Commands using grep sorted by votes

Commands using grep (1,935)

sorted by

List Server IP address

I just use this to see my ip on the server I'm working on Show Sample Output
This is sample output - yours may be different.
```
addr:xxx.xxx.xxx.xxx
addr:
```
0

ifconfig eth0 | grep inet | awk '{ print $2 }'

smorg · 2014-07-23 20:43:15 6
Show a running count of CLOSE_WAIT and TIME_WAIT connections for debugging network apps

Uses the suggestions by jld on #12421 as well as the new iproute2 tools instead of old net-tools.
This is sample output - yours may be different.
0

watch -n5 ss \| grep -c WAIT

djpohly · 2014-07-30 17:09:08 6
List all Centos intalled packages

Great for moves, re-installs etc since it is not version specific yet is architecture specific. Centos yum list is well know for wrapping lines . Show Sample Output
This is sample output - yours may be different.
```
acl.x86_64
aic94xx-firmware.noarch
atmel-firmware.noarch
attr.x86_64
audit-libs.x86_64
audit.x86_64
authconfig.x86_64
autoconf.noarch
automake.noarch
b43-openfwwf.noarch
```
0

yum list installed| awk '{print $1}'| grep -e "x86" -e "noarch" | grep -v -e '^@'| sort

serverwholesale · 2014-08-06 23:13:24 8
Tail -f: truncate and search

Outputs / monitors the content of the LOG_FILE , which matches the SEARCH_STR. The output is cutted by spaces (as delimiter) starting from column 7 till the end.
This is sample output - yours may be different.
0

tail -f LOG_FILE | grep --line-buffered SEARCH_STR | cut -d " " -f 7-

pjsb · 2014-08-07 10:40:45 8
Grep auth log and print ip of attackers

Find the failed lines, reverse the output because I only see 3 indicators after the IP address, i.e. port, port#, ssh2 (in my file), cut to the 4th field (yes, you could awk '{print $4}'), reverse the output back to normal and then sort -u (for uniq, or sort | uniq). Show Sample Output
This is sample output - yours may be different.
```
192.168.1.1
192.168.2.2
10.0.0.1
```
0

grep Failed auth.log | rev | cut -d\ -f4 | rev | sort -u

supradave · 2014-08-14 14:57:41 8

This is a specialized command for Ericsson CS5.2 - Getting the test case trace on SDP

This command allows to follow up a trace on SDP (CS5.2), at the same time as the trace records are stored in the file with "raw" format. Trace files in native format are useful to filter the records before to translation from '|' to '\n'. Example: grep -v OP_GET <raw-records>.trace | tr '|' '\n' Show Sample Output

tail -1f /var/opt/fds/logs/TraceEventLogFile.txt.0 | grep <msisdn> | tee <test-case-id>.trace | tr '|' '\n'

neomefistox · 2014-08-21 19:29:07 11

search system log for spamassassin score and list only 15th column
This is sample output - yours may be different.
0

cat /var/log/syslog | grep score= | awk '{print $15}' | more

unix1776 · 2014-08-21 21:40:17 8
monitor all open connections to specific port
This is sample output - yours may be different.
0

netstat -anp | grep ":<port>"

erez83 · 2014-08-22 07:01:38 9
Unlock your KDE4 session over SSH

So this first obtains address of the DBUS session, as it's not available by default over SSH. Then it tells plasma-overlay to exit. `kquitapp` is pretty much an equivalent of the qdbus calls.
This is sample output - yours may be different.
0

( eval $(grep -z '^DBUS_SESSION_BUS_ADDRESS' /proc/$(pgrep -u $USER plasma-overlay)/environ); export DBUS_SESSION_BUS_ADDRESS; kquitapp plasma-overlay )

mig_hg · 2014-09-01 12:49:58 9
List Canon CR2 raw files which have been in-camera rated (5Dmk3+)
This is sample output - yours may be different.
0

for I in *.CR2; do if [ `exiv2 pr -p a -u $I | grep 'xmp.Rating' | awk '{ print $4 }'` == "1" ]; then echo $I; fi; done

jbuchbinder · 2014-09-10 03:31:44 8
Docker - delete all non-running container
This is sample output - yours may be different.
0

docker ps -a | grep 'Exit' | awk '{print $1}' | xargs docker rm

j0hnb · 2014-09-19 15:23:42 8
Docker - delete unused images
This is sample output - yours may be different.
0

