Add ability to read search string from stdin
[khome.git] / home / lib / login_functions.sh
CommitLineData
e0dbdb36
SK
1#
2
8c2bec63
SK
3## ws: web search
4ws() {
56b5d8cf
SK
5 local line search_string0 search_string
6
7 search_string0="$*"
8 case "$search_string0" in
9 '')
10 while read -r line; do
11 search_string="${search_string} ${line}"
12 done;;
13 *)
14 search_string="$search_string0";;
15 esac
16
17 firefox --search "$search_string"
8c2bec63
SK
18}
19
e0dbdb36
SK
20d() {
21 local -r word=$(fzf < /usr/share/dict/words)
22 dict "$word"
23}
24
94df2def 25shell_activity_report() {
ec81fc0a 26 # TODO: optional concrete number output
ec81fc0a 27 # TODO: optional combinations of granularities: hour, weekday, month, year
d72bfd8f
SK
28 local group_by="$1"
29 case "$group_by" in
30 'mon') ;;
31 'dow') ;;
32 '') group_by='dow';;
33 *)
957b0d4f 34 echo "Usage: $0 [mon|dow]" >&2
4b5a2977 35 kill -INT $$
d72bfd8f 36 esac
94df2def 37 history \
d72bfd8f
SK
38 | awk -v group_by="$group_by" '
39 function date2dow(y, m, d, _t, _i) {
40 # Contract:
41 # y > 1752, 1 <= m <= 12.
42 # Source:
43 # Sakamoto`s methods
44 # https://en.wikipedia.org/wiki/Determination_of_the_day_of_the_week#Sakamoto%27s_methods
45 _t[ 0] = 0
46 _t[ 1] = 3
47 _t[ 2] = 2
48 _t[ 3] = 5
49 _t[ 4] = 0
50 _t[ 5] = 3
51 _t[ 6] = 5
52 _t[ 7] = 1
53 _t[ 8] = 4
54 _t[ 9] = 6
55 _t[10] = 2
56 _t[11] = 4
57 y -= m < 3
58 _i = int(y + y/4 - y/100 + y/400 + _t[m - 1] + d) % 7
59 _i = _i == 0 ? 7 : _i # Make Sunday last
60 return _i
61
62 }
63
94df2def 64 {
ec81fc0a
SK
65 # NOTE: $2 & $3 are specific to oh-my-zsh history output
66 date = $2
94df2def 67 time = $3
ec81fc0a
SK
68 d_fields = split(date, d, "-")
69 t_fields = split(time, t, ":")
70 if (t_fields && d_fields) {
71 # +0 to coerce number from string
d72bfd8f 72 year = d[1] + 0
ec81fc0a 73 month = d[2] + 0
d72bfd8f 74 day = d[3] + 0
ec81fc0a 75 hour = t[1] + 0
d72bfd8f
SK
76 dow = date2dow(year, month, day)
77 g = group_by == "mon" ? month : dow # dow is default
78 c = count[g, hour]++
94df2def 79 }
ec81fc0a
SK
80 if (c > max)
81 max = c
94df2def
SK
82 }
83
ec81fc0a 84 END {
d72bfd8f
SK
85 w[1] = "Monday"
86 w[2] = "Tuesday"
87 w[3] = "Wednesday"
88 w[4] = "Thursday"
89 w[5] = "Friday"
90 w[6] = "Saturday"
91 w[7] = "Sunday"
92
ec81fc0a
SK
93 m[ 1] = "January"
94 m[ 2] = "February"
95 m[ 3] = "March"
96 m[ 4] = "April"
97 m[ 5] = "May"
98 m[ 6] = "June"
99 m[ 7] = "July"
