Query: grokevt-findlogs
OS: debian
Section: 1
Format: Original Unix Latex Style Formatted with HTML and a Horizontal Scroll Bar
grokevt-findlogs(1) grokevt-findlogs(1)NAMEgrokevt-findlogs - Attempts to find log file fragments in raw binary files, such as memory dumps and disk images.SYNOPSISgrokevt-findlogs -? .PP grokevt-findlogs [-v] [-h] [-H] [-o offset] raw-file .SH DESCRIPTION grokevt-findlogs searches a raw binary file for event log records. It produces a simple comma-separated values (CSV) output to stdout which includes metadata and offsets of any hits. Using the metadata and offset/contiguity information, it should be easy to determine if the hits are false positives or not.ARGUMENTSraw-file The binary file to be searched.OPTIONS-? Prints a basic usage statement. -v Verbose mode. Prints status messages to stderr, which can be helpful for debugging. (Currently does nothing.) -h Prints a header row at the top of the CSV output containing labels for each column. (This is the default behavior.) -H Disables the printing of a header row. This is useful when grokevt-findlogs is used in a script. -o offset Begin search at this byte offset within the binary file.BUGSProbably a few. This script has not been extensively tested with some guest platforms. There are likely some speed improvements that could be made.CREDITSWritten by Timothy D. Morgan Copyright (C) 2006-2007 Timothy D. MorganLICENSEPlease see the file "LICENSE" included with this software distribution. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MER- CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License version 2 for more details.SEE ALSOgrokevt(7) grokevt-addlog(1) grokevt-builddb(1) grokevt-dumpmsgs(1) grokevt-parselog(1) grokevt-ripdll(1) File Conversion Utilities 20 March 2008 grokevt-findlogs(1)
Related Man Pages |
---|
sg_read_buffer(8) - centos |
grokevt-builddb(1) - debian |
grokevt-ripdll(1) - debian |
reglookup-timeline(1) - debian |
bio::primerdesigner::primer3(3pm) - debian |
Similar Topics in the Unix Linux Community |
---|
Change format to file II |
Morgan Stanley and Citi/Wachovia ??? |
Problem in creating CSV file |
Append data to new row in CSV file every day |
CSV File with Multiple Search Parameter |