This helped me find a botnet that had made into my system. Of course, this is not a foolproof or guarantied way to find all of them or even most of them. But it helped me find it.

This is really fast :)

204753

real 0m0.191s

user 0m0.068s

sys 0m0.116s

Based on the MrMerry one, just add some visuals and sort directory and files

Make sure that find does not touch anything other than regular files, and handles non-standard characters in filenames while passing to xargs.

needs no GNU tools, as far as I see it

saves one command. Needs GNU grep though :-(

The grep switches eliminate the need for awk and sed. Modifying vim with -p will show all files in separate tabs, -o in separate vim windows. Just wish it didn't hose my terminal once I exit vim!!

This will drop you into vim to edit all files that contain your grep string.

xargs can be used in this manner to download multiple files at a time, and xargs will in this case run 10 processes at a time and initiate a new one when the number running falls below 10.

get diskusage of files (in this case logfiles in /var/log) modified during the last n days:

n -> last modified n*24 hours ago

Numeric arguments can be specified as

+n for greater than n,

-n for less than n,

n for exactly n.

=> so 7*24 hours (about 7 days) is -7

1. find file greater than 10 MB

2. direct it to xargs

3. xargs pass them as argument to ls

this command works with one gziped file per table, and restore 4 tables in parallel.

use the locate command to find files on the system and verify they exist (-e) then display each one in full details.

The `-q' arg forces tail to not output the name of the current file

This allows the output to be sorted from largest to smallest in human readable format.

This command will find the biggest files recursively under a certain directory, no matter if they are too many. If you try the regular commands ("find -type f -exec ls -laSr {} +" or "find -type f -print0 | xargs -0 ls -laSr") the sorting won't be correct because of command line arguments limit.

This command won't use command line arguments to sort the files and will display the sorted list correctly.

If you want certain files out of a directory hierarchy, this will copy just the listed files, but will create the directory hierarchy in the new location ($DIR/)

xargs -P N spawns up to N worker processes. -n 40 means each grep command gets up to 40 file names each on the command line.

I used this because I needed to sort the content of a bunch of gzipped log files. Replace sort with something else, or simply remove sort to just rezip everything

The example command deletes all aliases for network interface 'em0' assuming that the aliases have netmask of 255.255.255.255 and the master IP has some other netmask (such as 255.255.255.0). See here -> http://my.galagzee.com/2009/07/22/deleting-all-network-interface-aliases/ for more on the rationale of this command.

Retrieve top ip threats from http://isc.sans.org/sources.html and add them into iptables output chain.