100 m[ 8] = "August"
101 m[ 9] = "September"
102 m[10] = "October"
103 m[11] = "November"
104 m[12] = "December"
d72bfd8f
SK
105
106 n = group_by == "mon" ? 12 : 7 # dow is default
107
108 for (gid = 1; gid <= n; gid++) {
109 group = group_by == "mon" ? m[gid] : w[gid]
110 printf "%s\n", group;
94df2def 111 for (hour=0; hour<24; hour++) {
d72bfd8f 112 c = count[gid, hour]
ec81fc0a
SK
113 printf " %2d ", hour
114 for (i = 1; i <= (c * 100) / max; i++)
94df2def
SK
115 printf "|"
116 printf "\n"
117 }
ec81fc0a
SK
118 }
119 }'
94df2def
SK
120}
121
d265cd11
SK
122top_commands() {
123 history \
124 | awk '
125 {
126 count[$4]++
127 }
128
129 END {
130 for (cmd in count)
131 print count[cmd], cmd
132 }' \
133 | sort -n -r -k 1 \
134 | head -50 \
135 | awk '
136 {
137 cmd[NR] = $2
138 c = count[NR] = $1 + 0 # + 0 to coerce number from string
139 if (c > max)
140 max = c
141 }
142
143 END {
144 for (i = 1; i <= NR; i++) {
145 c = count[i]
146 printf "%s %d ", cmd[i], c
147 scaled = (c * 100) / max
148 for (j = 1; j <= scaled; j++)
149 printf "|"
150 printf "\n"
151 }
152 }' \
153 | column -t
154}
155
c7de24d9 156# Top Disk-Using directories
58bdbfbf 157# TODO: Consider using numfmt instead of awk
c7de24d9
SK
158tdu() {
159 du "$1" \
c7de24d9
SK
160 | awk '
161 {
162 size = $1
163 path = $0
164 sub("^" $1 "\t+", "", path)
502dff1e
SK
165 paths[path] = size
166 if (size > max)
167 max = size
168 }
169
170 END {
171 for (path in paths) {
172 size = paths[path]
173 pct = 100 * (size / max)
174 gb = size / 1024 / 1024
175 printf("%6.2f %3d%% %s\n", gb, pct, path)
176 }
177 }
178 ' \
179 | sort -r -n -k 1 \
180 | head -50 \
181 | tac
182 # A slight optimization: head can exit before traversing the full input.
c7de24d9
SK
183}
184
27456eb6
SK
185# Top Disk-Using Files
186tduf() {
187 find "$1" -type f -printf '%s\t%p\0' \
858aa230
SK
188 | sort -z -n -k 1 \
189 | tail -z -n 50 \
27456eb6
SK
190 | gawk -v RS='\0' '
191 {
192 size = $1
193 path = $0
194 sub("^" $1 "\t+", "", path)
195 gb = size / 1024 / 1024 / 1024
196 printf("%f\t%s\n", gb, path)
197 }'
198}
199
909ece30
SK
200# Most-recently modified file system objects
201recent() {
68992a1d
SK
202 # NOTES:
203 # - intentionally not quoting the parameters, so that some can be ignored
204 # if not passed, rather than be passed to find as an empty string;
205 # - %T+ is a GNU extension;
206 # - gawk is able to split records on \0, while awk cannot.
