Hide

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again.

Delete that bloated snippets file you've been using and share your personal repository with the world. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Get involved!

You can sign-in using OpenID credentials, or register a traditional username and password.

OpenID
or
Sign in Register

First-time OpenID users will be automatically assigned a username which can be changed after signing in.

UpGuard checks and validates configurations for every major OS, network device, and cloud provider.
Hide

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

Hide

News

May 19, 2015 - A Look At The New Commandlinefu
I've put together a short writeup on what kind of newness you can expect from the next iteration of clfu. Check it out here.
March 2, 2015 - New Management
I'm Jon, I'll be maintaining and improving clfu. Thanks to David for building such a great resource!
Hide

Top Tags


awk, bash, curl, find, grep, Linux, sed
Hide

Functions

Commands using grep from sorted by
Terminal - Commands using grep - 1,674 results
grep -Eoa "\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b" Filetosearch.txt
2014-11-02 19:50:54
User: jsbrown
Functions: grep
Tags: grep regex ip address external ip
0
Up
Down
Regex to reliably search a file for valid IP addresses (and external IP addresses)

Command returns valid IP addresses. Append the following regex to additionally filter out NAT and reserved IP addresses

| grep -Ev "^0|\.0[0-9]|^10\.|^127\.|^169\.|^172\.(1[6-9]|2[0-9]|3[01])|^192.168.|^2(2[4-9]|3[0-9])|^2(4[0-9]|5[0-5])"

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
cat File.txt | grep -io 'http://www.acme.com/a/files/.*.pdf'| uniq
2014-10-31 14:51:57
User: nedzoul
Functions: cat grep
0
Up
Down
Get all URL With Extension from File
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
lsof -ns | grep REG | grep deleted | awk '{s+=$7/1024} END {print s}'
2014-10-29 13:38:49
User: atboy
Functions: awk grep
5
Up
Down
Find size in kilobyte of files that are deleted but still in use and therefore consumes diskspace
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
cat /etc/named.conf | grep -Po '(?<=(named/)).*(?=\.db)'
2014-10-25 20:16:17
User: KonKar
Functions: cat grep
Tags: bash terminal console sh
0
Up
Down
Get domains on the server

Allows you to have a list of the domains on the server.

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
find . -name '*.jar' | xargs -l jar vtf | grep XXX.java
2014-10-24 09:53:34
User: zluyuer
Functions: find grep xargs
1
Up
Down
Find class in jar
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
smartctl -a /dev/sda |grep Writ |awk '{print $NF/2/1024/1024/1024 " TeraBytes Written"}'
2014-10-21 03:40:32
User: khyron320
Functions: awk grep
Tags: smartctl drive wear TBW
2
Up
Down
Find total Terabytes written to a SSD

You must have smartmontools installed for this to work. This also assumes you 512 byte sector sizes, this is pretty standard.

Show sample output | Comments (8) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
ls | tr '[[:punct:][:space:]]' '\n' | grep -v "^\s*$" | sort | uniq -c | sort -bn
2014-10-14 09:52:28
User: qdrizh
Functions: grep ls sort tr uniq
Tags: sort uniq ls grep tr
3
Up
Down
Show most common words in filenames

I'm sure there's a more elegant sed version for the tr + grep section.

Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
gcloud components list | grep "^| Not" | sed "s/|\(.*\)|\(.*\)|\(.*\)|/\2/" | xargs echo gcloud components update
2014-10-13 20:52:25
User: wires
Functions: echo grep sed xargs
Tags: bash sed xargs grep gcloud fish
0
Up
Down
Install every (not already installed) component of the Google Cloud SDK

Google Cloud SDK comes with a package manager `gcloud components` but it needs a bit of `sed` to work. Modify the "^| Not" bit to change the package selection. (The gcloud --format option is currently broken)

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
psql -U quassel quassel -c "SELECT message FROM backlog ORDER BY time DESC LIMIT 1000;" | grep my-query
2014-10-12 19:53:06
User: Tatsh
Functions: grep
Tags: postgresql quassel
0
Up
Down
Basic search for Quassel PostgreSQL database

Replace the credentials to psql if necessary, and the my-query part with your query.

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
curl -s http://pages.cs.wisc.edu/~ballard/bofh/bofhserver.pl |grep 'is:' |awk 'BEGIN { FS=">"; } { print $10; }'
2014-10-10 21:17:33
User: toj
Functions: awk grep
Tags: curl BOFH
0
Up
Down
BOFH Excuse using curl

Sure, it's dirty, but it's quick, it only displays the excuse, and it works.

