Provided by: gztool_1.6.0-1_amd64 
NAME
gztool - extract random-positioned data from gzip files, even like `tail -f`
SYNOPSIS
gztool
[ [-[abLnsv] #] [-[1..9]AcCdDeEfFhilpPrRStTwWxXzZ|u[cCdD]] [-I <INDEX>] ] "files" ...
Note that actions `-bcStT` proceed to an index file creation (if none exists) INTERLEAVED
with data flow. As data flow and index creation occur at the same time there's no waste of
time. Also you can interrupt actions at any moment and the remaining index file will be
reused (and completed if necessary) on the next gztool run over the same data.
DESCRIPTION
gztool is a GZIP files indexer, compressor and data retriever. It can create small
indexes for gzipped files and use them for quick and random-positioned data extraction.
gztool can extract random-positioned data from gzip files with no penalty, including gzip
tailing like with `tail -f`.
gztool creates an index file (.gzi) for every gzip it treats, and this action is
interleaved with compression/uncompression so there's no waste of time. Any action can be
interrupted at any moment, and the remaining index will be reused on next runs.
Extraction is possible from any byte (or line) position in the uncompressed data using
`-b` (or `-L` for lines).
If the uncompressed file is a text file, then using the `-x` modifier the index will take
care of lines, so later gztool can be requested to extract data from a particular line
with `-L`.
See the full listing of capabilities on INTERNALS.
OPTIONS
files One or more files. If no file is indicated, standard input is used.
-[1..9]
compression factor to use with `-[c|u[cC]]`, from best speed (`-1`) to best
compression (`-9`). Default is `-6`.
-a # Await # seconds between reads when `-[ST]|Ec`. Default is 4 s.
-A modifier for `-[rR]` to indicate the range of bytes/lines in absolute values,
instead of the default incremental values.
-b # extract data from indicated uncompressed byte position of gzip file (creating or
reusing an index file) to STDOUT. Accepts '0', '0x', and suffixes 'kmgtpe' (^10)
or 'KMGTPE' (^2).
-C always create a 'Complete' index file, ignoring possible errors.
-c compress a file like with gzip, creating an index at the same time.
-d decompress a file like with gzip.
-D do not delete original file when using `-[cd]`.
-e if multiple files are indicated, continue on error (if any).
-E end processing on first GZIP end of file marker at EOF. Nonetheless with `-c`,
`-E` waits for more data even at EOF.
-f force file overwriting if destination file already exists.
-F force index creation/completion first, and then action: if `-F` is not used, index
is created interleaved with actions.
-h print brief help; `-hh` prints this help.
-i create index for indicated gzip file (For 'file.gz' the default index file name
will be 'file.gzi'). This is the default action.
-I string
index file name will be the indicated string.
-l check and list info contained in indicated index file. `-ll` and `-lll` increase
the level of index checking detail.
-L # extract data from indicated uncompressed line position of gzip file (creating or
reusing an index file) to STDOUT. Accepts '0', '0x', and suffixes 'kmgtpe' (^10)
or 'KMGTPE' (^2).
-n # indicates that the first byte on compressed input is #, not 1, and so truncated
compressed inputs can be used if an index exists.
-p indicates that the gzip input stream may be composed of various incorrectly
terminated GZIP streams, and so then a careful Patching of the input may be needed
to extract correct data.
-P like `-p`, but when used with `-[ST]` implies that checking for errors in stream is
made as quick as possible as the gzip file grows. Warning: this may lead to some
errors not being patched.
-r # (range): Number of bytes to extract when using `-[bL]`. Accepts '0', '0x', and
suffixes 'kmgtpe' (^10) 'KMGTPE' (^2).
-R # (Range): Number of lines to extract when using `-[bL]`. Accepts '0', '0x', and
suffixes 'kmgtpe' (^10) 'KMGTPE' (^2).
-s # span in uncompressed MiB between index points when creating the index. By default
is `10`.
-S Supervise indicated file. Create a growing index, for a still-growing gzip file.
(`-i` is implicit).
-t tail (extract last bytes) to STDOUT on indicated gzip file.
-T tail (extract last bytes) to STDOUT on indicated still-growing gzip file, and
continue Supervising & extracting to STDOUT.
-u [cCdD]
utility to compress (`-u c`) or decompress (`-u d`) zlib-format files to STDOUT.
Use `-u C` and `-u D` to manage raw compressed files. No index involved.
-v # output verbosity from `0` (none) to `5` (nuts). Default is `1` (normal).