909ece30 207 find $@ -printf '%T@ %T+ %p\0' \
68992a1d 208 | tee >(gawk -v RS='\0' 'END { printf("[INFO] Total found: %d\n", NR); }') \
909ece30
SK
209 | sort -z -k 1 -n -r \
210 | head -n "$(stty size | awk 'NR == 1 {print $1 - 5}')" -z \
211 | gawk -v RS='\0' '
212 {
213 sub("^" $1 " +", "") # Remove epoch time
214 sub("+", " ") # Blank-out the default separator
215 sub("\\.[0-9]+", "") # Remove fractional seconds
216 print
217 }'
909ece30
SK
218}
219
220recent_dirs() {
221 recent "$1" -type d
222}
223
224recent_files() {
225 recent "$1" -type f
226}
227
c7de24d9
SK
228pa_def_sink() {
229 pactl info | awk '/^Default Sink:/ {print $3}'
230}
231
232void_pkgs() {
233 curl "https://xq-api.voidlinux.org/v1/query/x86_64?q=$1" | jq '.data'
234}
235
236# Colorful man
237man() {
0c296cad
SK
238 # mb: begin blink
239 # md: begin bold
240 # me: end bold, blink and underline
241 #
242 # so: begin standout (reverse video)
243 # se: end standout
244 #
245 # us: begin underline
246 # ue: end underline
247
d93397a6 248 LESS_TERMCAP_md=$'\e[01;30m' \
c7de24d9 249 LESS_TERMCAP_me=$'\e[0m' \
c7de24d9 250 LESS_TERMCAP_so=$'\e[01;44;33m' \
fc2ae05b 251 LESS_TERMCAP_se=$'\e[0m' \
d93397a6 252 LESS_TERMCAP_us=$'\e[01;33m' \
fc2ae05b 253 LESS_TERMCAP_ue=$'\e[0m' \
c7de24d9
SK
254 command man "$@"
255}
64ec9f23 256
1be8e74b
SK
257# new experiment
258x() {
259 cd "$(~/bin/x $@)" || kill -INT $$
64ec9f23 260}
801dd7bd
SK
261
262hump() {
2e8cf226 263 ledit -l "$(stty size | awk '{print $2}')" ocaml $@
801dd7bd 264}
632b7c4a
SK
265
266howto() {
a42aa7f8 267 cat "$(find ~/arc/doc/HOWTOs -mindepth 1 -maxdepth 1 | sort | fzf)"
632b7c4a 268}
f4e0bb58 269
86b74662
SK
270_yt() {
271 local -r base_dir="$1"
e5eff223
SK
272 local -r uri="$2"
273 local -r opts="$3"
86b74662
SK
274
275 local -r id=$(youtube-dlc --get-id "$uri")
7a665e9c 276 local -r title=$(youtube-dlc --get-title "$uri" | sed 's/[^А-Яа-яA-Za-z0-9._-]/_/g')
86b74662
SK
277 local -r dir="${base_dir}/${title}--${id}"
278
279 mkdir -p "$dir"
280 cd "$dir" || kill -INT $$
281 echo "$uri" > 'uri'
282 youtube-dlc $opts -c --write-description --write-info-json "$uri"
283}
284
285yt_audio() {
286 local -r uri="$1"
e5eff223 287 _yt "${DIR_YOUTUBE_AUDIO}/individual" "$uri" '-f 140'
86b74662
SK
288}
289
290yt_video() {
291 local -r uri="$1"
292 _yt "${DIR_YOUTUBE_VIDEO}/individual" "$uri"
60e43329
SK
293}
294
f4e0bb58 295gh_fetch_repos() {
84a0359e
SK
296 local -r user_type="$1"
297 local -r user_name="$2"
298
299 curl "https://api.github.com/$user_type/$user_name/repos?page=1&per_page=10000"
f4e0bb58
SK
300}
301
302gh_clone() {
1f80896b
SK
303 local -r gh_user_type="$1"
304 local -r gh_user_name="$2"
305
306 local -r gh_dir="${DIR_GITHUB}/${gh_user_name}"
8aa18398 307 mkdir -p "$gh_dir"
4b5a2977 308 cd "$gh_dir" || kill -INT $$
8aa18398 309 gh_fetch_repos "$gh_user_type" "$gh_user_name" \
f4e0bb58
SK
310 | jq --raw-output '.[] | select(.fork | not) | .git_url' \
311 | parallel -j 25 \
