[It]deft manuale full

574 views

Published on

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
574
On SlideShare
0
From Embeds
0
Number of Embeds
3
Actions
Shares
0
Downloads
11
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

[It]deft manuale full

  1. 1. deft D^ & ^ Z Z
  2. 2. >/ hdKZ/>/E h^KWZD^^/EdZKh/KE WZ, d hd// / E dd/s/d / //d KZE^/ ZYh/^/d/ / ^/^dDd /Ehy /s EK WW/ /KE/ ss/ Z d /Ehy /s d /Ehy dyd DK ^d/KE DDKZ/ / D ^^ DKhEd DDKZ/ t KK , ^, D ^ D Yh/^//KE DDKZ/ / D ^^ Z /KE / hE d/D /E D Z/Z / Zd
  3. 3. d /Ehy h/ DK /EdZKh/KE ^d/KE DDKZ/ / D ^^ KK , ^, Yh/^//KE / DDKZ/ / D ^^ ^d/KE / hE ^K KE hdKW^z yW/K d ydZ WWE/ W Z DdZ/ WZ / KKd ZE WWE/ D E W D ^ D ZW D
  4. 4. Stefano “youngSTEr” Fratepietro si laurea nel 2006 in InformationTechnology and Management (Scienze di Internet) presso l’Universitàdegli studi di Bologna con tesi di laurea in Informatica Forense dal titolo“Uno studio del caso virus Vierika”; certificato ISECOM OPST,attualmente è un security specialist presso l’ufficio it-security del CSE(Consorzio Servizi Bancari) ed effettua attività peritali per tribunali,forze dell’ordine e privati partecipando come consulente tecnico a casi difama nazionale come “Buongiorno! Vitaminic” e “Pirelli-Telecom-Ghioni”.Dal 2005 è creatore e project leader del sistema DEFT. Saltuariamenteeffettua attività di docenza in Informatica Forense per Università italianee corsi privati. E’ membro IISFA (Italian Chapter) dal 2008.Sandro “bUSBoy” RossettiAlessandro Rossetti vive e lavora a Roma. Molti dei suoi interessipersonali riguardano lInformation Technology, in particolare leproblematiche di security e forensic. È membro di diverse organizzazioniindipendenti quali Isaca (Boad of Directors of the Rome Chapter), IACISed IISFA (Italian Chapter).
  5. 5. E /d • • E EZ W E • • / • E KY
  6. 6. ^
  7. 7. W /s dZ/ /W
  8. 8. / ^ ^ d D s Z d d D t d / h Y / h Y • • d Eh h Eh Eh W t ^ t d /
  9. 9. W d h/ d E E d /W
  10. 10. ZW d ZKD d h Wh / D D d D d D d h^d /d D t W
  11. 11. d d / d y d / D K / D K /d t ^ ^Dd t Z Z ^ Z D ^d / D sE K st d K sD ^ t K sD ^ t W st Z sh ^ ZW ^ ^ t
  12. 12. y s h^y Z h s/ h W s s s t / ^ s t W s W dW yW WZ DD Z / W sZ Z ^ ^ sDD ^ ^ st K D W s ^ s D W s E W Z W K W s W W Ky Z W W/ s W W s/ s W^d W/ , s Z W s/ sE W s s t WD s t sD , s s^ WD s , Z WK s t sEK s d ^ K s WdW s dsZ s ^ ZZ d^ t ^Dh/ s dD s W^ s
  13. 13. d W /K^ d h /K^ h^/ • •
  14. 14. W d • W/ • / • • •
  15. 15. /d d Yd
  16. 16. d • • • / •D/ /
  17. 17. • • •/ /W • • • • o o o o o o E
  18. 18. Ed^ Ed^K^ W dK ^h ^ ^ D W d h h d Ed^ hDW
  19. 19. t / t Y t d
  20. 20. YY • • • •D D D Z Z Z ZY D D , /
  21. 21. ^ ^, E ^ E^ E/^d h^ ^, ^ , ^, ^, ^, ^, ^, ^, ^, / ^, ^, ^,DD