-w wait for creation if file doesn't exist, when using `-[cdST]`.
-W do not Write index to disk. But if one is already available read and use it. Useful
if the index is still under a `-S` run.
-x create index with line number information (win/*nix compatible).
Please, note that gztool's index counts last line even if the last char isn't a
newline char - whilst `wc` command will not count it in this case!.
This is implicit unless `-X` or `-z` are indicated.
-X like `-x`, but newline character is '\r' (old mac).
-z create index without line number information.
-Z adjust index points to a byte boundary: no previous byte needed.
QUICK EXAMPLE
Extract data from 1 GiB byte (byte 2^30) on, from `myfile.gz` to the file `myfile.txt`.
Also gztool will create (or reuse, or complete) an index file named `myfile.gzi`:
$ gztool -b 1G myfile.gz > myfile.txt
MORE EXAMPLES
* Make an index for `test.gz`. The index will be named `test.gzi`:
$ gztool -i test.gz
* Make an index for `test.gz` with name `test.index`, using `-I`:
$ gztool -I test.index test.gz
* Also `-I` can be used to indicate the complete path to an index in another directory.
This way the directory where the gzip file resides could be read-only and the index be
created in another read-write path:
$ gztool -I /tmp/test.gzi test.gz
* Retrieve data from uncompressed byte position 1000000 inside test.gz. Index file will be
created at the same time (named `test.gzi`):
$ gztool -b 1m test.gz
* Supervise an still-growing gzip file and generate the index for it on-the-fly. The index
file name will be `openldap.log.gzi` in this case. `gztool` will execute until interrupted
(it can also stop at first end-of-gzip data with `-E`):
$ gztool -S openldap.log.gz
* The previous command can be sent to background and with no verbosity, so we can forget
about it:
$ gztool -v0 -S openldap.log.gz &
Creating and index for all "*gz" files in a directory:
$ gztool -i *gz
* Extract data from `project.gz` byte at 1 GiB to STDOUT, and use `grep` on this output.
Index file name will be `project.gzi`:
$ gztool -b 1G project.gz | grep -i "balance = "
* Please, note that STDOUT is used for data extraction with `-bcdtT` modifiers, so an
explicit command line redirection is needed if output is to be stored in a file:
$ gztool -b 99m project.gz > uncompressed.data
* Extract data from a gzipped file which index is still growing with a `gztool -S` process
that is monitoring the (still-growing) gzip file: in this case the use of `-W` will not
try to update the index on disk so the other process is not disturb! (Note that `gztool`
always tries to update the index used if it thinks it's necessary):
$ gztool -Wb 100k still-growing-gzip-file.gz > mytext
* Extract data from line 10 million, to STDOUT:
$ gztool -L 10m compressed_text_file.gz
* Nonetheless note that if in the precedent example an index was previously created for
the gzip file without the `-x` parameter (or not using `-L`), as it doesn't contain line
numbering info, `gztool` will complain and stop. This can be circumvented by telling
`gztool` to use another new index file name (`-I`), or even not using anyone at all with
`-W` (do not write index) and an index file name that doesn't exists (in this case `None`
- it won't be created because of `-W`), and so ((just) this time) the gzip will be
processed from the beginning:
$ gztool -L 10m -WI None compressed_text_file.gz
* Extract all data from a rsyslog's veryRobustZip
(//www.rsyslog.com/doc/v8-stable/configuration/modules/omfile.html#veryrobustzip) that
contains dirty data. This *corrupted-gzip-files* can arise when using rsyslog's
veryRobustZip omfile option and the process that is logging is abruptly terminated and
then restarted - this produces an incorrectly-terminated-gzip stream that is followed by
another gzip stream in the same file. `gzip` (nor `zlib`) cannot read this files beyond
the point of error. But `gztool` can correctly extract all data (and only good data) using
`-p` (*patch*) parameter:
$ gztool -p -b0 compressed_text_file.gz
This creates, as usual, the index file `compressed_text_file.gzi`. In order to not create
it, `-W` (do not Write index) can be used:
$ gztool -pWb0 compressed_text_file.gz
Note that `-p` can require up to twice the time for decompression, because it performs two
decompression processes: the usual one, and another one that is performed in advance of
the usual and which is the one that detects errors, marks them, and finds new entry points
to end/begin the decompression circumventing the problems.
Note also that these corrupted-gzip-files should be always decompressed with `-p`
parameter, even if a `gztool` index file exists for them, because the index file stores
entry points, but does not store where do errors occur in the `gzip` file. That said, if
the `-[bL]` point of extraction is beyond the point(s) of error in the `gzip` file and an
index file exists, then the decompression can proceed fine without `-p`, as the index
points stored in the index file are always clean.
