Mine

#done by rahman,SIP

import re
import sys
import os.path

pattern_merge=r'''[a-zA-Z]{3}\s[0-9]{2}\s'''                     #  ??? (3 alphabets) (space) (2 digit numbers) (space)
expected_pattern_merge=r'''[a-zA-Z]{3}\s\s[0-9]{2}\s'''          #  ??? (3 alphabets) (2 space) (2 digit numbers) (space)
    
def main():

    if len(sys.argv) < 2:
        print "usage is python run_snort.py <snort log file>"
        raw_input("press ENTER to exit...")
        sys.exit(1)
    else:
        snort_log_file = sys.argv[1]
        
        if os.path.isfile("%s" % snort_log_file) :
            tempName=snort_log_file+'.temp.txt'
            input_snort_log_file  = open(snort_log_file)
            output_snort_log_file = open(tempName,'w')
            read_snort_log = input_snort_log_file.read()

            outtext = re.sub(pattern_merge, expected_pattern_merge, read_snort_log)
            output_snort_log_file.write(outtext)

            print read_snort_log
            # to find exact 3 character in that file
#            found_pattern1 = re.findall(pattern, read_snort_log)
            found_full_pattern = re.findall ( pattern_merge, read_snort_log )
            
            
##            re.sub("%s" % pattern_merge, "%s" % expected_pattern_merge, read_snort_log)
#            read_snort_log = read_snort_log.replace(pattern_merge, expected_pattern_merge)
#            for l in found_pattern1:
#                print l
            
            for k in found_full_pattern:
                print k

                
        #    close input & output snort file

            output_snort_log_file.close()
            input_snort_log_file.close()
        else:
            print "Snort file does not exist !!!"
            raw_input("press ENTER to exit...")

if __name__ == "__main__":
    main()