Parsing text into object

The result from a DOS command is text lines which does not have a "real" column. If you want to analyze the result, you must parse the text yourself.

For example, we want to find out the IP to physical addresses, we use the following command:

    arp -a

The result looks like this:

Interface: 192.168.1.100 --- 0x5
  Internet Address      Physical Address      Type
  192.168.1.1           18-31-bf-53-7a-24     dynamic  
  192.168.1.255         ff-ff-ff-ff-ff-ff     static   
  224.0.0.22            01-00-5e-00-00-16     static   
  224.0.0.251           01-00-5e-00-00-fb     static   
  224.0.0.252           01-00-5e-00-00-fc     static   
  239.255.255.250       01-00-5e-7f-ff-fa     static   
  255.255.255.255       ff-ff-ff-ff-ff-ff     static 

To parse this result, we will run the following Powershell script:

class myObject {
    [string]$ip
    [string]$addr
    [string]$type
}

$l = (arp -a)

$inPreamble = $true

switch -Regex ($l) {

    # skip the header
    {$inPreamble -and $_ -match 'Internet Address'} { $inPreamble = $false; continue }

    # parse the item lines with pattern:
    # - spaces
    # - ip (non spaces)
    # - addr (non spaces)
    # - type (non spaces)

    "^\s+(?<ip>\S+)\s+(?<addr>\S+)\s+(?<type>\S+)" {
       
        [myObject] @{
            ip = $matches.ip
            addr = $matches.addr
            type = $matches.type
        }

        continue
    }
   
}

# reference: https://devblogs.microsoft.com/powershell/parsing-text-with-powershell-2-3/


Comments

Post a Comment

Popular posts from this blog

Scheduled task in Windows Task Scheduler - part 3

This is the last part of Task Scheduler - security context which is created using New-ScheduledTaskPrincipal. Usually, we are using S4U logon type for any server scheduled task + Highest Run Level. S4U details as per MS documentation: Use an existing interactive token to run a task. The user must log on using a service for user (S4U) logon. When an S4U logon is used, no password is stored by the system and there is no access to either the network or encrypted files. You can find more information in this page:     https://docs.microsoft.com/en-us/windows/win32/taskschd/principal-logontype For any user ID that you specified to run the scheduled task, it requires "Log on as a batch job" or "Log on as a service". You can find the details here:     https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/log-on-as-a-batch-job     https://docs.microsoft.com/en-us/windows/security/threat-protection/...
Read more

Create scheduled task in Windows Task Scheduler

Windows Task Scheduler is a utility that helps to execute any process periodically. For example, you want to sync your working files on daily basis, scanning virus, process some data, etc. A task has the following components: Action or multiple actions - which is the process that you want to run periodically. We use New-ScheduledTaskAction to create new action object. Trigger - which is the time to run the process and it can have multiple timing. We use New-ScheduledTaskTrigger to create new trigger. Security context - any process must run in a valid security context. We can set the context using New-ScheduledTaskPrincipal. The following script creates an on demand task which requires user to manually trigger the task. $task_folder = "\myTasks\" $task_name = "myTask2" # this can be any Powershell script. $ps_script_file = "d:\temp5\test-script.ps1" ## The first line will show err if $task_folder does not exist. ## The second line will not...
Read more

Get all website entries in IIS

It's very easy to get the list of the website entries in IIS with 3 lines of code.   Import-Module WebAdministration   cd IIS:\Sites   Get-ChildItem | select name Explanation: 1. We need to import the WebAdministration PS module. This module includes all the necessary API for Powershell to interact with IIS. 2. The second line is to change the current location to IIS Sites folder. 3. Finally, get all the items in the current location.
Read more