%sy, 0.1%ni, 98.2%id, 1.1%wa, 0.0%hi, 0.1%si, 0.0%st
LOAD:
0.02 0.03 0.00 1/417 15018
```
0

echo "DISK:";df -Pl | grep -v "Filesystem" | awk '{print $5,$6}' ; echo "MEM:" ; free -mto | awk '{ print $1,$2,$3,$4 }'; echo "CPU:"; top -b -d1 -n1 | grep Cpu | awk '{print $2,$3,$4,$5,$6,$7,$8,$9}';echo "LOAD:"; cat /proc/loadavg

injez · 2014-09-29 12:43:52 35
Git branches I checked-out on a specific date

Replace "Oct 2" in the first grep pattern to be the date to view branch work from Show Sample Output
This is sample output - yours may be different.
```
my_new_feature
my_second_new_feature
master
```
0

git reflog --date=local | grep "Oct 2 .* checkout: moving from .* to" | grep -o "[a-zA-Z0-9\-]*$" | sort | uniq

Trindaz · 2014-10-03 15:12:22 8
BOFH Excuse using curl

Sure, it's dirty, but it's quick, it only displays the excuse, and it works. Show Sample Output
This is sample output - yours may be different.
```
Rhythmic variations in the voltage reaching the power supply.
```
0

curl -s http://pages.cs.wisc.edu/~ballard/bofh/bofhserver.pl |grep 'is:' |awk 'BEGIN { FS=">"; } { print $10; }'

toj · 2014-10-10 21:17:33 7
Basic search for Quassel PostgreSQL database

Replace the credentials to psql if necessary, and the my-query part with your query. Show Sample Output
This is sample output - yours may be different.
```
alias quassel-grep='psql -U quassel quassel -c "SELECT message FROM backlog ORDER BY time DESC LIMIT 1000;" | grep'

# Get messages directed at me
quassel-grep -E Tatsh[,\:]
```
0

psql -U quassel quassel -c "SELECT message FROM backlog ORDER BY time DESC LIMIT 1000;" | grep my-query

Tatsh · 2014-10-12 19:53:06 7
Install every (not already installed) component of the Google Cloud SDK

Google Cloud SDK comes with a package manager `gcloud components` but it needs a bit of `sed` to work. Modify the "^| Not" bit to change the package selection. (The gcloud --format option is currently broken) Show Sample Output
This is sample output - yours may be different.
```
gcloud components update pkg-go pkg-java pkg-python app gae-python-launcher-mac gae-go gae-java gae-python
```
0

gcloud components list | grep "^| Not" | sed "s/|$.*$|$.*$|$.*$|/\2/" | xargs echo gcloud components update

wires · 2014-10-13 20:52:25 11
Get domains on the server

Allows you to have a list of the domains on the server.
This is sample output - yours may be different.
0

cat /etc/named.conf | grep -Po '(?<=(named/)).*(?=\.db)'

KonKar · 2014-10-25 20:16:17 6
Get all URL With Extension from File
This is sample output - yours may be different.
0

cat File.txt | grep -io 'http://www.acme.com/a/files/.*.pdf'| uniq

nedzoul · 2014-10-31 14:51:57 8
Regex to reliably search a file for valid IP addresses (and external IP addresses)

Command returns valid IP addresses. Append the following regex to additionally filter out NAT and reserved IP addresses | grep -Ev "^0|\.0[0-9]|^10\.|^127\.|^169\.|^172\.(1[6-9]|2[0-9]|3[01])|^192.168.|^2(2[4-9]|3[0-9])|^2(4[0-9]|5[0-5])"
This is sample output - yours may be different.
0

grep -Eoa "\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b" Filetosearch.txt

jsbrown · 2014-11-02 19:50:54 8
List fonts used by an SVG file

List all fonts used by an SVG file. Useful to find out which fonts you need to have installed in order to open/edit an SVG file appropriately. Show Sample Output
This is sample output - yours may be different.