* When tailing an still-growing gzip file (`-T`) that could contain errors at some point,
one may still want to obtain output from the gzip stream as soon as possible - this is
what the patching option `-P` is for (like `-p` but capitalized): with `-p` `gztool`
decompress the stream about 48 kiB ahead of the output that is actually shown/written in
order to catch possible gzip-stream errors ahead of output, and so maintain always a clean
output without error-introduced artifacts. This has the side effect that output must
always wait for that 48 kiB of data to be available in advance, which if the file grows
slowly can take a very long time. With `-P` the buffer-ahead restriction is relaxed to
just as few bytes as available before reaching end-of-file and waiting for new data, so
responsiveness is as quick as without `-p`. The side effect of `-P` is that depending on
the gzip file some errors may lead to incorrect output being shown/written - though in
this case a "PATCHING WARNING" would be shown (to stderr).
$ gztool -PT application_log.gz
The same applies to `-S` though in this case there's no output, as only the index is being
constructed:
$ gztool -PS application_log.gz
* To tail to stdout, like a `tail -f`, an still-growing gzip file (an index file will be
created with name `still-growing-gzip-file.gzi` in this case):
$ gztool -T still-growing-gzip-file.gz
* More on files still being "Supervised" (`-S`) by another `gztool` instance: they can
also be tailed à la `tail -f` without updating the index on disk using `-W`:
$ gztool -WT still-growing-gzip-file.gz
* Compress (`-c`) an still growing (`-E`) file: in this case both `still-growing-file.gz`
and `still-growing-file.gzi` files will be created on-the-fly as the source file grows.
Note that in order to terminate compression, Ctrl+C must be used to kill gztool: this
results in an incomplete-gzip-file as per GZIP standard, but this is not important as it
will contain all the source data, and both `gzip` and `gztool` (or any other tool) can
correctly and completely decompress it:
$ gztool -Ec still-growing-file
* If you have an incomplete index file (it just does not have the length of the source
data, as it didn't correctly finish) and want to make it complete and so that the length
of the uncompressed data be stored, just unconditionally complete it with `-C` with a new
`-i` run over your gzip file: note that as the existent index data is used (in this case
the file `my-incomplete-gzip-data.gzi`), only last compressed bytes are decompressed to
complete this action:
$ gztool -Ci my-incomplete-gzip-data.gz
* Decompress a file like with gzip (`-d`), but do not delete (`-D`) the original one:
Decompressed file will be `myfile`. Note that gzipped file must have a ".gz" extension or
`gztool` will complain:
$ gztool -Dd myfile.gz
* Decompress a file that does not have ".gz" file extension, like with gzip (`-d`):
$ cat mycompressedfile | gztool -d > my_uncompressed_file
* Show internals of all index files in this directory. `-e` is used not to stop the
process on the first error, if a `*.gzi` file is not a valid gzip index file. The `-ll`
list option repetition will show data about each index point. `-lll` also decompress each
point's window to ensure index integrity:
$ gztool -ell *.gzi
If `gztool` finds the gzip file companion of the index file, some statistics are shown,
like the index/gzip size ratio, or the ratio of compression of the gzip file. Also, if
the gzip is complete, the size of the uncompressed data is shown. This number is
interesting if the gzip file is bigger than 4 GiB, in which case `gunzip -l` cannot
correctly calculate it as it is limited to a 32 bit counter (see
//tools.ietf.org/html/rfc1952#page-5), or if the gzip file is in `bgzip` format, in which
case `gunzip -l` would only show data about the first block (< 64 kiB).
Note that `gztool -l` tries to guess the companion gzip file of the index looking for a
file with the same name, but without the `i` of the `.gzi` file name extension, or without
the `.gzi`. But the gzip file name can also be directly indicated with this format:
$ gztool -l -I index_filename gzip_filename
In this latter case only a pair of index+gzip filenames can be indicated with each use.
* Use a truncated gzip file (100000 first bytes are removed: (not zeroed, removed); if
they're zeroed cautions are the same, but `-n` is not needed), to extract from byte 20
MiB, using a previously generated index: as far as the `-b` parameter refers to a byte
after an index point (See `-ll`) and `-n` be less than that needed first index point, this
is always possible. In this case -I gzip_filename.gzi is implicit:
$ gztool -n 100001 -b 20M gzip_filename.gz
Take into account that, as shown, the first byte of the truncated `gzip_filename.gz` file
is numbered 100001, that is, the bytes retain the order number in which they appear in the
original file (that's the reason why it is not the 1 byte).
