Hide

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again.

Delete that bloated snippets file you've been using and share your personal repository with the world. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

If you have a new feature suggestion or find a bug, please get in touch via http://commandlinefu.uservoice.com/

Get involved!

You can sign-in using OpenID credentials, or register a traditional username and password.

OpenID
or
Sign in Register

First-time OpenID users will be automatically assigned a username which can be changed after signing in.

Hide

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

Hide

News

2011-03-12 - Confoo 2011 presentation
Slides are available from the commandlinefu presentation at Confoo 2011: http://presentations.codeinthehole.com/confoo2011/
2011-01-04 - Moderation now required for new commands
To try and put and end to the spamming, new commands require moderation before they will appear on the site.
2010-12-27 - Apologies for not banning the trolls sooner
Have been away from the interwebs over Christmas. Will be more vigilant henceforth.
2010-09-24 - OAuth and pagination problems fixed
Apologies for the delay in getting Twitter's OAuth supported. Annoying pagination gremlin also fixed.
Hide

Tags

Hide

Functions

Hide

Credits

Site by David Winterbottom (user root).

Commands using sort

Commands using sort from sorted by
Terminal - Commands using sort - 537 results
last | grep -v "^$" | awk '{ print $1 }' | sort -nr | uniq -c
2009-02-18 16:38:59
User: hkyeakley
Functions: awk grep last sort uniq
15
Up
Down
Quick glance at who's been using your system recently

This command takes the output of the 'last' command, removes empty lines, gets just the first field ($USERNAME), sort the $USERNAMES in reverse order and then gives a summary count of unique matches.

Show sample output | Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
diff <(sort file1.txt) <(sort file2.txt)
2009-02-18 15:17:59
User: unixmonkey1356
Functions: diff sort
4
Up
Down
diff two sorted files

Sees if two records differ in their entries, irrespective of order.

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
history | awk '{print $2}' | sort | uniq -c | sort -rn | head
2009-02-17 14:25:49
User: mikeda
Functions: awk sort uniq
18
Up
Down
List of commands you use most often
Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
egrep -o '\b[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\b' access.log | sort -u
2009-02-17 11:12:26
User: ferqwerty
Functions: egrep sort
6
Up
Down
Display IPs accessing your Apache webserver.
Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
find path/to/folder/ -type f -print0 | xargs -0 -n 1 md5sum | awk '{print $1}' | sort | md5sum | awk '{print $1}'
2009-02-16 19:39:37
User: mcover
Functions: awk find md5sum sort xargs
-2
Up
Down
Calculates fake folder checksum based on folder's files' md5sums

For quick validation of folder's file-contents (structure not taken into account) - I use it mostly to check if two folders' contents are the same.

Show sample output | Comments (3) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n | tail
2009-02-16 15:48:27
User: TuxOtaku
Functions: awk cut netstat sort uniq
2
Up
Down
Netstat Connection Check

This command does a tally of concurrent active connections from single IPs and prints out those IPs that have the most active concurrent connections. VERY useful in determining the source of a DoS or DDoS attack.

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
ps -eo pcpu,pid,args | sort -n
2009-02-16 14:23:03
User: unixmonkey1055
Functions: ps sort
3
Up
Down
Current running process ordered by %CPU

Useful to detect which process is causing system loads. It shows process PID so as we can take further actions.

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
du -ks * | sort -n
2009-02-16 14:18:52
User: unixmonkey1055
Functions: du sort
-1
Up
Down
Current directory files and subdirectories ordered by size

Very useful for finding the largest files and subdirectories at any given point. Any user can run it from current location just when need to know their largest files and subtdirectories from a certain point down as well.

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -anl | grep :80 | awk '{print $5}' | cut -d ":" -f 1 | uniq -c | sort -n | grep -c IPHERE
2009-02-16 08:54:08
User: nullrouter
Functions: awk cut grep netstat sort uniq
3
Up
Down
Who has the most Apache connections.

This will tell you who has the most Apache connections by IP (replace IPHERE with the actual IP you wish to check). Or if you wish, remove | grep -c IPHERE for the full list.

Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -pant 2> /dev/null | grep SYN_ | awk '{print $5;}' | cut -d: -f1 | sort | uniq -c | sort -n | tail -20
2009-02-16 08:49:38
User: unixmonkey982
Functions: awk cut grep netstat sort tail uniq
3
Up
Down
List top 20 IP from which TCP connection is in SYN_RECV state

List top 20 IP from which TCP connection is in SYN_RECV state.

Useful on web servers to detect a syn flood attack.