docker images | grep '' | awk '{print $3}' | xargs docker rmi

j0hnb · 2014-09-19 15:24:12 25
Resource Monitoring

Monitoring system in one line : DISK : disk space MEM: memory ( mem , swap, Total) CPU : all information about cpu activity LOAD : load average Show Sample Output
This is sample output - yours may be different.
```
DISK:
94% /
6% /boot
0% /dev/shm
MEM:
total used free shared
Mem: 7983 7580 403
Swap: 12287 6 12281
Total: 20271 7586 12685
CPU:
0.3%us, 0.2%sy, 0.1%ni, 98.2%id, 1.1%wa, 0.0%hi, 0.1%si, 0.0%st
LOAD:
0.02 0.03 0.00 1/417 15018
```
0

echo "DISK:";df -Pl | grep -v "Filesystem" | awk '{print $5,$6}' ; echo "MEM:" ; free -mto | awk '{ print $1,$2,$3,$4 }'; echo "CPU:"; top -b -d1 -n1 | grep Cpu | awk '{print $2,$3,$4,$5,$6,$7,$8,$9}';echo "LOAD:"; cat /proc/loadavg

injez · 2014-09-29 12:43:52 35
Git branches I checked-out on a specific date

Replace "Oct 2" in the first grep pattern to be the date to view branch work from Show Sample Output
This is sample output - yours may be different.
```
my_new_feature
my_second_new_feature
master
```
0

git reflog --date=local | grep "Oct 2 .* checkout: moving from .* to" | grep -o "[a-zA-Z0-9\-]*$" | sort | uniq

Trindaz · 2014-10-03 15:12:22 8
BOFH Excuse using curl

Sure, it's dirty, but it's quick, it only displays the excuse, and it works. Show Sample Output
This is sample output - yours may be different.
```
Rhythmic variations in the voltage reaching the power supply.
```
0

curl -s http://pages.cs.wisc.edu/~ballard/bofh/bofhserver.pl |grep 'is:' |awk 'BEGIN { FS=">"; } { print $10; }'

toj · 2014-10-10 21:17:33 7
Basic search for Quassel PostgreSQL database

Replace the credentials to psql if necessary, and the my-query part with your query. Show Sample Output
This is sample output - yours may be different.
```
alias quassel-grep='psql -U quassel quassel -c "SELECT message FROM backlog ORDER BY time DESC LIMIT 1000;" | grep'

# Get messages directed at me
quassel-grep -E Tatsh[,\:]
```
0

psql -U quassel quassel -c "SELECT message FROM backlog ORDER BY time DESC LIMIT 1000;" | grep my-query

Tatsh · 2014-10-12 19:53:06 7
Install every (not already installed) component of the Google Cloud SDK

Google Cloud SDK comes with a package manager `gcloud components` but it needs a bit of `sed` to work. Modify the "^| Not" bit to change the package selection. (The gcloud --format option is currently broken) Show Sample Output
This is sample output - yours may be different.
```
gcloud components update pkg-go pkg-java pkg-python app gae-python-launcher-mac gae-go gae-java gae-python
```
0

gcloud components list | grep "^| Not" | sed "s/|$.*$|$.*$|$.*$|/\2/" | xargs echo gcloud components update

wires · 2014-10-13 20:52:25 11
Get domains on the server

Allows you to have a list of the domains on the server.
This is sample output - yours may be different.
0

cat /etc/named.conf | grep -Po '(?<=(named/)).*(?=\.db)'

KonKar · 2014-10-25 20:16:17 6
Get all URL With Extension from File
This is sample output - yours may be different.
0

cat File.txt | grep -io 'http://www.acme.com/a/files/.*.pdf'| uniq

nedzoul · 2014-10-31 14:51:57 8
Regex to reliably search a file for valid IP addresses (and external IP addresses)

Command returns valid IP addresses. Append the following regex to additionally filter out NAT and reserved IP addresses | grep -Ev "^0|\.0[0-9]|^10\.|^127\.|^169\.|^172\.(1[6-9]|2[0-9]|3[01])|^192.168.|^2(2[4-9]|3[0-9])|^2(4[0-9]|5[0-5])"
This is sample output - yours may be different.
0

grep -Eoa "\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b" Filetosearch.txt

jsbrown · 2014-11-02 19:50:54 8
List fonts used by an SVG file

List all fonts used by an SVG file. Useful to find out which fonts you need to have installed in order to open/edit an SVG file appropriately. Show Sample Output
This is sample output - yours may be different.
```
Candara
Caviar Dreams
Chubby Cheeks
ComickBook
Folks
FolksBlack
Folks-Bold
```
0

grep 'font-family:[^;]*' <input file.svg> | sed 's/.*font-family:$[^;]*$.*/\1/g' | sort | uniq

caiosba · 2014-11-03 20:38:08 80
Find a process by name and automatically kill it
This is sample output - yours may be different.
0

PID=$(ps -ef | grep processName | grep -v grep | awk '{print $2'}); kill -9 $PID

lysergication · 2014-11-11 05:12:19 10
Check if a port is open to the internet using canyouseeme.org