312 git clone {}
313}
314
315gh_clone_user() {
316 gh_clone 'users' "$1"
317}
318
319gh_clone_org() {
320 gh_clone 'orgs' "$1"
321}
e09a8d5a 322
610785ef
SK
323gh_clone_repo() {
324 gh_username=$(echo "$1" | awk -F / '"$1 == "https" && $3 == github.com" {print $4}')
8aa18398 325 gh_dir="${DIR_GITHUB}/${gh_username}"
610785ef 326 mkdir -p "$gh_dir"
4b5a2977 327 cd "$gh_dir" || kill -INT $$
610785ef 328 git clone "$1"
610785ef
SK
329}
330
c45bdb58
SK
331work_log_template() {
332cat << EOF
d8da04c5 333$(date '+%F %A')
c45bdb58
SK
334==========
335
336Morning report
337--------------
338
a744f575 339### Prev
c45bdb58 340
a744f575
SK
341### Curr
342
343### Next
c45bdb58
SK
344
345### Blockers
346
347Day's notes
348-----------
349EOF
350}
351
352work_log() {
353 mkdir -p "$DIR_WORK_LOG"
773a0061 354 local -r file_work_log_today="${DIR_WORK_LOG}/daily-$(date +%F).md"
c45bdb58
SK
355 if [ ! -f "$file_work_log_today" ]
356 then
357 work_log_template > "$file_work_log_today"
358 fi
3008cd51 359 vim -c 'set spell' "$file_work_log_today"
c45bdb58
SK
360
361}
362
065977fd
SK
363note() {
364 mkdir -p "$DIR_NOTES"
3008cd51 365 vim -c 'set spell' "$DIR_NOTES/$(date +'%Y_%m_%d--%H_%M_%S%z')--$1.md"
065977fd
SK
366}
367
e09a8d5a 368weather() {
87b05c1b
SK
369 local _weather_location
370 case "$1" in
371 '') _weather_location="$WEATHER_LOCATION";;
372 *) _weather_location="$1"
373 esac
b01250dc 374 curl "http://wttr.in/$_weather_location?format=v2"
e09a8d5a 375}
2c0865d1 376
d0a246c9
SK
377_bt_devs_infos() {
378 # grep's defintion of a line does not include \r, wile awk's does and
379 # which bluetoothctl outputs
380 awk '/^Device +/ {print $2}' \
381 | xargs -I% sh -c 'echo info % | bluetoothctl' \
311f355a 382 | awk '/^Device |^\t[A-Z][A-Za-z0-9]+: /'
d0a246c9
SK
383}
384
2c0865d1 385bt_devs_paired() {
d0a246c9 386 echo 'paired-devices' | bluetoothctl | _bt_devs_infos
2c0865d1
SK
387}
388
389bt_devs() {
d0a246c9 390 echo 'devices' | bluetoothctl | _bt_devs_infos
2c0865d1 391}
dfbaafa4
SK
392
393run() {
1f80896b
SK
394 local -r stderr="$(mktemp)"
395
396 local code urgency
397
dfbaafa4
SK
398 $@ 2> >(tee "$stderr")
399 code="$?"
dfbaafa4
SK
400 case "$code" in
401 0) urgency='normal';;
402 *) urgency='critical'
403 esac
404 notify-send -u "$urgency" "Job done: $code" "$(cat $stderr)"
405 rm "$stderr"
406}
3f673776
SK
407
408bar_gauge() {
948953b2
SK
409 awk "$@" '
410 BEGIN {
325a679e 411 # CLI options
f865d284 412 width = width ? width : 80
948953b2
SK
413 ch_left = ch_left ? ch_left : "["
414 ch_right = ch_right ? ch_right : "]"
415 ch_blank = ch_blank ? ch_blank : "-"
416 ch_used = ch_used ? ch_used : "|"
325a679e
SK
417 num = num ? 1 : 0
418 pct = pct ? 1 : 0
948953b2 419 }
3f673776 420
3f673776 421 {
e89edca7
SK
422 cur = $1
423 max = $2
424 lab = $3
3f673776 425
948953b2 426 cur_scaled = num_scale(cur, max, 1, width)
3f673776 427
948953b2 428 printf \
48c23173 429 "%s%s%s%s", \
948953b2
SK
