Other handy oneliners

  • Top IP addresses in Apache access_log tail -10000 access_log | awk '{print $1}' | sort | uniq -c | sort -n | tail

  • Top IPs from netstat netstat -tn 2>/dev/null | grep :80 | awk '{print $5}' |sed -e 's/::ffff://' |cut -d: -f1 | sort | uniq -c | sort -rn |head

  • Capture sterr/stout from specified PID strace -ff -e trace=write -e write=1,2 -p PID