prositen / modsecurity-grep Goto Github PK

e.g.

"GET /"

instead of

"GET / HTTP/1.1"

with e.g. different-colored background

Traceback (most recent call last):
File "./greplog.py", line 690, in
main(sys.argv[1:])
File "./greplog.py", line 681, in main
for x in greplog.parse_line(line.strip(), fileinput.filelineno()):
File "./greplog.py", line 652, in parse_line
for x in self.message.handle():
File "./greplog.py", line 519, in handle
yield self.start()
File "./greplog.py", line 502, in start
timestamp=self.parts[LogParts.STARTED].format_timestamp() if self.args.show_timestamp else "",
File "./greplog.py", line 308, in format_timestamp
return '{date:s} {timestamp:s}'.format(date=self.date.strftime('%Y-%m-%d'),
AttributeError: 'NoneType' object has no attribute 'strftime'

Since the script supports grep:ing through multiple files, we should also display which file each log line originated from.

e.g. --with_parameter campaign_id=12345

Piping through less is ugly, since you'll get a KeyboardInterrupt exception if you want to quit midway through.

Look at e.g. https://pypi.python.org/pypi/pager or http://chase-seibert.github.io/blog/2012/10/31/python-fork-exec-vim-raw-input.html

E.g

search for 09:45:22 +- 1min

Search through gzipped files.

e.g. --with-headers, not --with_headers

Returns headers where only name or value matches.