blob: 3f20781a74c63a932a00509abdc7d9b837ce5d6c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
|
'\" t
.\" Title: samba-log-parser
.\" Author: [see the "AUTHOR" section]
.\" Generator: DocBook XSL Stylesheets vsnapshot <http://docbook.sf.net/>
.\" Date: 05/09/2024
.\" Manual: User Commands
.\" Source: Samba 4.20.1
.\" Language: English
.\"
.TH "SAMBA\-LOG\-PARSER" "1" "05/09/2024" "Samba 4\&.20\&.1" "User Commands"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
samba-log-parser \- Samba (winbind) trace parser\&.
options:
\-h, \-\-help show this help message and exit
\-\-traceid ID specify the traceid of the trace records
\-\-pid PID specify the pid of winbind client
\-\-breakdown breakdown the traces into per traceid files
\-\-merge\-by\-timestamp merge logs by timestamp
\-\-flow show the request/sub\-request flow traces
\-\-flow\-compact show the request/sub\-request flow traces without dcerpc details
.SH "SYNOPSIS"
.HP \w'\ 'u
samba\-log\-parser {path} [\-\-pid=PID] [\-\-traceid=ID] [\-\-breakdown] [\-\-merge\-by\-timestamp] [\-\-flow] [\-\-flow\-compact] [\-h|\-\-help]
.SH "DESCRIPTION"
.PP
This tool is part of the
\fBsamba\fR(7)
suite\&.
.PP
The
samba\-log\-parser
program parses samba winbind logs\&.
.SH "OPTIONS"
.PP
The following options are available to the
samba\-log\-parser
program\&.
.PP
\-\-pid=PID
.RS 4
Display traces for winbind client with the matching PID\&.
.RE
.PP
\-\-traceid=ID
.RS 4
Display traces with matching traceid debug header field\&.
.RE
.PP
\-\-breakdown
.RS 4
Break down all traces to separate files in the current working directory\&. For each traceid, three files are created: traceid\&.full traceid\&.flow traceid\&.flowcompact
.RE
.PP
\-\-merge\-by\-timestamp
.RS 4
Sort the trace lines according to the timestamp\&. Works with log files without traceid header field as well\&.
.RE
.PP
\-\-flow
.RS 4
Display the request/sub\-request flow\&.
.RE
.PP
\-\-flow\-compact
.RS 4
Display the request/sub\-request flow without dcerpc call details\&.
.RE
.SH "EXAMPLES"
.PP
Show the flow traces for trace id
\fI1234\fR
from log file log\&.winbind:
.sp
.if n \{\
.RS 4
.\}
.nf
# samba\-log\-parser \-\-traceid 1234 \-\-flow /var/log/samba/log\&.winbind
.fi
.if n \{\
.RE
.\}
.PP
Show the full traces for winbind client with PID
\fI999999\fR
sorted using the timestamp for log files found in the samba log directory:
.sp
.if n \{\
.RS 4
.\}
.nf
# samba\-log\-parser \-\-pid 999999 \-\-merge\-by\-timestamp /var/log/samba
.fi
.if n \{\
.RE
.\}
.PP
Break down the traces into separate files according to traceid sorted using the timestamp for log files found in the samba log directory:
.sp
.if n \{\
.RS 4
.\}
.nf
# samba\-log\-parser \-\-breakdown \-\-merge\-by\-timestamp /var/log/samba
.fi
.if n \{\
.RE
.\}
.PP
Sort traces using the timestamp for log files found in the samba log directory\&. Traces do not need to contain the traceid header field\&.
.sp
.if n \{\
.RS 4
.\}
.nf
# samba\-log\-parser \-\-merge\-by\-timestamp /var/log/samba
.fi
.if n \{\
.RE
.\}
.SH "VERSION"
.PP
This man page is part of version 4\&.20\&.1 of the Samba suite\&.
.SH "AUTHOR"
.PP
The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&.
|