Please, note that index point positions at index file may require also the previous byte
to be available in the truncated gzip file, as gzip stream is not byte-rounded but a
stream of pure bits. Thus if you're thinking on truncating a gzip file, please do it
always at least by one byte before the indicated index point in the gzip - as said, it may
not be needed, but in 7 of 8 cases it is needed. Another option is to use `-Z` when
creating the index, as indicated below.
* Create an index for a gzip file in which every index entry point is adjusted to byte
boundary, so no previous byte (bits) is needed. Note that in general the byte at which the
index entry point begins does not represent a clear cut point as the gzip window needs up
to 7 bits from the previous byte. This is so because gzip is a bit-level stream
compressor. With `-Z` the cut point is always clean and no bits from the previous byte are
required. This will result in index points spaced by more than `-s` bytes between then,
and so, may be, less points in the index. But this is completely safe and sound.
$ gztool -Z my_gzip_file.gz
`-Z` exists since gztool v1.6.0.
* Since v1.5.0, using `-[fW]` (`-f`: force index overwriting; `-W`: do not write index)
with `-[ST]` (`-S`: create index on still-growing gzip file; `-T`: tail and continue
decompressing to stdout) indicates `gztool` to continue operations even after the source
file is overwritten. If using `-f`, the index file will be overwritten. For example:
$ gztool -WT log_filename.gz
...
File overwriting detected and restarting decompression...
Processing 'log_filename.gz'...
INTERNALS
By default gzip-compressed files cannot be accessed in random mode: any byte required at
position N requires the complete gzip file to be decompressed from the beginning to the N
byte. Nonetheless Mark Adler, the author of zlib (//github.com/madler/zlib), provided
years ago a cryptic file named `zran.c`
(//github.com/madler/zlib/blob/master/examples/zran.c) that creates an "index" of
"windows" filled with 32 kiB of uncompressed data at different positions along the
un/compressed file, which can be used to initialize the zlib library and make it behave as
if compressed data begin there.
gztool builds upon zran.c to provide a useful command line tool. Also, some optimizations
has been made:
* gztool can correctly read incomplete gzip-concatenated-files (using `-p`), that is, a
gzip composed of a concatenation of `gzip` files, some of which are not correctly
terminated. This can happen, for example, when using rsyslog's veryRobustZip omfile option
(//www.rsyslog.com/doc/v8-stable/configuration/modules/omfile.html#veryrobustzip) and the
process that is logging is abruptly terminated and then restarted.
* gztool can store line numbering information in the index (use only if source data is
text!), and retrieve data from a specific line number using `-L`. (Using `-[xXz]` when
creating the index selects Unix new line format (default), old Mac new line format, or no
line information respectively.)
* gztool can Supervise an still-growing gzip file (for example, a log created by rsyslog
directly in gzip format) and generate the index on-the-fly, thus reducing in the practice
to zero the time of index creation. See `-S`.
* extraction of data and index creation are interleaved, so there's no waste of time for
the index creation.
* index files are reusable, so they can be stopped at any time and reused and/or completed
later.
* an ex novo index file format has been created to store the index
* span between index points is raised by default from 1 MiB to 10 MiB, and can be adjusted
with `-s` (span).
* windows are compressed in file
* windows are not loaded in memory unless they're needed, so the application memory
footprint is fairly low (< 1 MiB)
* gztool can compress files (`-c`) and at the same time generate an index that is about
10-100 times smaller than if the index is generated after the file has already been
compressed with gzip.
* Compatible with `bgzip` files (//www.htslib.org/doc/bgzip.html)
* Compatible with complete `gzip` concatenated files
* Compatible with rsyslog's veryRobustZip omfile option (variable-short-uncompressed
complete-gzip-block sizes)
* data can be provided from/to stdin/stdout
* gztool can be used to remotely retrieve just a small part of a bigger gzip compressed
file and successfully decompress it locally. See
//unix.stackexchange.com/questions/429197/#541903 . Just note that the gztool index file
must be also available.
PROJECT HOME PAGE
//github.com/circulosmeos/gztool
SEE ALSO
gzip(1), gunzip(1), zlib(3)
AUTHOR
This program was written by Roberto S. Galende <roberto.s.galende@gmail.com> on work by
Mark Adler's zlib (examples/zran.c) and is copyrighted under zlib licence terms.