BRO-CUT(1)

📦 version 0.42, in debian bookworm, debian trixie, ubuntu jammy, ubuntu noble, ubuntu resolute

✨ NAME ✨

okay bestie, this is the manual page for bro-cut, and it's from the User Commands corner of the man page universe 💖 and what it does is parse bro logs. that's it. that's the whole vibe. 🦋

🌸 SYNOPSIS 🌸

bro-cut [options] [<columns>]

🎀 DESCRIPTION 🎀

so like, bro-cut pulls the columns you ask for out of an ASCII Bro log that's coming in on standard input 📥. if you don't give it any columns? it just selects all of them, no big deal, main character behavior. 👑

and by default — and this is important, bestie — bro-cut does not include format header blocks in the output. like, it just skips them. so clean. so minimal. 💅

💜 OPTIONS 💜

  • -c — includes the first format header block in the output. just the one. 🥇
  • -C — includes all format header blocks in the output. greedy in the best way, we love to see it. 💖
  • -d — converts time values into a human-readable format. lowkey essential. needs gawk though, so check that first. 🫶
  • -D <fmt> — same energy as -d, but you get to specify the format for the time yourself. peep strftime(3) for the syntax. iykyk. 🧚
  • -F <ofs> — sets a different output field separator. so if you're not feeling the default, go off. 🌈
  • -n — prints all fields except the ones you specified. yes, it flips the whole thing. iconic. 🙈
  • -u — like -d, but prints timestamps in UTC instead of local time. needs gawk too. ⭐
  • -U <fmt> — like -D, but prints timestamps in UTC instead of local time. needs gawk. 🌸

🦋 ENVIRONMENT 🦋

  • BRO_CUT_TIMEFMT — for the time conversion, you can also specify the format string by setting the environment variable $BRO_CUT_TIMEFMT. so you literally never have to type it out again, obsessed. ✨

💖 EXAMPLES 💖

here's the moment you've been waiting for, bestie:

cat conn.log | bro-cut -d ts id.orig_h id.orig_p

cat the log, pipe it in, grab those columns, human-readable timestamps, slay. 🔥

👑 AUTHOR 👑

bro-cut was written by The Bro Project <info@bro.org>. 💌

this manual page was written by Raúl Benencia <rul@kalgan.cc> for the Debian project (but may be used by others). no gatekeeping here, the door is open. 🎀

and that's the whole page fr fr 💀 this is bro-cut, from the bro-cut source, dated November 2014. go forth and parse those logs, you absolute legend. 🌟💅🦋

📦 where this page comes from