430 lab ? lab " " : "", \
431 num ? cur "/" max " " : "", \
48c23173 432 pct ? sprintf("%3.0f%% ", cur / max * 100) : "", \
948953b2 433 ch_left
3f673776 434 for (i=1; i<=width; i++) {
948953b2 435 c = i <= cur_scaled ? ch_used : ch_blank
bcc030dc 436 printf "%s", c
3f673776 437 }
948953b2 438 printf "%s\n", ch_right
3f673776
SK
439 }
440
441 function num_scale(src_cur, src_max, dst_min, dst_max) {
442 return dst_min + ((src_cur * (dst_max - dst_min)) / src_max)
443 }
444 '
445}
446
9699e21d
SK
447flat_top_5() {
448 sort -n -k 1 -r \
449 | head -5 \
450 | awk '
451 {
452 cur = $1
453 max = $2
454 name = $3
455 pct = cur / max * 100
2cb32f21
SK
456 printf "%s%s %.2f%%", sep, name, pct
457 sep = ", "
9699e21d
SK
458 }
459
460 END {printf "\n"}
2cb32f21 461 '
9699e21d
SK
462}
463
ab62e6ac
SK
464internet_addr() {
465 curl --silent --show-error --max-time "${1:=1}" 'https://api.ipify.org' 2>&1
466}
467
3914b6b1 468status_batt() {
3f673776
SK
469 case "$(uname)" in
470 'Linux')
db8ff593
SK
471 if which upower > /dev/null
472 then
473 upower --dump \
474 | awk '
475 /^Device:[ \t]+/ {
476 device["path"] = $2
477 next
478 }
479
480 / battery/ && device["path"] {
481 device["is_battery"] = 1
482 next
483 }
484
485 / percentage:/ && device["is_battery"] {
486 device["battery_percentage"] = $2
487 sub("%$", "", device["battery_percentage"])
488 next
489 }
490
491 /^$/ {
492 if (device["is_battery"] && device["path"] == "/org/freedesktop/UPower/devices/DisplayDevice")
493 print device["battery_percentage"], 100, "batt"
494 delete device
495 }
496 '
497 fi
3f673776
SK
498 ;;
499 esac
54031225
SK
500}
501
502indent() {
503 awk -v unit="$1" '{printf "%s%s\n", unit, $0}'
504}
505
3914b6b1 506status() {
54031225
SK
507 local -r indent_unit=' '
508
509 uname -srvmo
510 hostname | figlet
511 uptime
3f673776 512
291e586a
SK
513 echo
514
2cb32f21
SK
515 echo 'accounting'
516
517 printf '%stmux\n%ssessions %d, clients %d\n' \
518 "$indent_unit" \
519 "${indent_unit}${indent_unit}" \
8a52188c
SK
520 "$(tmux list-sessions 2> /dev/null | wc -l)" \
521 "$(tmux list-clients 2> /dev/null | wc -l)"
54031225
SK
522
523 echo
524
2cb32f21
SK
525 printf '%sprocs by user\n' "${indent_unit}"
526 ps -eo user \
527 | awk '
528 NR > 1 {
529 count_by_user[$1]++
530 total++
531 }
532
533 END {
534 for (user in count_by_user)
535 print count_by_user[user], total, user
536 }
537 ' \
538 | flat_top_5 \
539 | indent "${indent_unit}${indent_unit}"
540
541 echo
542
543 echo 'resources'
54031225 544 (
e89edca7
SK
545 free | awk '$1 == "Mem:" {print $3, $2, "mem"}'
546 df ~ | awk 'NR == 2 {print $3, $3 + $4, "disk"}'
3914b6b1 547 status_batt
54031225 548 ) \
f865d284 549 | bar_gauge -v width=60 -v pct=1 \
54031225
SK
550 | column -t \
551 | indent "$indent_unit"
552
553 echo
554
2cb32f21 555 printf '%smem by proc\n' "$indent_unit"
fbcc6a55 556 ps -eo rss,comm \
c5f3db43 557 | awk -v total="$(free | awk '$1 == "Mem:" {print $2; exit}')" '
2cb32f21
