python - Deciphering hex-codes as (probably) a timestamp -

-

i'm parsing logs unclean , exist on 1 line per log-file.

i've managed strip them apart regular expressions, leaving me weird hex-like number , it's log-string. think sequence in hex-like number timestamp, can't figure out how decipher it.

i wondering if might see pattern.

513328f8003d 51332900003d 5133290c003d 5133293c003d 51332945003d 5133294e003d 51332955003d

this seconds later

5134519a102b 5134519c0039 513451b0132b 513451b3102b 513451b31329 513451b3182b 513451b31a2f

in few occasions, numbers same. on around 28000 rows happens few times. i'm guessing logs time per second, , in few cases generate encoded timestamp on exact same time, this:

51345d391929 51345d391929 51345d3a042b

the update time of log-file (except double-time stated above) around 08:45 morning.

maybe it's weird way of notating microtime? can't figure out :p

it seems leftmost 4 bytes timestamp:

in [29]: datetime.datetime.fromtimestamp(0x5134519a) out[29]: datetime.datetime(2013, 3, 4, 11, 47, 38)  in [30]: datetime.datetime.fromtimestamp(0x51332955) out[30]: datetime.datetime(2013, 3, 3, 14, 43, 33)

what maximum value of rightmost 2 bytes? if not uniformly 0000-ffff it's unlikely it's fractional seconds. , they're larger 0x3e8, can't milliseconds.


Comments

Post a Comment

Popular posts from this blog

ruby - Trying to change last to "x"s to 23 -

-
i have been playing around irb , have string looks this: irb(main):072:0> puts ["[\"4354 5432 5432 xxxxx\", \"6547 6547 8543 xxxxx\", \"2344 6543 6674 xxxxx\", \"2346 6236 7543 xxxxx\", \"1273 5585 5587 xxxxx\"]"] => nil irb(main):073:0> what want gsub last 2 "x" s of each 17 digit combination, 23 . what i've tried far (i've been using rubular): a.gsub(/\d[x]/,"23") <= grabs "x" s i'm close a.gsub(/\w[x{2}]/,"23") <= grabs "x" s grabs two digits each combination. is there easier way i'm not understanding? a.gsub(/\d{4} \d{4} \d{4} xxx\kxx/, '23') \d{4} = 4 digits what \k drop matched far. can use don't replace entire number, still able validate have in desired format.
Read more

jquery - Clone last and append item to closest class -

-
this bare-bones code on page: <div class="list-container"> <div class="single-list-item"> <button>remove</button> </div> <div class="single-list-item"> <button>remove</button> </div> <div class="single-list-item"> <button>remove</button> </div> </div> <p><button class="add-list-item">add</button></p> <div class="list-container"> <div class="single-list-item"> <button>remove</button> </div> <div class="single-list-item"> <button>remove</button> </div> <div class="single-list-item"> <button>remove</button> </div> </div> <p><button class="add-list-item">add</button></p> <di
Read more

c - Unrecognised emulation mode: elf_i386 on MinGW32 -

-
i'm trying make kernel, , cannot link c output assembly. ld . i'm getting error: unrecognized emulation mode: elf_i386 i'm using windows 10 professional mingw32 , msys. code using: link.ld /* * link.ld */ output_format(elf32-i386) entry(start) sections { . = 0x100000; .text : { *(.text) } .data : { *(.data) } .bss : { *(.bss) } } kernel.c /* * kernel.c */ void kmain(void) { const char *str = "my first kernel"; char *vidptr = (char*)0xb8000; //video mem begins here. unsigned int = 0; unsigned int j = 0; /* loops clears screen * there 25 lines each of 80 columns; each element takes 2 bytes */ while(j < 80 * 25 * 2) { /* blank character */ vidptr[j] = ' '; /* attribute-byte - light grey on black screen */ vidptr[j+1] = 0x07; j = j + 2; } j = 0; /* loop writes string video memory */ while(str[j] != '\0') { /
Read more