  22. 22. /
  23. 23. W • • • •
  24. 24. Y
  25. 25. h ^ D Dd K K
  26. 26. d ^ D D d ^ Ed^ D Dd h^ D Z • • W D d
  27. 27. // ,
  28. 28. d • • • • • • • • • • • • • • • • • •
  29. 29. d h// d y y y d D t d tW d
  30. 30. d / D D W s Z K D h
  31. 31. E D d / yd Dy h , , / / / /D D D K K^ ^ d s tZZ yE t y^ s y^ d , ^ dW D KW W ^ d h t
  32. 32. d E • • h Zt • h D D D Zt
  33. 33. DD ZK WE ^ D D ^ t E^ /
  34. 34. d h h
  35. 35. d // ^W W ^ ^
  36. 36. • • • E • W
  37. 37. /Z E dyd h Z E
  38. 38. ,d , ,,K
  39. 39. d^ • • s • • Z • • • • • h /
  40. 40. h
  41. 41. h
  42. 42. E • / • / • / • ^
  43. 43. h d d /
  44. 44. Z
  45. 45. y d d y y /W /W y y E d / E d Y ^
  46. 46. YWE W y d y
  47. 47. ZE
  48. 48. s Z
  49. 49. d d ^d D t h/ d d • t d •
  50. 50. • d •W
  51. 51. WWE/ W d D h^ D h^ , D D d d ^
  52. 52. d d W/ W/ W W W ^ ^ W/ W/ WD W D sZ sZ y y /E ZD Z D /K^ ^ / / W Wd / / d W/ d Ks Ks ,t / / /D / /K^, D /K /W WEW /W ,W KKdW Z ZW /Ws /W /^ WEW /^ W W /^E /^E :Kz
  53. 53. sD s D/ d W WKKW D D d D DD DDKh^D^/ D ^ / W/Dd Dd D d EdEhD EhDEZ/ d/D dE^ E^K^^ K^^Ws KW^W Z/ d W / /W Z/^ d W Z/^W/ W/W/ W/ WD/ d WD/WEW W WWW W WWWd WW^ W^Z D Z D^ ^^^/ ^^/
  54. 54. ^hZ/dz ^/Ehy ^ ^Z/ ^ ^, ^ , ^DW d ^DW ^W Z ^ ^t^h^W ^ ^h^WE ^ dZ dWD dWD d^ hD^ h^ D ^ h^ h^ h^,/h^ , / s s s d s sd s td t yd /D W yd DD y y y y D y y y y/ h^ Z E / KKd /W KKd
  55. 55. d^ E ^ ^E^/d/sd d / KDD E /E ^/ ,t W/ y W / W/ W/ W/ /ZY W/ Z^d y^d ^d ^
  56. 56. W/ /K W/ W/ W/ ,t W/ / W/ ,t W/ W/ h ,t W/ W/ h KE/ W/ hW/ KDWKEEd W/ KDWKEEd W/ W/ KDWKEEd W/ h WZ/Ed W/ h WZ/Ed W/ /EK d ^
  57. 57. W/ W/ D D W/^ d ,t W/^ ,t W/ W/ /ZY W/ ,t W/ W/ /ZY W/,t W/ / /ZY /^,t W/ / /ZY W/
  58. 58. ,t W/ ^^d,t W/ d W/ /K^ K^ d t D t,t W/ D K^yK,t W/ W/ ^ /,t W/ D ,t W/Z /ZY / K /K^ yd W/,t W/ ^^ W W/
  59. 59. W/ Wd^ W/ Wd^ W/ Es^ ^/ E ^ ^ W/ ,t W/ h E E ,Wd W/ W/ K Z ^ /K^ D /K W/ W/ D W/ W/ W/ K Z
  60. 60. ,t K^^ / y / / Z D,t ^^/^,t K^^ ^W^ W W,t ^^/^ ,t ^^/,t ^^/^ ,t ^^/^
  61. 61. E ZD ,t yW D /KDDhW /K d K D /KDDh,t :KzD :Kz d :Kz d^ ,t :Kz^,t ^W ZW ^W Z W Wh ^W Z W Wh W
  62. 62. W/ y W / W/ /K W/ /Ws ^ W/ y W / d d WD W D ^ ,t Ed Z Z/D / / ,t D ,t DKh^ D ,t ^^/ ^^/ ,t /D Z
  63. 63. ,t Z,t ^ d W^,t D^ K,t ,th/,t y,t y W W y D^ ,t y ^ W y D D^ ,t y ^ W y D , D
  64. 64. ^ D s E ,t s D ^ / Z/^d ,t ^^/ ^ W K Ed D h^ y K Wh ^ Wh d Wh d ^hZ/dz d
  65. 65. W ^^ /K E ^/Ehy ^^ s^^ /Kh^ y ,t / W/dEZ/ d/D K
  66. 66. K ^ W/ ZD K^d^ sZ y /D D/W^ D/W^ W Z/^ ^ ^, ^ , ^W Z y/dEhD y Wh/ y ^ E Wh/ d
  67. 67. WW ^ d DK K^ y , Z ,t Ed Z KD / ,t Ed Z KD /K ,t Ed Z KD ,t ^ E K h^h^
  68. 68. h d Zd^ ^ ^ ^ h Zd /K DD/K ^ d ^/ ddz ^ s E d E ^
  69. 69. ,t W/ / K W/D DE ZE ^ d D ^,t Ed,t Ed,t Ed^,t :Kz D^ E
  70. 70. EW W/tE E y W d,t Ed^ d, d d W/ ^,DE^,t ^Z/ /K
  71. 71. ,t ^Z/ ^ Z D/Ws^ /Ws^ yd DdZZ y t d y / DDdZZ d y W/E W/,t K^^ ^ / D W/ h
  72. 72. d D W/ K D W/ hD W/t D W/ :dEd,t ^^/KE/ zE D/ WZ/Ed hdE K^h Zd /K DD/Kd ^y ^, /E
  73. 73. ^ ^ K h^ ^ ^/d s y d ,t ^^/ W Z/^ ,t^ y
  74. 74. ^/K^,^ / WW ^, y^ ^ yd DdZZ y t d y W/E W/ d/d^/Ehy ^^ s
  75. 75. W/ Z ^ d Z^d,t Ed d ^ E^ ,t ^^/^,t ^^/^,t^ / ^ , h^, h ^ , h^,
  76. 76. dZ dZ / Wh Wh dZ d dZ d dZ
  77. 77. ,t :Kz D E^ ^E^ W^y^ ,t ZDy ZdKs tt,t ^^/^/ Wd W DZ Wd,t ^^/E EhD EhD EhD/ ^/ ,
  78. 78. / / W/ , ^ d ,^dD E KKd d d E s ,t /^E ^ Z D , ^ h^ ZD ^, y ,Wd ,Wd ,Wd W/d /, s/ s ,Wd ,t y / , d
  79. 79. ,t / WW y d , dK s D Wh WhE ^ E sD /hs ,s s ^ sD / / sD /hs ,s sD /,t K / / ,t d,t W,t W ,t ,t ,t hy hy,t
  80. 80. ,t W/W W W W/K^ hy,t ,t Z,t h,t ZD,t D/,t ^DD /K^,t Z,t ^z^ D/E,t D ^^/ /D D ^^/^ ,t /^E ,t /^
  81. 81. ,t / W/ / yW WhE K DKE/dKZ Dt /dDKE/dKZ Dt /d W , Wh/ Wh E/ h E^ /D
  82. 82. /D /D d d /D ,t ^^/^EZE d hKKd ^,t / d/ y DD Z / /KDDh D Z
  83. 83. K / D Z D Z D Z / D t d K t /Kd/ DD/K
  84. 84. / ,t /K D ^ y /K ^ ^ E /W WEW ^ ,t ^ /K /ZY / W ^ ,t ^^/ /D ^ Z / ^,t
  85. 85. t /,tt //^ WEW ZWE ^DW / Whd Wh ^DW z Wh Wh Whd Wh d Wh
  86. 86. ,t Ed,t :Kz^ ,t ZDD E y / WW d d d D / D d D d, dE Wd , D , D E ,t ,/ h^ d h^ W/ d
  87. 87. t ,t Z h^ ^ ^ D/W^ D Z D E s E y W E sD / D^Z W sD sD D
  88. 88. sD ^sD sD D DDh W sD / / sD / DDh / sD / sD / W dWZ sD / / sD / s W / d /
  89. 89. WWWWy W/ W/ /K^ y W/ / d D W d ^ d D W d ^ d D d W/ ZKD D D D ZKD / d / ,W /K^/ d W// d d / s /WKZd s/ WKZd s/ d / / / WKZd s/
  90. 90. / // s/ s/ WDW / s/d s d / WKZd ^ d d d EY /Ed/z/
  91. 91. E Z D ^ W E^ E E^ dW d E^ D E^ hW,t DKh^ D D / d ZE DZ ZE Zd ZE Z/d ZE ZZ
  92. 92. ZE t ZE/E ZE EKd/ ZE /EK ZE h^ D d dW ^ h ^ / / ^
  93. 93. E^Wh d E ^DW Wh Wh /KEd,t ^^/ / ^
  94. 94. D E KKd ^DW D ^DW /K W/ KKW D ^^/ D hE^ ^^/ D hE^ / y D y ^ ,t Z /^ D
  95. 95. ^ DD E KKd y h t W/ Z D h^ y D D E ^, D E y ^ /K^ ^ D D E Z D D E W/ D W/ Z
  96. 96. D D E W/ DZ y^ /K^^ , /K^ y h y h
  97. 97. E y ^ D ,t ^ D ^ / ^ /ZYD W d D y DWd D /K^ d /K^ ,t ZDD E KKd ZD ,t ED/E/
  98. 98. d dd d dd d s ^ dd d dd s^ W/K ds Z dE t KE/ h DDKZz /E/d / ZE hDKh^ D DKh^ ,
  99. 99. DKh^ s D E y / WW d / / ,t K^^ Dd W Dd Dd Z Dd Dd ^ ,t Dd K E E
  100. 100. ^ K E E d D K E E K ZD ZD ^ :/s ^h^ ,t D D d h^ D y / h D y h / DdZZ y
  101. 101. Z h / ^ Ed ^ / Z/^ EEZ ,t ^^/ ^ EZ ,t ^^/ ,t ^^/ ,t ^^/ ,t ^^/ ,t ^^/ Ed E E d Ed/dZ KE/ E d d
  102. 102. E^^ E^^ E^ dW E^ E^ E^ E^ E^ E^/ E^d E sZ ^, ^
  103. 103. ED/ E h^ y ^DWs /K W/ ED/ W/ ED/ E d W/t ED/d/ Ed ^ h^ y d ,t E
  104. 104. K d sDD EhD ^ ^E ZD^DW W/ d/K W/WW d WW ZDh^ y h^,E ,t ^^/ D ^^/^, ^Wy /