SK
558 NR > 1 {
559 rss = $1
fbcc6a55 560 proc = $2
02f10c8b 561 by_proc[proc] += rss
2cb32f21
SK
562 }
563
564 END {
565 for (proc in by_proc)
566 print by_proc[proc], total, proc
567 }
568 ' \
569 | flat_top_5 \
570 | indent "${indent_unit}${indent_unit}"
571
572 echo
573
d87138ae
SK
574 local _dir temp_input label_file label
575
b7ea4f20 576 printf '%sthermal\n' "$indent_unit"
d87138ae
SK
577 for _dir in /sys/class/hwmon/hwmon*; do
578 cat "$_dir"/name
579 find "$_dir"/ -name 'temp*_input' \
580 | while read -r temp_input; do
581 label_file=${temp_input//_input/_label}
582 if [ -f "$label_file" ]; then
583 label=$(< "$label_file")
584 else
585 label=''
586 fi
587 awk -v label="$label" '{
588 if (label)
589 label = sprintf(" (%s)", label)
590 printf("%.2f°C%s\n", $1 / 1000, label)
591 }' \
592 "$temp_input"
593 done \
594 | sort \
595 | indent "$indent_unit"
b7ea4f20 596 done \
b7ea4f20
SK
597 | indent "${indent_unit}${indent_unit}"
598
599 echo 'net'
713423d0
SK
600 #local -r internet_addr=$(internet_addr 0.5)
601 #local -r internet_ptr=$(host -W 1 "$internet_addr" | awk 'NR == 1 {print $NF}' )
b8651fc6 602
713423d0
SK
603 #echo "${indent_unit}internet"
604 #echo "${indent_unit}${indent_unit}$internet_addr $internet_ptr"
857e80ac 605 echo "${indent_unit}if"
291e586a
SK
606 (ifconfig; iwconfig) 2> /dev/null \
607 | awk '
608 /^[^ ]/ {
609 device = $1
610 sub(":$", "", device)
611 if ($4 ~ "ESSID:") {
612 _essid = $4
613 sub("^ESSID:\"", "", _essid)
614 sub("\"$", "", _essid)
615 essid[device] = _essid
616 }
617 next
618 }
619
620 /^ / && $1 == "inet" {
621 address[device] = $2
622 next
623 }
624
625 /^ +Link Quality=[0-9]+\/[0-9]+ +Signal level=/ {
626 split($2, lq_parts_eq, "=")
627 split(lq_parts_eq[2], lq_parts_slash, "/")
628 cur = lq_parts_slash[1]
629 max = lq_parts_slash[2]
630 link[device] = cur / max * 100
631 next
632 }
633
634 END {
635 for (device in address)
636 if (device != "lo") {
637 l = link[device]
638 e = essid[device]
164f3674 639 l = l ? sprintf("%.0f%%", l) : "--"
291e586a
SK
640 e = e ? e : "--"
641 print device, address[device], e, l
642 }
643 }
644 ' \
54031225
SK
645 | column -t \
646 | indent "${indent_unit}${indent_unit}"
291e586a 647
3f673776 648 # WARN: ensure: $USER ALL=(ALL) NOPASSWD:/bin/netstat
857e80ac
SK
649
650 echo "${indent_unit}-->"
651
4eb99bdc
SK
652 sudo -n netstat -tulnp \
653 | awk -v indent="${indent_unit}${indent_unit}" '
654 NR > 2 && ((/^tcp/ && proc = $7) || (/^udp/ && proc = $6)) {
655 protocol = $1
656 addr = $4
657 port = a[split(addr, a, ":")]
658 name = p[split(proc, p, "/")]
659 names[name] = 1
660 protocols[protocol] = 1
661 if (!seen[protocol, name, port]++)
662 ports[protocol, name, ++seen[protocol, name]] = port
663 }
664
665 END {
666 for (protocol in protocols) {
667 printf "%s%s\t", indent, toupper(protocol)
668 for (name in names) {
669 if (n = seen[protocol, name]) {
670 sep = ""
671 printf "%s:", name
672 for (i = 1; i <= n; i++) {
