Mac 地址的 Grep 正则表达式

Question

I need help with a regex to extract mac addresses from a large file.

Here is the format of the file:

Wed Apr 25 10:15:32 EDT 2012 Client: 00aa11bb22cc mac
Wed Apr 25 10:15:34 EDT 2012 Client: aa11bb22cc33 pc

Here is what I am currently trying with no luck:

grep -io '[0-9a-f]{12}' file.txt > macs.txt

Any ideas? I just want to extract only the mac address part into the file called macs.txt .

Answer 1

尝试：

grep -io '[0-9a-f]\{12\}' file.txt > macs.txt

Answer 2

((([0-9a-fA-F]{2})[ :-]){5}[0-9a-fA-F]{2})|(([0-9a-fA-F]){6}[
:-]([0-9a-fA-F]){6})|([0-9a-fA-F]{12})

I tested it against following expression that I know for MAC-Adresses. Depending on the syntax of systems, firmwares and applikations.

F3 D3 A4 C1 99 E2
F3:D3:A4:C1:99:E2
F3-D3-A4-C1-99-E2
f3 d3 a4 c1 99 e2
f3:d3:a4:c1:99:e2
f3-d3-a4-c1-99-e2
f3d3a4 c199e2
f3d3a4:c199e2
f3d3a4-c199e2
f3d3a4c199e2
F3D3A4C199E2

Answer 3

One way using sed :

sed -e 's/^.*\([a-fA-F0-9]\{12\}\).*$/\1/' file.txt > macs.txt

Result:

00aa11bb22cc
aa11bb22cc33

Answer 4

egrep would work:

egrep -io '[0-9a-f]{12}' file.txt > macs.txt

There are 2 options for grep to handle regex,

grep -e 

and

grep -E

One of them is equal to egrep and I guess now you know which. :)

Answer 5

This command line will extract all the MAC addresses from a regular file. It works on macOS.

It extracts from a regular file any MAC address on it. In the example, the regular file file.txt has mixed information including MAC addresses. The following command will extract them and save them on the macs.txt file.

grep -o -E '([[:xdigit:]]{1,2}:){5}[[:xdigit:]]{1,2}' file.txt > macs.txt