For now just returns either "Success" or "Error". My awk-fu isn't strong enough to hackily parse out the error in case there is one, so I kept it simple. Show Sample Output
This is sample output - yours may be different.
```
~ user@host
&#10095; cysm 80
Success

~ user@host
&#10095; cysm 443
Error
```
0

cysm() { curl -sd port="$1" http://canyouseeme.org |grep -o 'Success\|Error' }

awh · 2014-11-11 23:30:39 8
Count the number of pages of all PDFs in current directory and all subdirs, recursively

using awk, changed the line given by sucotronic in command #11733 to print the first and second columns Show Sample Output
This is sample output - yours may be different.
```
NumberOfPages: 190
NumberOfPages: 96
NumberOfPages: 92
NumberOfPages: 152
NumberOfPages: 102
NumberOfPages: 126
NumberOfPages: 156
NumberOfPages: 84
NumberOfPages: 110
NumberOfPages: 170
NumberOfPages: 72
NumberOfPages: 98
NumberOfPages: 154
NumberOfPages: 131
NumberOfPages: 84
```
0

find . -name "*.pdf" -exec pdftk {} dump_data output \; | grep NumberOfPages | awk '{print $1,$2}'

mtrgrrl · 2014-11-14 23:36:56 8
Show your font name list
This is sample output - yours may be different.
0

fc-query ./fonts/* | grep "family:" | cut -d '"' -f 2 | sort -u

kokoye2007 · 2014-11-16 22:12:07 8
‹ First < 51 52 53 54 55 > Last ›

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Check These Out

Detect illegal access to kernel space, potentially useful for Meltdown detection

Based on capsule8 agent examples, not rigorously tested

Remote backups with tar over ssh

Execute it from the source host, where the source files you wish backup resides. With the minus '-' the tar command deliver the compressed output to the standar output and, trough over the ssh session to the remote host. On the other hand the backup host will be receive the stream and read it from the standar input sending it to the /path/to/backup/backupfile.tar.bz2

Create a square thumbnail or favicon using ImageMagick

Resize `file.png` to a 32x32 px image. Use a value other than 32 to create other icon sizes (e.g. 16x16 or 32x32). Combine two favicon sizes using: `convert icon-16px.png icon-32px.png favicon.ico` For a social media preview image, use `2:1#` for the extent and `1200` for the scale.

Simulate slow network connection locally

Replace 500ms by the desired delay. To remove it: sudo tc qdisc del dev lo root netem delay 500ms

ping MAC ADDRESS

# first install arp-scan if not have it arp-scan 10.1.1.0/24 .... show ip+mac in localnet awk '/00:1b:11:dc:a9:65/ {print $1}' .... get ip associated with MAC ` backtick make do command substitution passing ip to command ping

Give all those pictures the same name format, trailing zeros please for the right order, offset to merge different collections of pictures

When you have different digital cameras, different people, friends and you want to merge all those pictures together, then you get files with same names or files with 3 and 4 digit numbers etc. The result is a mess if you copy it together into one directory. But if you can add an offset to the picture number and set the number of leading zeros in the file name's number then you can manage. OFFS != 0 and LZ the same as the files currently have is not supported. Or left as an exercise, hoho ;) I love NF="${NF/#+(0)/}",it looks like a magic bash spell.

Get the list of root nameservers for a given TLD

list files recursively by size

Convert seconds to [DD:][HH:]MM:SS

Converts any number of seconds into days, hours, minutes and seconds. sec2dhms() { declare -i SS="$1" D=$(( SS / 86400 )) H=$(( SS % 86400 / 3600 )) M=$(( SS % 3600 / 60 )) S=$(( SS % 60 )) [ "$D" -gt 0 ] && echo -n "${D}:" [ "$H" -gt 0 ] && printf "%02g:" "$H" printf "%02g:%02g\n" "$M" "$S" }

Get AWS temporary credentials ready to export based on a MFA virtual appliance

You might want to secure your AWS operations requiring to use a MFA token. But then to use API or tools, you need to pass credentials generated with a MFA token. This commands asks you for the MFA code and retrieves these credentials using AWS Cli. To print the exports, you can use: `awk '{ print "export AWS_ACCESS_KEY_ID=\"" $1 "\"\n" "export AWS_SECRET_ACCESS_KEY=\"" $2 "\"\n" "export AWS_SESSION_TOKEN=\"" $3 "\"" }'` You must adapt the command line to include: * $MFA_IDis ARN of the virtual MFA or serial number of the physical one * TTL for the credentials

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)
» commands using grep

Commands using grep (1,935) the last day the last week the last month all time sorted by date votes

What's this?

Check These Out

Stay in the loop…

Commands using grep (1,935)

sorted by