Show sample output | Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
url=`curl http://proxybay.info/ | awk -F'href="|" |">|</' '{for(i=2;i<=NF;i=i+4) print $i,$(i+2)}' | grep follow|sed 's/^.\{19\}//'|shuf -n 1` && firefox $url
2014-10-04 19:08:13
User: dunryc
Functions: awk grep sed
-1
Up
Down
open a random pirate bay mirror site

polls the pirate bay mirrors list and chooses a random site and opens it for you in firefox

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
git reflog --date=local | grep "Oct 2 .* checkout: moving from .* to" | grep -o "[a-zA-Z0-9\-]*$" | sort | uniq
2014-10-03 15:12:22
User: Trindaz
Functions: grep sort
Tags: git grep branches reflog
0
Up
Down
Git branches I checked-out on a specific date

Replace "Oct 2" in the first grep pattern to be the date to view branch work from

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
echo "DISK:";df -Pl | grep -v "Filesystem" | awk '{print $5,$6}' ; echo "MEM:" ; free -mto | awk '{ print $1,$2,$3,$4 }'; echo "CPU:"; top -b -d1 -n1 | grep Cpu | awk '{print $2,$3,$4,$5,$6,$7,$8,$9}';echo "LOAD:"; cat /proc/loadavg
2014-09-29 12:43:52
User: injez
Functions: awk cat df echo free grep top
Tags: cpu usage memory usage disk usage monitoring load average
0
Up
Down
Resource Monitoring

Monitoring system in one line :

DISK : disk space

MEM: memory ( mem , swap, Total)

CPU : all information about cpu activity

LOAD : load average

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
for line in `docker ps | awk '{print $1}' | grep -v CONTAINER`; do docker ps | grep $line | awk '{printf $NF" "}' && echo $(( `cat /sys/fs/cgroup/memory/docker/$line*/memory.usage_in_bytes` / 1024 / 1024 ))MB ; done
2014-09-24 04:37:01
User: sammcj
Functions: awk echo grep ps
Tags: memory lxc docker container
3
Up
Down
Show memory usage of all docker / lxc containers
Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
gs -dNOPAUSE -sDEVICE=pdfwrite -sOUTPUTFILE=merged.pdf -dBATCH `ls | grep foo`
2014-09-19 16:00:32
User: Arasithil
Functions: grep gs
-1
Up
Down
Merge only certain pdfs in a directory
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
docker images | grep '' | awk '{print $3}' | xargs docker rmi
2014-09-19 15:24:12
User: j0hnb
Functions: awk grep xargs
Tags: docker
0
Up
Down
Docker - delete unused images
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
docker ps -a | grep 'Exit' | awk '{print $1}' | xargs docker rm
2014-09-19 15:23:42
User: j0hnb
Functions: awk grep ps xargs
Tags: docker
0
Up
Down
Docker - delete all non-running container
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
ps -efL | grep <Process Name>
2014-09-11 16:35:31
User: tsener
Functions: grep ps
-1
Up
Down
ps to show child thread PIDs
Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
for I in *.CR2; do if [ `exiv2 pr -p a -u $I | grep 'xmp.Rating' | awk '{ print $4 }'` == "1" ]; then echo $I; fi; done
2014-09-10 03:31:44
User: jbuchbinder
Functions: awk echo grep pr
Tags: Image processing image canon cr2 raw rating
0
Up
Down
List Canon CR2 raw files which have been in-camera rated (5Dmk3+)
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
( eval $(grep -z '^DBUS_SESSION_BUS_ADDRESS' /proc/$(pgrep -u $USER plasma-overlay)/environ); export DBUS_SESSION_BUS_ADDRESS; kquitapp plasma-overlay )
2014-09-01 12:49:58
User: mig_hg
Functions: eval export grep
Tags: KDE unlock screensaver
0
Up
Down
Unlock your KDE4 session over SSH

So this first obtains address of the DBUS session, as it's not available by default over SSH. Then it tells plasma-overlay to exit. `kquitapp` is pretty much an equivalent of the qdbus calls.

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -anp | grep ":<port>"
2014-08-22 07:01:38
User: erez83
Functions: grep netstat
0
Up
Down
monitor all open connections to specific port
Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
cat /var/log/syslog | grep score= | awk '{print $15}' | more
2014-08-21 21:40:17
User: unix1776
Functions: awk cat grep
0
Up
Down
search system log for spamassassin score and list only 15th column
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
tail -1f /var/opt/fds/logs/TraceEventLogFile.txt.0 | grep <msisdn> | tee <test-case-id>.trace | tr '|' '\n'
2014-08-21 19:29:07
User: neomefistox
Functions: grep tail tee tr
Tags: #Specialized #Ericsson #CS5.2 #Integration
0
Up
Down
This is a specialized command for Ericsson CS5.2 - Getting the test case trace on SDP

This command allows to follow up a trace on SDP (CS5.2), at the same time as the trace records are stored in the file with "raw" format.

Trace files in native format are useful to filter the records before to translation from '|' to '\n'.

Example:

grep -v OP_GET <raw-records>.trace | tr '|' '\n'
Show sample output | Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
grep Failed auth.log | rev | cut -d\ -f4 | rev | sort -u
2014-08-14 14:57:41
User: supradave
Functions: cut grep rev sort
0
Up
Down
Grep auth log and print ip of attackers

Find the failed lines, reverse the output because I only see 3 indicators after the IP address, i.e. port, port#, ssh2 (in my file), cut to the 4th field (yes, you could awk '{print $4}'), reverse the output back to normal and then sort -u (for uniq, or sort | uniq).

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
ls -la | grep ^l
2014-08-11 03:06:48
User: gatopan
Functions: grep ls
Tags: ls bsd GNU coreutils symbolic link
1
Up
Down
List all symbolic links in current directory

Tested with GNU and BSD ls.

Show sample output | Comments (4) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate