grep'ng for 'string' in bigip.conf

Hi Don,

 

I am not a linux shell person but the closest I have gotten to looking at virtuals bigip.conf would be

 

 

awk '/(virtual)/,/ }/' bigip.conf

 

 

Hopefully someone else who is more proficient could improve this command

 

 

Bhattman

 

 

 

Try using perl, cut and paste this code to a file (eg. /tmp/mygrep.pl) and make sure the executable bit is set (eg. chmod a+x /tmp/mygrep.pl)

 

 

  
  !/usr/bin/perl  
  use strict;  
    
  my ($File, $Pattern) = @ARGV;  
  my $buf;  
    
  open (fh, $File) || die "Cant open $File";  
  {  
  local $/;  
  $buf=;  
  }  
  close (fh);  
    
  while ($buf =~ /([^\n]*\{[^\{]*$Pattern[^\}]*\})/sg){  
  print "$1\n---\n";  
  }  
  

 

 

Sample:

 

  
  [root@bigip:Active] config  /tmp/mygrep.pl /config/bigip.conf http-xff  
  virtual vip1.80 {  
      pool vip1.80  
      destination aaa.bbb.ccc.ddd:http  
      ip protocol tcp  
      rules SNAT2VIP  
      profiles  
         http-xff  
         tcp-lan-optimized  
            serverside  
         tcp-wan-optimized  
            clientside  
      persist source_addr_30min  
   }  
  ---  
   virtual vip-2.80 {  
      pool vip-2.80  
      destination mmm.nnn.ooo.ppp:http  
      ip protocol tcp  
      rules SNAT2VIP  
      profiles  
         http-xff  
         tcp-lan-optimized  
            serverside  
         tcp-wan-optimized  
            clientside  
      persist source_addr_30min  
   }  
  ---  
    
  [root@bigip:Active] config  /tmp/mygrep.pl /config/bigip.conf password  
  user root {  
     password crypt "[cut]"  
  }  
  ---  
  user admin {  
     password crypt "[cut]"  
     description "Admin User"  
     group [cut]  
     home "[cut]"  
     shell "[cut]"  
     role administrator in all  
  }  
  ---  
  user f5emsvr {  
     password crypt "[cut]"  
     description "F5 EM Service Account"  
     id [cut]  
     group [cut]  
     home "[cut]"  
     shell "[cut]"  
     role guest in all  
  }  
  ---  
  configsync {  
     password crypt "[cut]"  
  }  
  ---  
    
  

 

 

It's not well tested, use it at your own risk and on dev machine first.

 

A slight improvement:

 

 

awk '/^virtual/,/^}$/' /config/bigip.conf

 

 

...now it will only match if 'virtual' appears at the start of the line and end when a '}' appears on a line by itself. I've tested this line with virtuals, pools, moderately complex irules, self-ips, and vlans (using the appropriate keyword in place of 'virtual', obviously). Basically every object that sprang to mind in 30 seconds. Every object was printed correctly, though I suppose it's possible that some portions of the iRules may have been cut off without my noticing.

 

 

I also find it a bit easier to use one of these, both of which will let you match on local networking objects (vlans, self-ips) as will as virtuals, pools, etc...:

 

 

awk '/^self/,/^}$/' /config/bigip.conf /config/bigip_base.conf

 

cat /config/{bigip.conf,bigip_base.conf} | awk '/^virtual/,/^}$/'

 

 

The creative use of awk variables or bash expansion should allow you to load a bash function that lets you use a simplified syntax, like "list virtual". I have some bash functions to handle exactly that, though they are embarassingly less elegant than this one-liner.

 

 

Hope this helps.

 

 

 

--jesse

Thanks everyone ... much appreciated. I will spend some time testing reults on our dev box.

 

 

--Don

Posted By hwidjaja on 12/28/2009 10:26 AM

   
   !/usr/bin/perl   
   use strict;   
      
   my ($File, $Pattern) = @ARGV;   
   my $buf;   
      
   open (fh, $File) || die "Cant open $File";   
   {   
   local $/;   
   $buf=;   
   }   
   close (fh);   
      
   while ($buf =~ /([^\n]*\{[^\{]*$Pattern[^\}]*\})/sg){   
   print "$1\n---\n";   
   }   
   

Quick question...

For $buf=; ... is correct... or should it be (fh) ??

Thanks again

--Don

$buf = ; is correct.

 

 

You're reading the whole file to a scalar variable ($buf) with fh as the file handle and the < and > around it.

 

 

With respect to awk '/^virtual/,/^}$/' /config/bigip.conf

 

which prints ALL virtual objects defined.

 

 

Is they a way to limit the output, such that, if I have 100 virtuals defined,

 

but only need the subset where a specific iRule is declared.

 

 

I am wondering if there is a way to inject a 'where' clause as a way of limiting the output.

 

something like where 'rules SNAT2VIP' exists

 

 

TIA,

 

-Don

Hi Don,

 

I believe that hwidjaja's perl script addresses that.

 

 

I.E.,

 

/tmp/mygrep.pl /config/bigip.conf SNAT2VIP

 

 

 

Bhattman

hmm try this ...

awk 'BEGIN {RS="}";FS=RS} /rules SNAT2VIP/ {print $1"}";} ' /config/bigip.conf 

It's the awk one-liner version of the perl script.

SWEAT ... exactly what I was hoping for.

 

You rock Humphrey !

 

 

-Don