7:04 p.m.
Kind of diverging from the topic at hand, but:
sed 's/ /:/'
to do the conversion myself. (Note that sed will only perform one
replacement per line by default.)
You can do global replacement like so:
sed 's/ /:/g'
All the best,
-Jamie
7:37 p.m.
New subject: Patch: strings command optimization
Sadly the sed scripts posted to the list do not work on the output of
the OS X strings program. This version of strings includes leading
zeros in the offset value. Thus, an output line from OS X strings like
0 %PDF-1.2
gets converted to
: 0 %PDF-1.2
instead of the desired
0:%PDF-1.2
Hence the optional whitespace before the offset in the Perl regex.
--
Jesse
research(a)jessekornblum.com
8:22 p.m.
New subject: Patch: strings command optimization
On Tue, Sep 8, 2009 at 17:37, Jesse Kornblum<research(a)jessekornblum.com> wrote:
Sadly the sed scripts posted to the list do not work
on the output of the OS
X strings program. This version of strings includes leading zeros in the
offset value. Thus, an output line from OS X strings like
0 %PDF-1.2
gets converted to
: 0 %PDF-1.2
instead of the desired
0:%PDF-1.2
Try this one on for size (tested against strings(1) in OSX 10.5.8):
sed 's/ *\([0-9]\{1,\}\) */\1:/'
Replaces the first instance of "[optional spaces]<1 or more
numbers>[optional spaces]" with "<found number>:". Should be a
little
cleaner and quicker than firing up Perl, and if you'll notice it's
essentially the same regex you're running, if modified for sed
semantics.
8:33 p.m.
New subject: Patch: strings command optimization
Hi RB,
The sed command works like a charm, thank you!
I learned Perl before sed, so the latter is not always my first
instinct.
On Sep 8, 2009, at 8:22 PM, RB wrote:
sed 's/ *\([0-9]\{1,\}\) */\1:/'
--
Jesse
research(a)jessekornblum.com
5899
days inactive
5900
days old
vol-dev@lists.volatilityfoundation.org
3 comments
3 participants
participants (3)
-
Jamie Levy -
Jesse Kornblum -
RB