  105. 105. /yK y W yd^, Whh^ y d h^ y dh^ ZD ^, d ^, ZD d :d h^ y d
  106. 106. d d/ d W , d /,d d KE s^, /Ky y W/ /ZY/^ WEW /^ W WZ D d Z Dy / /KDDh
  107. 107. // /d y W/ W/ y W/ W/ WW WW / y D y D W d D y W d y Ws KW^ y ^DW ^DW hW WW WZ W
  108. 108. ^t^h^W s d , W / h^ y ^z^EdZ ^z^y/d ^DW d ^DW hW /K W/ E E ^ ,t D h^ y d ^ h^ h^ h^ ZD y W/ W/ / K d W sD ^hDD Zz
  109. 109. ^ W K^DW D ^DW EZ Wh^^Z/ h Zd E KKd ^ EhDd^ ,t^ KW Z t KD W K /
  110. 110. ,t K^^,th d y / Wh Wh,t ^^/ ^^/ d ^ E ,t W,t W yd d d,t WWd ^ /ZY Dh
  111. 111. /ZY D /ZY D z /ZY D /ZY D /KW ,t WWd s/ d W,t K^^ ,t ^^/^, Wh d,t /^E
  112. 112. W Z/^^ W/ W/ y W/ y W/ y W/ /K^ h W/ y W/ /K^ h /K^ y W/ D y W/ D W/ / W/ Z W/ W/ W/ W/ W/ y DDKE/ W/ y DD/K W/ D Wh D^/ / W/ D^/
  113. 113. D^/ W/ ^ /ZY d W/ /ZY /K W/ /ZY d /ZY /ZY W/ /ZY /ZY /ZY d y h W/ /K^ d d /ZY W/ y ZKD h ZKD y ZKD /K^DDDD y ^ /ZY W/ z /ZY /^ y ^
  114. 114. W/ZY /K^ E y ^ E y W/ y , /ZY /K^ W/Z d /K^ ,W W E K y d W/ /ZY y W/ /ZY W/ y h W/ W/ K /K^ / y / W/ W/ / /ZY W/ d y ZD
  115. 115. d /yW Wh y d /KDDh ^ W/ d W/ D d /K d D d d d Kd ^ / W ^/ W/ W/ W/ Z Z h /K^ d
  116. 116. d Z d ZW/ W/ ^ WD ^WD ^WDt ZE/E ^WDW/ WD E W/ WDh W/ WD /K^ W/h W/ WD /K^ W/ D^/ W/ WD W/ /Ed,t WD/ W W Z/^ W Z/^ ,t W ^^^
  117. 117. ^ dW Z/^ W Z/^ ^DW W/ D^ /K W/WWd Ed W^ y D / KWK /KWWEW WEW dKE/ WEW h D^^ ^ W//^ WEW
  118. 118. /^ WEW /ZY /^ WEW D /^ WEW /KZ /K /^ WEW Z /W s^ dW /Ws^h /W s^ WW D y WKZd^ E/ WK^/y/
  119. 119. ^ z E ,t W/ D/ ,t W/ / ^d dE W W W Z KE/ ^,^d d^ W sD Z D Z D ^ ,t DKh^ , W^ ,t DKh^ ^ ,t DKh^ d
  120. 120. ,t DKh^ ^,t DKh^ ,t K^^ W ^ ^ ,K ^W Z/^ E E KE ,t ZD,t Z /^ Z D^ Z D ^ Z D^
  121. 121. E KKd ^ Zh E KKd ^ Zh E KKd ^ Zh E Z ^ h^ y h^ ZD h^ /Z ^ E ^DW ^ ^ E h^ y D Z
  122. 122. E ^t^h^W^^t^h^W^ W ^/^ Z D E Ed^,t ^Z/ EE DE ZE E ^E ^
  123. 123. E t h h^ DD E D^ E Z Ed ^ Ed ^E/ E ^^/ ^ ^^/ ^^/ ^^/ ^^/ ^ d ^
  124. 124. ^^/ ^^/ ^hZ/dz / ^/Ehy ^^ / h^ y EdD D^Z^ /K^ D^Zd Wh
  125. 125. Wh ^^/ ,t^ /,t Dd DD ^h DD ^h KKD DD ^hd ^h d
  126. 126. DD ^h D DD ^h D ,ty ^DW K Wh ^DW ,t WEW ^D ,t /K ,t ^/Z /K ,t /Z /K ,t /ZY ,t D ,t d d ^ W d /ZD,t ^
  127. 127. ,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^
  128. 128. ,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^ ,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^
  129. 129. ,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^,t ^
  130. 130. ,t ^ ,t ^ ,t ^ ,t ^ ,t ^ ,t ^h^ ,t ^ h^ ,t ^ ,t ^ ,t ^ ,t ^ E ^ ,t ^ W / K ^ ,t ^Z/ ^ ^
  131. 131. ,t Dd,t K^^,t ^^/ ^^/^ dZ W Z/^ ,t^ ^d/ ,W W Z/^^,t^,tE^ ^hEZW^ ZW
  132. 132. E^ E^ Wh E/ Wh E^EE^ Wh Wh EhD EhDE^ ^hEZW^ZW /
  133. 133. / E / K d ,t D ,t ^^/^ E/h ,t ^^/^ ,t ZD ^h^WE^ ^ Z D d Zd E Ed^ dW ,t W/
  134. 134. ,t W/ ,t W/^ W/,t W/ W/,t W/ ,t W/^ W/,t ^^/^^^d
