nooneneedsjq.py

nooneneedsjq.py

import json
import pprint
import sys

def main():

    if len(sys.argv) < 4:
        print("Must pass <filename>.json src IP dst IP <connection state> arguments")
        sys.exit(1)

    with open(sys.argv[1], 'r') as f:

        pp = pprint.PrettyPrinter(indent=4)

        for line in f:
            try:
                conn = json.loads(line)
            except ValueError as e:
                print("{0} {1}".format("Cannot read JSON logs", e))
            if conn['conn_state'] == sys.argv[4]:
                if conn['id.orig_h'] == sys.argv[2]:
                    if conn['id.resp_h'] == sys.argv[3]:
                        pp.pprint(conn)

if __name__ == '__main__':
    main()