Replace SYN_ with ESTA to find established connections

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
du -hs * | grep '^[0-9,]*[MG]' | sort -rn
2009-02-15 17:47:59
User: orie
Functions: du grep sort
5
Up
Down
Show sorted list of files with sizes more than 1MB in the current dir

Taken from here: http://linsovet.com/directory-usage-size-sorted-list

Show sample output | Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -anp |grep 'tcp\|udp' | awk '{print $5}' | sed s/::ffff:// | cut -d: -f1 | sort | uniq -c | sort -n
2009-02-15 09:16:16
User: dt
Functions: awk cut netstat sed sort uniq
12
Up
Down
count IPv4 connections per IP

usefull in case of abuser/DoS attacks.

Show sample output | Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
find -printf '%u %g\n' | sort | uniq
2009-02-13 22:42:49
User: leper421
Functions: find sort
8
Up
Down
Get a quick list of all user and group owners of files and dirs under the cwd.

find -printf '%u\n' | sort | uniq #just users

find -printf '%g\n' | sort | uniq #just groups

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
history | awk '{a[$2]++}END{for(i in a){print a[i] " " i}}' | sort -rn | head
2009-02-11 13:12:29
User: unixmonkey611
Functions: awk sort
85
Up
Down
List of commands you use most often
Comments (5) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
sort -n -t . -k 1,1 -k 2,2 -k 3,3 -k 4,4 /file/of/ip/addresses
2009-02-08 05:24:08
User: SteamedFish
Functions: sort
2
Up
Down
Sort IP addresses

Sort IP address by order

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
find / -xdev -size +1024 -exec ls -al {} \; | sort -r -k 5
2009-02-07 18:50:44
User: mnikhil
Functions: find ls sort
2
Up
Down
finding more large files
Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
ls -la | awk '{print $5, " " ,$9}' | sort -rn
2009-02-07 18:49:56
User: mnikhil
Functions: awk ls sort
0
Up
Down
file sizes of current directory
Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
last | awk '{ print $1 }' | sort | uniq -c | grep -v wtmp
2009-02-07 18:42:59
User: mnikhil
Functions: awk grep last sort uniq
0
Up
Down
To get how many users logged in and logged out and how many times ?
Comments (1) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
sed -e 's/ *$//' ~/.bash_history | sort | uniq -cd | sort -nr | head
2009-02-07 11:10:06
User: erdnaxeli
Functions: sed sort uniq
7
Up
Down
top 10 commands used
Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
kill -HUP ` ps -aef | grep -i firefox | sort -k 2 -r | sed 1d | awk ' { print $2 } ' `
2009-02-07 10:10:45
User: vasudevram
Functions: awk grep kill ps sed sort
-2
Up
Down
UNIX one-liner to kill a hanging Firefox process

The description of how the one-liner works is here at my blog:

http://jugad2.blogspot.com/2008/09/unix-one-liner-to-kill-hanging-firefox.html

Show sample output | Comments (2) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
# cut -d ' ' -f1 /var/log/nginx/nginx-access.log | sort | uniq -c | sort -nr | head -10 | nl
2009-02-07 00:22:11
User: msisk
Functions: cut head sort uniq
1
Up
Down
See the top 10 IP addresses in a web access log
Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
perl -pe 's/.+;//' ~/.zsh_history | sort | uniq -c | sort -r|head -10
2009-02-06 15:24:32
User: aoiaoi
Functions: perl sort uniq
2
Up
Down
The top ten commands you use
Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
cd ~/.purple/logs/; egrep -ri "i can haz|pwn|l33t|w00|zomg" * | cut -d'/' -f 3 | sort | uniq | xargs -I {} echo "Note to self: ban user '{}'"
2009-02-05 21:23:53
User: rhythmx
Functions: cd cut echo egrep sort uniq xargs
5
Up
Down
Find and list users who talk like "lolcats"

Greps IRC logs for phrases and lists users who said them.

Show sample output | Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
find $PWD -exec rpm --query -f {} \; | sort -u | grep -v "not owned"
2009-02-05 19:33:43
User: wwest4
Functions: find grep rpm sort
0
Up
Down
List RPM packages installed in current tree

shows all RPMs with files in the current directory & its subdirectories.

Comments (0) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate
netstat -ant | awk '{print $NF}' | grep -v '[a-z]' | sort | uniq -c
2009-02-05 18:02:59
User: himynameisthor
Functions: awk grep netstat sort uniq
24
Up
Down
List the number and type of active network connections
Comments (4) | Add to favourites | Report as malicious | Submit alternative | Report as a duplicate