From: Robert Klemme <shortcutter@...>
Date: 2013-06-12T16:19:54+09:00
Subject: Re: extract from output (regular expressions)

--047d7b6d937e07bc7b04deefd79c
Content-Type: text/plain; charset=ISO-8859-1

On Wed, Jun 12, 2013 at 12:22 AM, Joel Pearson <lists@ruby-forum.com> wrote:

> FYI the reason I'd use a 2D array for that kind of thing is because you
> then have this option for looping through the data:
>
> output.each do |ip, src_packets, src_bytes, dst_packets, dst_bytes|
>   #Whatever you want with each set of data...
> end
>

I'd give even more structure to the data: I use a Hash as element type in
the Array plus I'd use a Hash on root level to distinguish tables.

#!/usr/bin/ruby

$w = true

require 'ipaddr'

data = Hash.new {|h,k| h[k] = []}
current = nil

ARGF.each_line do |line|
  case line
  when /Showing table:\s*(\w+)/
    current = data[$1]
  when /^IP/
    h = {}

    line.scan /(\w+):\s*([\d.]+)/ do |match|
      key = $1.to_sym
      val = $2

      h[key] = case val
        when /\A\d+\z/
        Integer(val)
      when /\A\d{1,3}(?:\.\d{1,3}){3}\z/
        IPAddr.new val
      else
        val
      end
    end

    current << h
  end
end

require 'pp'
pp data


$ ./ip.rb fw.data
{"cowboys"=>
  [{:IP=>#<IPAddr: IPv4:192.168.200.1/255.255.255.255>,
    :packets=>7224498,
    :bytes=>762829278},
   {:IP=>#<IPAddr: IPv4:192.168.200.2/255.255.255.255>,
    :packets=>324472,
    :bytes=>481821874},
   {:IP=>#<IPAddr: IPv4:192.168.200.3/255.255.255.255>,
    :packets=>145748,
    :bytes=>170332152},
   {:IP=>#<IPAddr: IPv4:192.168.200.4/255.255.255.255>,
    :packets=>106100,
    :bytes=>26420351},
   {:IP=>#<IPAddr: IPv4:192.168.200.5/255.255.255.255>,
    :packets=>6948051,
    :bytes=>1798270528},
   {:IP=>#<IPAddr: IPv4:192.168.200.6/255.255.255.255>,
    :packets=>12875,
    :bytes=>18882957},
   {:IP=>#<IPAddr: IPv4:192.168.200.9/255.255.255.255>,
    :packets=>21888,
    :bytes=>5834302},
   {:IP=>#<IPAddr: IPv4:192.168.200.10/255.255.255.255>,
    :packets=>623,
    :bytes=>177505},
   {:IP=>#<IPAddr: IPv4:192.168.200.253/255.255.255.255>,
    :packets=>156,
    :bytes=>12834}],
 "indians"=>
  [{:IP=>#<IPAddr: IPv4:10.0.0.2/255.255.255.255>,
    :packets=>2698261,
    :bytes=>3740346675},
   {:IP=>#<IPAddr: IPv4:10.0.0.3/255.255.255.255>,
    :packets=>300909,
    :bytes=>136230642}]}

In case indentation breaks I put it on github
https://gist.github.com/rklemme/5763405

Kind regards

robert

-- 
remember.guy do |as, often| as.you_can - without end
http://blog.rubybestpractices.com/

--047d7b6d937e07bc7b04deefd79c
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><br><div class=3D"gmail=
_quote">On Wed, Jun 12, 2013 at 12:22 AM, Joel Pearson <span dir=3D"ltr">&l=
t;<a href=3D"mailto:lists@ruby-forum.com" target=3D"_blank">lists@ruby-foru=
m.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-=
left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;p=
adding-left:1ex">FYI the reason I&#39;d use a 2D array for that kind of thi=
ng is because you<br>

