I've been a #Unix/#Linux user since 1985, and arguably I may be a bit stuck in my ways. But when I think about new #CommandLine tools I've picked up recently, none of them have had the impact on my life that the "jq" command has. Between APIs and… infosec.exchange/@hal_pomera…

Hal Pomeranz (@hal_pomeranz@infosec.exchange)

I've been a #Unix/#Linux user since 1985, and arguably I may be a bit stuck in my ways. But when I think about new #CommandLine tools I've picked up recently, none of them have had the impact on my...

infosec.exchange

Nov 11, 2022 · 12:49 PM UTC

1
9
For all you #PCAP ninjas, I feel like I should throw a shout-out to "tshark -Tfields ..." which is basically "awk" for packets. tcpdump is great for breaking down huge PCAPs. But once they are a manageable size, nothing beats tshark for extracting just the fields you need.
2
6