  135. 135. ,t W^ ,t dWD^ dWD ^ ^d DdZ dZ ^^ ,t K^^ D d d W d^h
  136. 136. ,t :Kz d y ^ ,t ^^/ h ^ ^^/ ^ ,t K^^ ,t K^^ E Ed ^ hW hW h^ / E ^ ^ E y ^h^
  137. 137. h^ d h^ d h^ h^ h^ ^ h^h^ h^ ^h^ h^ ^h^ h^ dh^ h^ ^ h^ ZY d ^Z/WdKZh^ h^,/ dh^ hD^ d h
  138. 138. h^ hD^ s/ W/ s/ W/ s W / h^ ^ E ^E^ ^E^ /y W /dz W /dz ,hZ/^d/^ /EKZ s/ EKd K D y ^dKZ^ W /dz K /EKZ Z^/h ^/E hE h EK tW dd
  139. 139. y Wd Wd ,/,DD KE/ ,/,Wd y ^, s^KKDW d s^K s^K s^K y s^KKDW d s^K s^K s^K / ^DW ^ KKd y ^ ^ h d
  140. 140. D E KKd d D / Z D E ^ W sD W E ^ W sD W E ^ W sD W sd s sd d sd
  141. 141. dsddsd^ hd hdsd^ sd ,t K^^,t ^^/^
  142. 142. ,t ^^/^ ,t td y W/ h y Wd D D/d,t yd K yd / Z ^Ed WD/
  143. 143. WWE/ D E W DE^ s K h d d dd dd s
  144. 144. d y^ ^^ d Kd dE^ d^
  145. 145. dd dD E^ / hh/ hd d d K
  146. 146. t E ,d ZKD K / d d dd /
  147. 147. t d /KdKs K W s D h d E^ d E^ d d /
  148. 148. y^ D K y^ D d / d d E d D D d Dh D d d d
  149. 149. h^ E ^ h^ h^ d / dzW dzW ^ / / K / d t / D d d K
  150. 150. h K/d K K K^ d /K h d h
  151. 151. /W d ^d h d d
  152. 152. d d d /DD /K / d d d d
  153. 153. d s d ^ ^ z / d d d d d // d zd Z^
  154. 154. D ^ ^ D Kd t dt D D ^ ^ ^ ^ D ^ ^ ^ d ^
  155. 155. ^ W W W E d ,D^D:dDEDd dDd /
  156. 156. d Wdz t h/ / / Wdz ^ Wdz d WdzDE E ^ Dd ^ ^ ^ WK^/y ^ dd h D
  157. 157. h DE E d d / W d d t d ^ h/ / d h K K
  158. 158. d dZ / d ^ E d d ^Dd / h t K ^ D d
  159. 159. d d / ^ d DE ^ ^ ^ d d ^ d d ^ d d d
  160. 160. h d D^ K^ ^ d s d d Z E D^ K^ hE/y d d Z E Z E dW ^
  161. 161. s s / s K s d ^ d dh h d h d h K s h K^ dD ^ D K^ ^ ^ ^ ZKD ZKD
  162. 162. d ZKD ^ K ZKD^ D ^ ^ d d Z E d D/^K ZKD d s ^E K^Z Z
  163. 163. Z Z hE/y Z Z D : td Z Z Z Z ^// t ^ Z Z ^ K / ^ ^
  164. 164. / d D ^ ^ ^ ^d D : h d h hdD h ^// d h hd d KE/ E^ hd Z :^d d d d h
  165. 165. dDED^ / dD: dD/ d d d E^
  166. 166. / d E^ D/ d d d E^ / d E^D
  167. 167. h s d Ed^ E h hd h , / d ^ d D d /DZ D hW dDZ d /
  168. 168. d z z Z / d D : / / Wh d , ^,K/^/KE // dd dd d z z Z d d
  169. 169. / d d Z D / d sD dDED: dDEDd D K d d ^
  170. 170. ^ ^D h K ^ d s ZKD ^ ^ ^ d ^ ^ ^ h ^ E^ ^ D ^ ^ ZKD K
  171. 171. K s K W ^ K KD h^ d d W K ^ E ^ ^ K ^ ^ K^ ^ ^ ^ ,W hy E yd^ E yd E ^ ZKD
  172. 172. K ^ d D K^ y ^ / dD^ d KD d K d h d h t d d hd h / / hd
  173. 173. / d dD h^ ^ h^ d ^ h^ d ^dDED
  174. 174. ^ /K /K s K d /K D W/ D W/ ^ s d / ^ s d D h y^ d Z d /^
  175. 175. / d D K ^zE K ^zE d , K ^zE h h Z / / Z / Z / dDEW ^ K
  176. 176. d d/ / zZ KZ
  177. 177. ^/^ ^dD // d E^ / E^ E^, s d d hE/y
  178. 178. h h^h^ E D E D E /K D E E d d d d EhD D D
  179. 179. E E D /Z , Z^d hd , Z^d hdh
  180. 180. D^zEKW^/^^Z/Wd/KEd hE/sZ^ d dD W d, Z^Ks d W d, Z^Ks KWd/KE^ h Z d d /