then have this option for looping through the data:<br>
<br>
output.each do |ip, src_packets, src_bytes, dst_packets, dst_bytes|<br>
=A0 #Whatever you want with each set of data...<br>
end<br></blockquote></div><br>I&#39;d give even more structure to the data:=
 I use a Hash as element type in the Array plus I&#39;d use a Hash on root =
level to distinguish tables.</div><div class=3D"gmail_extra"><br></div><div=
 class=3D"gmail_extra">
<div class=3D"gmail_extra">#!/usr/bin/ruby</div><div class=3D"gmail_extra">=
<br></div><div class=3D"gmail_extra">$w =3D true</div><div class=3D"gmail_e=
xtra"><br></div><div class=3D"gmail_extra">require &#39;ipaddr&#39;</div><d=
iv class=3D"gmail_extra">
<br></div><div class=3D"gmail_extra">data =3D Hash.new {|h,k| h[k] =3D []}<=
/div><div class=3D"gmail_extra">current =3D nil</div><div class=3D"gmail_ex=
tra"><br></div><div class=3D"gmail_extra">ARGF.each_line do |line|</div><di=
v class=3D"gmail_extra">
=A0 case line</div><div class=3D"gmail_extra">=A0 when /Showing table:\s*(\=
w+)/</div><div class=3D"gmail_extra">=A0 =A0 current =3D data[$1]</div><div=
 class=3D"gmail_extra">=A0 when /^IP/</div><div class=3D"gmail_extra">=A0 =
=A0 h =3D {}</div><div class=3D"gmail_extra">
=A0 =A0=A0</div><div class=3D"gmail_extra">=A0 =A0 line.scan /(\w+):\s*([\d=
.]+)/ do |match|</div><div class=3D"gmail_extra">=A0 =A0 =A0 key =3D $1.to_=
sym</div><div class=3D"gmail_extra">=A0 =A0 =A0 val =3D $2</div><div class=
=3D"gmail_extra"><br></div><div class=3D"gmail_extra">
=A0 =A0 =A0 h[key] =3D case val</div><div class=3D"gmail_extra">=A0 =A0 =A0=
 =A0 when /\A\d+\z/</div><div class=3D"gmail_extra">=A0 =A0 =A0 =A0 Integer=
(val)</div><div class=3D"gmail_extra">=A0 =A0 =A0 when /\A\d{1,3}(?:\.\d{1,=
3}){3}\z/</div><div class=3D"gmail_extra">
=A0 =A0 =A0 =A0 IPAddr.new val</div><div class=3D"gmail_extra">=A0 =A0 =A0 =
else</div><div class=3D"gmail_extra">=A0 =A0 =A0 =A0 val</div><div class=3D=
"gmail_extra">=A0 =A0 =A0 end</div><div class=3D"gmail_extra">=A0 =A0 end</=
div><div class=3D"gmail_extra">=A0 =A0=A0</div>
<div class=3D"gmail_extra">=A0 =A0 current &lt;&lt; h</div><div class=3D"gm=
ail_extra">=A0 end</div><div class=3D"gmail_extra">end</div><div class=3D"g=
mail_extra"><br></div><div class=3D"gmail_extra">require &#39;pp&#39;</div>=
<div class=3D"gmail_extra">
pp data</div><div><br></div><div><br></div><div><div>$ ./ip.rb fw.data</div=
><div>{&quot;cowboys&quot;=3D&gt;</div><div>=A0 [{:IP=3D&gt;#&lt;IPAddr: IP=
v4:<a href=3D"http://192.168.200.1/255.255.255.255">192.168.200.1/255.255.2=
55.255</a>&gt;,</div>
<div>=A0 =A0 :packets=3D&gt;7224498,</div><div>=A0 =A0 :bytes=3D&gt;7628292=
78},</div><div>=A0 =A0{:IP=3D&gt;#&lt;IPAddr: IPv4:<a href=3D"http://192.16=
