How to extract unix path in perl

Question

Input

[security] [client 198.66.91.7] [domain testphp.example.com] [200] [/apache/20160503/20160503-0636/20160503-063628-Vyh-LH8AAAEAAE6zC@AAAAAD] (null)

Desired output

/apache/20160503/20160503-0636/20160503-063628-Vyh-LH8AAAEAAE6zC@AAAAAD

here is what I have so far

'.*?\[.*?\].*?\[.*?\].*?\[.*?\].*?\[.*?\].*?\[(.*?)\]'

My Perl code.

#!/usr/bin/perl
use feature 'say';

$txt='[modsecurity] [client 199.66.91.7] [domain testphp.vulnweb.com] [200] [/apache/20160503/20160503-0636/20160503-063628-Vyh-LH8AAAEAAE6zC@AAAAAD] (null)';


$re=''.*?\[.*?\].*?\[.*?\].*?\[.*?\].*?\[.*?\].*?\[(.*?)\]'';

if ($txt =~ m/$re/is)
{
    $sbraces1=$1;
    say $1; 
}

output

/apache/20160503/20160503-0636/20160503-063628-Vyh-LH8AAAEAAE6zC@AAAAAD

I think my regex is messy? maybe another way?

Thanks

You should use a split approach.

Casimir et Hippolyte
– Casimir et Hippolyte

2016-05-03 11:28:52 +00:00
Commented May 3, 2016 at 11:28 — Casimir et Hippolyte
– Casimir et Hippolyte, Commented May 3, 2016 at 11:28
Your comment should be an answer

Deano
– Deano

2016-05-03 11:35:26 +00:00
Commented May 3, 2016 at 11:35 — Deano
– Deano, Commented May 3, 2016 at 11:35
@Deano I added the answer.

AKS
– AKS

2016-05-03 11:38:57 +00:00
Commented May 3, 2016 at 11:38 — AKS
– AKS, Commented May 3, 2016 at 11:38

LaintalAy · Accepted Answer · 2016-05-03 11:46:48Z

3

I would use a split too... or a more general regex than the one you are using:

#!/usr/bin/env perl

use strict;
use warnings;
use Data::Dumper;

my $data = '[security] [client 198.66.91.7] [domain testphp.example.com] [200] [/apache/20160503/20160503-0636/20160503-063628-Vyh-LH8AAAEAAE6zC@AAAAAD] (null)';

my @fields = $data =~ /(?:\[(.*?)\])+/g;

print Dumper(\@fields);

The output you get is:

$VAR1 = [
          'security',
          'client 198.66.91.7',
          'domain testphp.example.com',
          '200',                                                                                                                               
          '/apache/20160503/20160503-0636/20160503-063628-Vyh-LH8AAAEAAE6zC@AAAAAD'                                                            
        ];

So the fifth element of the returned array is what you want.

edited May 3, 2016 at 11:46

answered May 3, 2016 at 11:35

LaintalAy

1,2022 gold badges16 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

mkHun · Accepted Answer · 2016-05-03 16:14:53Z

1

Use character class negation. Because it is performance is better than the non greedy assertions.

my $txt = '[security] [client 198.66.91.7] [domain testphp.example.com] [200] [/apache/20160503/20160503-0636/20160503-063628-Vyh-LH8AAAEAAE6zC@AAAAAD] (null)';

my @array = $txt =~ /\[([^\]]+)\]/g;

print "@array\n";

Here demo for character class negation.

Here demo for non greedy quantifier.

edited May 3, 2016 at 16:14

answered May 3, 2016 at 12:17

mkHun

5,9479 gold badges45 silver badges96 bronze badges

1 Comment

LaintalAy Over a year ago

I like your solution. You should include the capture groups: /\[([^\]]+)\]/g

Community · Accepted Answer · 2017-05-23 12:31:43Z

0

I created this regex demo:

\[\d{3}\]\s+\[(\S+)\]

My answer is based on the assumption that the url that you want to match will always be followed by a HTTP status code.

Since it is HTTP status code we could also write (as in this SO post):

\[[1-5][0-9]{2}\]\s+\[(\S+)\]

edited May 23, 2017 at 12:31

CommunityBot

11 silver badge

answered May 3, 2016 at 11:37

AKS

20k3 gold badges47 silver badges55 bronze badges

Collectives™ on Stack Overflow

How to extract unix path in perl

3 Answers 3

Comments

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related