  181. 181. d / ^ W h / h /Z Z^ E / dd Z
  182. 182. t K ^ W d d hE/sZ^ d d WZE WEZd d ^ Z d d yKZ d d d d d yKZ / yKZ d d WZE d WZE d
  183. 183. d WZE d d WZE d d Dd Z^ ^ / D D D d Z^ ^ / D D ^, ^,/W^ ^, /W^ ^ Z ^, ^,/W^ ^, /W^ ^, ^,/W^ ^, /W^ ^, ^,/W^ ^, /W^
  184. 184. d d^ d ^ d / ^ d E s WZE Es ^ d WZE ^ dW d, Z^Ks, d W d, Z^KsW d W d, Z^Ks ^ ^K/DWDEd d/KE
  185. 185. d dZ d d/ W^ ^,^ KWd/KE /W ^, t / / ^, /dd /W^ t
  186. 186. d /t h ^ D DZ Z ^ /d z Eh W d EK t ZZ Edz^d d /Z
  187. 187. D D ^, ^, d t^ s D y ^ /^ / /^ W E d / ^ K / / / ^ W
  188. 188. d t d d d d , E ^ Z E^Z E / ^ d / / d y ^hE/K ^hWWKZd ^ d EKd d D ^hE/K ^hWWKZdD y ^ D t d y ^ d D
  189. 189. d d / D y ^ hE/K ^hWWKZd Dd K t K D y ^ W / Y h Eh h / d ^
  190. 190. d ^s d ^s d Z E W ^ ^ ^ ^ ^s ^h ^ h Dt t h E h z h
  191. 191. Z sZ ^ E h h h h h / ^ Z : /h d /Z t t^d h^ / h^ h^ d Wh/KD /E W W W d^ KWz/Ed EK DZ, Ed //dz /dE^^ KZW Zd/h Z WhZWK^
  192. 192. ^D Z D d D Zd ^, Zd ^, /W^d d Z dd t t W
  193. 193. , d sh / , ^, K , ^, K , ^, K KWd/KE^ d K, ^, KKWd/KE^ Eh Eh /d E EZWE D grep, egrep, fgrep, rgrep - print lines matching a pattern^zEKW^/^ grep [options] PATTERN [FILE...] grep [options] [-e PATTERN | -f FILE] [FILE...]^Z/Wd/KE
  194. 194. grep searches the named input FILEs (or standard input ifno files are named, or the file name - is given) for lines containing amatch to the given PATTERN. By default, grep prints the matching lines. In addition, three variant programs egrep, fgrep and rgrepare avail- able. egrep is the same as grep -E. fgrep is the sameas grep -F. rgrep is the same as grep -r.KWd/KE^ -A NUM, --after-context=NUM Print NUM lines of trailing context aftermatching lines. Places a line containing -- between contiguous groups of matches. -a, --text Process a binary file as if it were text; this isequivalent to the --binary-files=text option. -B NUM, --before-context=NUM Print NUM lines of leading context beforematching lines. Places a line containing -- between contiguous groups of matches. -b, --byte-offset Print the byte offset within the input file beforeeach line of output. --binary-files=TYPE If the first few bytes of a file indicate that thefile contains binary data, assume that the file is of type TYPE.By default, TYPE is binary, and grep normally outputs either aone-line mes- sage saying that a binary file matches, or no messageif there is no match. If TYPE is without-match, grepassumes that a binary file does not match; this is equivalent to the-I option. If TYPE is text, grep processes a binary file asif it were text; this is equivalent to the -a option. Warning: grep