8.200.2/255.255.255.255">192.168.200.2/255.255.255.255</a>&gt;,</div><div>=
=A0 =A0 :packets=3D&gt;324472,</div>
<div>=A0 =A0 :bytes=3D&gt;481821874},</div><div>=A0 =A0{:IP=3D&gt;#&lt;IPAd=
dr: IPv4:<a href=3D"http://192.168.200.3/255.255.255.255">192.168.200.3/255=
.255.255.255</a>&gt;,</div><div>=A0 =A0 :packets=3D&gt;145748,</div><div>=
=A0 =A0 :bytes=3D&gt;170332152},</div>
<div>=A0 =A0{:IP=3D&gt;#&lt;IPAddr: IPv4:<a href=3D"http://192.168.200.4/25=
5.255.255.255">192.168.200.4/255.255.255.255</a>&gt;,</div><div>=A0 =A0 :pa=
ckets=3D&gt;106100,</div><div>=A0 =A0 :bytes=3D&gt;26420351},</div><div>=A0=
 =A0{:IP=3D&gt;#&lt;IPAddr: IPv4:<a href=3D"http://192.168.200.5/255.255.25=
5.255">192.168.200.5/255.255.255.255</a>&gt;,</div>
<div>=A0 =A0 :packets=3D&gt;6948051,</div><div>=A0 =A0 :bytes=3D&gt;1798270=
528},</div><div>=A0 =A0{:IP=3D&gt;#&lt;IPAddr: IPv4:<a href=3D"http://192.1=
68.200.6/255.255.255.255">192.168.200.6/255.255.255.255</a>&gt;,</div><div>=
=A0 =A0 :packets=3D&gt;12875,</div>
<div>=A0 =A0 :bytes=3D&gt;18882957},</div><div>=A0 =A0{:IP=3D&gt;#&lt;IPAdd=
r: IPv4:<a href=3D"http://192.168.200.9/255.255.255.255">192.168.200.9/255.=
255.255.255</a>&gt;,</div><div>=A0 =A0 :packets=3D&gt;21888,</div><div>=A0 =
=A0 :bytes=3D&gt;5834302},</div>
<div>=A0 =A0{:IP=3D&gt;#&lt;IPAddr: IPv4:<a href=3D"http://192.168.200.10/2=
55.255.255.255">192.168.200.10/255.255.255.255</a>&gt;,</div><div>=A0 =A0 :=
packets=3D&gt;623,</div><div>=A0 =A0 :bytes=3D&gt;177505},</div><div>=A0 =
=A0{:IP=3D&gt;#&lt;IPAddr: IPv4:<a href=3D"http://192.168.200.253/255.255.2=
55.255">192.168.200.253/255.255.255.255</a>&gt;,</div>
<div>=A0 =A0 :packets=3D&gt;156,</div><div>=A0 =A0 :bytes=3D&gt;12834}],</d=
iv><div>=A0&quot;indians&quot;=3D&gt;</div><div>=A0 [{:IP=3D&gt;#&lt;IPAddr=
: IPv4:<a href=3D"http://10.0.0.2/255.255.255.255">10.0.0.2/255.255.255.255=
</a>&gt;,</div><div>
=A0 =A0 :packets=3D&gt;2698261,</div><div>=A0 =A0 :bytes=3D&gt;3740346675},=
</div><div>=A0 =A0{:IP=3D&gt;#&lt;IPAddr: IPv4:<a href=3D"http://10.0.0.3/2=
55.255.255.255">10.0.0.3/255.255.255.255</a>&gt;,</div><div>=A0 =A0 :packet=
s=3D&gt;300909,</div><div>
=A0 =A0 :bytes=3D&gt;136230642}]}</div></div><div style><br></div><div styl=
e>In case indentation breaks I put it on github</div><div style><a href=3D"=
https://gist.github.com/rklemme/5763405">https://gist.github.com/rklemme/57=
63405</a><br>
</div><div style><br></div><div style>Kind regards</div><div style><br></di=
v><div style>robert</div><div><br></div>-- <br>remember.guy do |as, often| =
as.you_can - without end<br><a href=3D"http://blog.rubybestpractices.com/">=
http://blog.rubybestpractices.com/</a>
</div></div>

--047d7b6d937e07bc7b04deefd79c--