Changeset 45 for trunk


Ignore:
Timestamp:
08/06/05 10:08:53 (19 years ago)
Author:
tim
Message:

updated man page for version 0.2

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/doc/reglookup.1.t2t

    r28 r45  
    33
    44=NAME=
    5         reglookup - Windoze NT/2K/XP registry reader/lookup tool
     5        reglookup - windows NT+ registry reader/lookup tool
    66
    77
    … …  
    1111
    1212=DESCRIPTION=
    13         reglookup is designed to read Windoze registry elements and
    14         print them out to stdout.  It has several filtering options to
    15         narrow the focus of the output.
     13        reglookup is designed to read windows registry elements and
     14        print them out to stdout in a CSV-like format.  It has filtering
     15        options to narrow the focus of the output.  This tool is
     16        designed to work with on windows NT/2K/XP/2K3 registries, though
     17        your mileage may vary.
    1618
    1719
    1820=OPTIONS=
    19         -f<PREFIX_FILTER>       
    20                 Specify a path filter.  Only keys/values under this
    21                 registry path will be output.
     21        -p  <PREFIX_FILTER>     
     22                Specify a path prefix filter.  Only keys/values under
     23                this registry path will be output.
    2224
    23         -t<TYPE_FILTER>
     25        -t  <TYPE_FILTER>
    2426                Specify a type filter.  Only elements which match this
    2527                registry data type will be printed.  Acceptable values
    26                 are: SZ,EXPAND_SZ,BIN,DWORD,MULTI_SZ,KEY
     28                are: SZ,EXPAND_SZ,BINARY,DWORD,DWORD_BE,LINK,MULTI_SZ,
     29                     RSRC_LIST,RSRC_DESC,RSRC_REQ_LIST,KEY
    2730
    28         -s      Print security descriptors as well as keys/values/data.
    29                 (This feature's output is not standardized, and probably
    30                 contains bugs.)
    31        
     31        -s      Adds four additional columns to output containing
     32                information from key security descriptors.  The columns
     33                are: owner, group, sacl, dacl.
     34                (This feature's output probably contains bugs right now.)
     35
     36        -S      Disables the printing of security descriptor
     37                information.
     38
    3239        -v      Verbose output.
     40                (Currently does little to nothing.)
    3341
    3442
    … …  
    3644                Required argument.  Specifies the location of the
    3745                registry file to read.  Typically, these files will be
    38                 found on a Windoze partition under
     46                found on a NTFS partition under
    3947                %SystemRoot%/system32/config.
    4048
    4149
    4250=EXAMPLES=
    43         To read and print an entire registry:
     51        To read and print the contents of an entire system registry
     52        file:
    4453
    4554          **reglookup /mnt/win/c/WINNT/system32/config/system**
    … …  
    4857        key:
    4958
    50           **reglookup -f'$$$PROTO.HIV/ControlSet002/Services' /mnt/win/c/WINNT/system32/config/system**
     59          **reglookup -p /ControlSet002/Services /mnt/win/c/WINNT/system32/config/system**
    5160
    52         To limit the output to all registry values of type BIN:
     61        To limit the output to all registry values of type BINARY:
    5362
    54           **reglookup -tBIN /mnt/win/c/WINNT/system32/config/system**
     63          **reglookup -t BINARY /mnt/win/c/WINNT/system32/config/system**
    5564       
    56         And to limit the output to BIN values under the Services key:
     65        And to limit the output to BINARY values under the Services key:
    5766
    58           **reglookup -tBIN -f'$$$PROTO.HIV/ControlSet002/Services' /mnt/win/c/WINNT/system32/config/system**
     67          **reglookup -t BINARY -p /ControlSet002/Services /mnt/win/c/WINNT/system32/config/system**
    5968
    6069
    6170=BUGS=
    62         Path filtering is currently a slow hack.
     71        The current incarnation of this program has only been tested on
     72        windows 2K/XP.
    6373
    64         The current incarnation of this program has only been tested on
    65         Windoze 2000.
     74        Verbose output is not working.
    6675
    6776        You'll notice that registry paths aren't all the same as the
    68         ones the equivalents you see in Windoze.  Don't ask me why that
    69         is.  I just work here.
     77        ones the equivalents you see in the windows registry editor.
     78        Don't ask me why that is.  I just work here.
    7079
    7180        This software should be considered unstable at this time.
    … …  
    7382
    7483=CREDITS=
    75         This program is based on editreg.c by Richard Sharpe.
    76 
    77         It has since been modified by Timothy D. Morgan.
     84        This program was initially based on editreg.c by
     85        Richard Sharpe.  It has since been rewritten to use a modified
     86        version the regfio library written by Gerald Carter.  Heavy
     87        modifications to the library and the original command line
     88        interface have been done by Timothy D. Morgan.
    7889
    7990        Please see source code for a full list of copyrights.
Note: See TracChangeset for help on using the changeset viewer.