Bash command to find and cut string

Question

I am genereting txt information with tcpdump. In output there is lots of information which contains something like that for instance:

Cookie: id=8xdza1ud39t459hv5bkth4t9gx71dicp; _ga=GA1.2.1890484279.1447252334; __gfp_64b=64smeVuOU7LSnfV8__mvHUkZFQF4lddYYY2X0c0HYAj.S7; __gads=ID=6ccc5cd620798f1a:T=1451575639:S=ALNI_MYeOVLFzU3qJTBxFq6KrdK10QDVrg; __utma=37331766.1890484279.1447252334.1451770396.1451770396.1; __utmz=37331766.1451770296.1.1.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided); PHPSESSID=70c71a0c25d7d0425c657cee8f30dc2d; OX_sd=1; OX_plg=swf|shk|pm; _gat=1; _gat_newTracker=1; id=iyybhxg7524r2gcuvpguzvbse18c9c21

Is it possible to cut only this info from what i have and send it to another output? To match above cookie it needs to be a string which starts with "Cookie" ,ends with "id" atribute and contains "PHPSEESSID".

Can you show your sample input?

anubhava
– anubhava

2016-01-03 13:24:16 +00:00
Commented Jan 3, 2016 at 13:24 — anubhava
– anubhava, Commented Jan 3, 2016 at 13:24

Lars Fischer · Accepted Answer · 2016-01-03 13:05:30Z

2

You coud try something like grep -E "^Cookie:.*PHPSESSID.* id=[^ ]+$".

It matches a line that

starts (^) with Cookie:
contains PHPSESSID (.*PHPSESSID.*)
and ends ($) with an id= field, due the [^ ] which prohibits spaces following the id=

answered Jan 3, 2016 at 13:05

Lars Fischer

10.4k3 gold badges31 silver badges38 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

user3451725 · Accepted Answer · 2016-01-03 15:30:25Z

0

Use the grep command with there required regex to match

answered Jan 3, 2016 at 15:30

user3451725

1132 silver badges11 bronze badges

Collectives™ on Stack Overflow

Bash command to find and cut string

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related