673 printf "%s%d", sep, ports[protocol, name, i]
674 sep = ","
675 }
676 printf " "
677 }
678 }
679 printf "\n"
680 }
681 }'
857e80ac
SK
682
683 echo "${indent_unit}<->"
684
0f8aaa1b 685 printf '%sTCP\t' "${indent_unit}${indent_unit}"
857e80ac
SK
686 sudo -n netstat -tnp \
687 | awk 'NR > 2 && $6 == "ESTABLISHED" {print $7}' \
e99563b8 688 | awk '{sub("^[0-9]+/", ""); print}' \
857e80ac
SK
689 | sort -u \
690 | xargs \
691 | column -t
5dfe845a
SK
692
693 # TODO: iptables summary
3f673776 694}
ae23e5e3 695
b635bb83 696ssh_invalid_by_addr() {
ae23e5e3
SK
697 awk '
698 /: Invalid user/ && $5 ~ /^sshd/ {
ae23e5e3
SK
699 addr=$10 == "port" ? $9 : $10
700 max++
b635bb83 701 by_addr[addr]++
ae23e5e3
SK
702 }
703
704 END {
b635bb83
SK
705 for (addr in by_addr)
706 if ((c = by_addr[addr]) > 1)
707 printf "%d %d %s\n", c, max, addr
708 }
709 ' \
710 /var/log/auth.log \
711 /var/log/auth.log.1 \
712 | sort -n -k 1 \
713 | bar_gauge -v width="$(stty size | awk '{print $2}')" -v num=1 -v ch_right=' ' -v ch_left=' ' -v ch_blank=' ' \
714 | column -t
715}
716
717ssh_invalid_by_day() {
718 awk '
719 BEGIN {
720 m["Jan"] = "01"
721 m["Feb"] = "02"
722 m["Mar"] = "03"
723 m["Apr"] = "04"
724 m["May"] = "05"
725 m["Jun"] = "06"
726 m["Jul"] = "07"
727 m["Aug"] = "08"
728 m["Sep"] = "09"
729 m["Oct"] = "10"
730 m["Nov"] = "11"
731 m["Dec"] = "12"
732 }
733
734 /: Invalid user/ && $5 ~ /^sshd/ {
735 day = m[$1] "-" $2
736 max++
737 by_day[day]++
738 }
739
740 END {
741 for (day in by_day)
742 if ((c = by_day[day]) > 1)
743 printf "%d %d %s\n", c, max, day
744 }
745 ' \
746 /var/log/auth.log \
747 /var/log/auth.log.1 \
b2402792 748 | sort -k 3 \
b635bb83
SK
749 | bar_gauge -v width="$(stty size | awk '{print $2}')" -v num=1 -v ch_right=' ' -v ch_left=' ' -v ch_blank=' ' \
750 | column -t
751}
752
753ssh_invalid_by_user() {
754 awk '
755 /: Invalid user/ && $5 ~ /^sshd/ {
756 user=$8
757 max++
758 by_user[user]++
759 }
760
761 END {
762 for (user in by_user)
763 if ((c = by_user[user]) > 1)
764 printf "%d %d %s\n", c, max, user
ae23e5e3
SK
765 }
766 ' \
767 /var/log/auth.log \
768 /var/log/auth.log.1 \
769 | sort -n -k 1 \
ea9d43c9 770 | bar_gauge -v width="$(stty size | awk '{print $2}')" -v num=1 -v ch_right=' ' -v ch_left=' ' -v ch_blank=' ' \
ae23e5e3
SK
771 | column -t
772}
fecd2781
SK
773
774loggers() {
775 awk '
776 {
777 split($5, prog, "[")
778 sub(":$", "", prog[1]) # if there were no [], than : will is left behind
779 print prog[1]
abbf7a2a 780 }' /var/log/syslog /var/log/syslog.1 \
fecd2781
SK
781 | awk '
782 {
783 n = split($1, path, "/") # prog may be in path form
784 prog = path[n]
785 total++
786 count[prog]++
787 }
788
789 END {
790 for (prog in count)
791 print count[prog], total, prog
792 }' \
edc3863d 793 | sort -n -k 1 \
fecd2781
SK
794 | bar_gauge -v num=1 -v ch_right=' ' -v ch_left=' ' -v ch_blank=' ' \
795 | column -t
796}
This page took 0.22266 seconds and 4 git commands to generate.