topic Re: text or binary file in Operating System - HP-UX

text or binary file

Ridzuan Zakaria — Thu, 27 Jan 2005 12:19:33 GMT

Hi everyone,

I would like to write a script that search for restricted word such as 'PASSWORD' in text file not executable or binary file.

How do I tell if the file is binary or text?

I plan to use find and grep command to navigate through directories to search for word password.

Thanks.

Re: text or binary file

Sanjay_6 — Thu, 27 Jan 2005 12:23:18 GMT

Hi,

from another forum solutions.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=368008

Hope this helps.

Regds

Re: text or binary file

john korterman — Thu, 27 Jan 2005 12:23:52 GMT

Hi,
use the file command, e.g.:
# file * | grep text | awk '{print $1}'

regards,
John K.

Re: text or binary file

Steven E. Protter — Thu, 27 Jan 2005 13:05:43 GMT

The file command gives you the attributes of the file.

Try this:

file /usr/bin/scp

answer includes the word binary

file /etc/issue

answer includes the word text

You should be able to run through a lot of files and find what you need. This seems like a security scan of some sort.

SEP

Re: text or binary file

Sundar_7 — Thu, 27 Jan 2005 13:18:34 GMT

I can suggest a quick and dirty script - take it from there :-)

# vgdisplay 2>/dev/null | grep "VG Name" | awk '{print $3}' | xargs -n1 | while read VG
do
VGNAME=$(echo "$VG" | sed 's/\/dev\///')
vgdisplay -v $VG | egrep "LV Name|Current LE" > /root/$VGNAME-LV.list
done

Now once you are done restoring the ignite in the DR server

# for VGS in $(ls /root/*LV.list)
do
cat VGS | xargs -n2 | while read LV SIZE
do
VGNAME=$(echo "$VGS" | sed 's/\-LV\.list//')
LVNAME=$(echo "$LV" | sed 's/\/dev\/vg.*\///')
lvcreate -l $SIZE -n $LVNAME /dev/$VGNAME
done
done

Remember, the above excerpt will not take care of striping or extend allocation policies or mirroring. But one would assume that is not critical for the DR tests.

I am not sure the above script is not going to work either :-).

Re: text or binary file

Sundar_7 — Thu, 27 Jan 2005 13:20:21 GMT

Sorry, the above post is not for you !

Re: text or binary file

Bill Hassell — Thu, 27 Jan 2005 13:37:57 GMT

Unfortunately, the file command uses special magic (actually, it uses /etc/magic) to figure out whether a file is text (or dozens of other formats). The problem is that there are NO flags to identify whether a file contains all ASCII (/etc/motd), some ASCII (/etc/lvmtab), or no meaningful ASCII (random data file). The problem with file is that a ps (postscript) file is ASCII, just as an awk program files is ASCII. So looking for only files that are text will miss hundreds of ASCII files.

What would make more sense is to include only normal files (find ... -type f ...) and then read the files using the strings command and follow that with grep, something like this:

find /etc -type f | while read
do
CNT=$(strings $REPLY | grep -c password)
if [ $CNT -ne 0 ]
then
echo
echo $REPLY
strings $REPLY | grep password
fi
done

You can type all the commands in at the shell prompt or paste them into a file and run the file. Change the first line (find /etc) to find whatever filesystem you are searching. Note that find / is very bad for performance on a multi-user server. It's best to look in likely locations, not in CDROMs, NFS mounted filesystems, database directories, etc.

Re: text or binary file

Ridzuan Zakaria — Thu, 27 Jan 2005 13:38:13 GMT

Thank. I am using suggestion by Sanjay.