```
Candara
Caviar Dreams
Chubby Cheeks
ComickBook
Folks
FolksBlack
Folks-Bold
```
0

grep 'font-family:[^;]*' <input file.svg> | sed 's/.*font-family:$[^;]*$.*/\1/g' | sort | uniq

caiosba · 2014-11-03 20:38:08 80
Find a process by name and automatically kill it
This is sample output - yours may be different.
0

PID=$(ps -ef | grep processName | grep -v grep | awk '{print $2'}); kill -9 $PID

lysergication · 2014-11-11 05:12:19 10
Check if a port is open to the internet using canyouseeme.org

For now just returns either "Success" or "Error". My awk-fu isn't strong enough to hackily parse out the error in case there is one, so I kept it simple. Show Sample Output
This is sample output - yours may be different.
```
~ user@host
&#10095; cysm 80
Success

~ user@host
&#10095; cysm 443
Error
```
0

cysm() { curl -sd port="$1" http://canyouseeme.org |grep -o 'Success\|Error' }

awh · 2014-11-11 23:30:39 8
Count the number of pages of all PDFs in current directory and all subdirs, recursively

using awk, changed the line given by sucotronic in command #11733 to print the first and second columns Show Sample Output
This is sample output - yours may be different.
```
NumberOfPages: 190
NumberOfPages: 96
NumberOfPages: 92
NumberOfPages: 152
NumberOfPages: 102
NumberOfPages: 126
NumberOfPages: 156
NumberOfPages: 84
NumberOfPages: 110
NumberOfPages: 170
NumberOfPages: 72
NumberOfPages: 98
NumberOfPages: 154
NumberOfPages: 131
NumberOfPages: 84
```
0

find . -name "*.pdf" -exec pdftk {} dump_data output \; | grep NumberOfPages | awk '{print $1,$2}'

mtrgrrl · 2014-11-14 23:36:56 8
Show your font name list
This is sample output - yours may be different.
0

fc-query ./fonts/* | grep "family:" | cut -d '"' -f 2 | sort -u

kokoye2007 · 2014-11-16 22:12:07 8
‹ First < 51 52 53 54 55 > Last ›

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Check These Out

list block devices

Shows all block devices in a tree with descruptions of what they are.

Download all Phrack .tar.gzs

Get just the IP for a hostname

has the benefit of being a bit more cross-platform.

Find usb device in realtime

Using this command you can track a moment when usb device was attached.

Convert seconds to [DD:][HH:]MM:SS

Converts any number of seconds into days, hours, minutes and seconds. sec2dhms() { declare -i SS="$1" D=$(( SS / 86400 )) H=$(( SS % 86400 / 3600 )) M=$(( SS % 3600 / 60 )) S=$(( SS % 60 )) [ "$D" -gt 0 ] && echo -n "${D}:" [ "$H" -gt 0 ] && printf "%02g:" "$H" printf "%02g:%02g\n" "$M" "$S" }

apt-get via sudo

An apt-get wrapper function which will run the command via sudo, but will run it normally if you're only downloading source files. This was a bit of an excuse to show off the framework of $ cmd && echo true || echo false ...but as you can see, you must be careful about what is in the "true" block to make sure it executes without error, otherwise the "false" block will be executed. To allow the apt-get return code to pass through, you need to use a more normal if/else block: $ apt-get () { if [ "$1" = source ]; then command apt-get "$@"; else sudo apt-get "$@"; fi }

tail a log over ssh

This is also handy for taking a look at resource usage of a remote box. $ ssh -t remotebox top

Copy the full path of a file to the clipboard (requires xclip or similar)

Handy for those times you need to paste a file path in an IDE or some other app. sudo apt-get install xclip Then, for convenience, alias xclip to 'xclip -selection c' so you can just do something like realpath . | xclip

Convert CSV to JSON

Replace 'csv_file.csv' with your filename.

Function to output an ASCII character given its decimal equivalent

I've corrected the function. My octal conversion formula was completely wrong. Thanks to pgas at http://mywiki.wooledge.org/BashFAQ/071 for setting me straight. The new function is from pgas and is very fast.

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)
» commands using grep

Commands using grep (1,935) the last day the last week the last month all time sorted by date votes

What's this?

Check These Out

Stay in the loop…

Commands using grep (1,935)

sorted by