  195. 195. --binary-files=text might output binary garbage,which can have nasty side effects if the output is a terminal and ifthe termi- nal driver interprets some of it as commands. -C NUM, --context=NUM Print NUM lines of output context. Places a linecontaining -- between contiguous groups of matches. -c, --count Suppress normal output; instead print a count ofmatching lines for each input file. With the -v, --invert-matchoption (see below), count non-matching lines. --colour[=WHEN], --color[=WHEN] Surround the matching string with the marker find inGREP_COLOR environment variable. WHEN may be `never, `always,or `auto -D ACTION, --devices=ACTION If an input file is a device, FIFO or socket, useACTION to pro- cess it. By default, ACTION is read, which meansthat devices are read just as if they were ordinary files.If ACTION is skip, devices are silently skipped. -d ACTION, --directories=ACTION If an input file is a directory, use ACTION toprocess it. By default, ACTION is read, which means thatdirectories are read just as if they were ordinary files. If ACTION isskip, direc- tories are silently skipped. If ACTION is recurse,grep reads all files under each directory, recursively; this isequivalent to the -r option. -E, --extended-regexp Interpret PATTERN as an extended regular expression(see below). -e PATTERN, --regexp=PATTERN Use PATTERN as the pattern; useful to protectpatterns beginning with -. -F, --fixed-strings
  196. 196. Interpret PATTERN as a list of fixed strings,separated by new- lines, any of which is to be matched. -f FILE, --file=FILE Obtain patterns from FILE, one per line. Theempty file con- tains zero patterns, and therefore matches nothing. -G, --basic-regexp Interpret PATTERN as a basic regular expression(see below). This is the default. -H, --with-filename Print the filename for each match. -h, --no-filename Suppress the prefixing of filenames on output when multiple files are searched. --help Output a brief help message. -I Process a binary file as if it did not containmatching data; this is equivalent to the --binary-files=without-match option. -i, --ignore-case Ignore case distinctions in both the PATTERN andthe input files. -L, --files-without-match Suppress normal output; instead print the name ofeach input file from which no output would normally have beenprinted. The scanning will stop on the first match. -l, --files-with-matches Suppress normal output; instead print the name ofeach input file from which output would normally have been printed. The scanning will stop on the first match. --label=LABEL Displays input actually coming from standard input asinput com- ing from file LABEL. This is especially useful fortools like zgrep, e.g. gzip -cd foo.gz |grep --label=foosomething --line-buffered Use line buffering, it can be a performance penalty.
  197. 197. -m NUM, --max-count=NUM Stop reading a file after NUM matching lines. Ifthe input is standard input from a regular file, and NUM matchinglines are output, grep ensures that the standard input ispositioned to just after the last matching line before exiting,regardless of the presence of trailing context lines. Thisenables a calling process to resume a search. When grep stops afterNUM matching lines, it outputs any trailing context lines. When the -c or --count option is also used, grep does notoutput a count greater than NUM. When the -v or --invert-matchoption is also used, grep stops after outputting NUM non-matchinglines. --mmap If possible, use the mmap(2) system call to readinput, instead of the default read(2) system call. In somesituations, --mmap yields better performance. However, --mmap can causeundefined behavior (including core dumps) if an input fileshrinks while grep is operating, or if an I/O error occurs. -n, --line-number Prefix each line of output with the line numberwithin its input file. -o, --only-matching Show only the part of a matching line that matchesPATTERN. -P, --perl-regexp Interpret PATTERN as a Perl regular expression. -q, --quiet, --silent Quiet; do not write anything to standard output.Exit immedi- ately with zero status if any match is found, even ifan error was detected. Also see the -s or --no-messagesoption. -R, -r, --recursive Read all files under each directory, recursively;this is equiv- alent to the -d recurse option.
  198. 198. --include=PATTERN Recurse in directories only searching file matchingPATTERN. --exclude=PATTERN Recurse in directories skip file matching PATTERN. -s, --no-messages Suppress error messages about nonexistent orunreadable files. Portability note: unlike GNU grep, traditional grepdid not con- form to POSIX.2, because traditional grep lacked a -qoption and its -s option behaved like GNU greps -q option.Shell scripts intended to be portable to traditional grep shouldavoid both -q and -s and should redirect output to /dev/nullinstead. -U, --binary Treat the file(s) as binary. By default, under MS-DOS and MS- Windows, grep guesses the file type by looking atthe contents of the first 32KB read from the file. If grepdecides the file is a text file, it strips the CR characters fromthe original file contents (to make regular expressions with ^and $ work correctly). Specifying -U overrules this guesswork,causing all files to be read and passed to the matchingmechanism verbatim; if the file is a text file with CR/LF pairs at theend of each line, this will cause some regular expressions tofail. This option has no effect on platforms other than MS-DOSand MS-Win- dows. -u, --unix-byte-offsets Report Unix-style byte offsets. This switchcauses grep to report byte offsets as if the file were Unix-styletext file, i.e. with CR characters stripped off. This willproduce results identical to running grep on a Unix machine. Thisoption has no effect unless -b option is also used; it has noeffect on plat-
  199. 199. forms other than MS-DOS and MS-Windows. -V, --version Print the version number of grep to standard error.This ver- sion number should be included in all bug reports(see below). -v, --invert-match Invert the sense of matching, to select non-matchinglines. -w, --word-regexp Select only those lines containing matches thatform whole words. The test is that the matching substring musteither be at the beginning of the line, or preceded by anon-word con- stituent character. Similarly, it must be either atthe end of the line or followed by a non-word constituentcharacter. Word- constituent characters are letters, digits, and theunderscore. -x, --line-regexp Select only those matches that exactly match thewhole line. -y Obsolete synonym for -i. -Z, --null Output a zero byte (the ASCII NUL character)instead of the character that normally follows a file name. Forexample, grep -lZ outputs a zero byte after each file nameinstead of the usual newline. This option makes the outputunambiguous, even in the presence of file names containing unusualcharacters like newlines. This option can be used with commandslike find -print0, perl -0, sort -z, and xargs -0 to processarbitrary file names, even those that contain newlinecharacters. -z, --null-data Treat the input as a set of lines, each terminatedby a zero byte (the ASCII NUL character) instead of anewline. Like the

×