Someone

#done by ahmadsalsa

import re
import sys
import os.path

pattern_merge=r'[a-zA-Z]{3}\s{1}[0-9]{2}\s'                     #  ??? (3 alphabets) (space) (2 digit numbers) (space)
expected_pattern_merge=r'[a-zA-Z]{3}\s\s[0-9]{2}\s'          #  ??? (3 alphabets) (2 space) (2 digit numbers) (space)

#pattern_merge="a"
#expected_pattern_merge="4"

def main():

    if len(sys.argv) < 2:
        print "usage is python run_snort.py <snort log file> "
        raw_input("press ENTER to exit...")
        sys.exit(1)
    else:
        snort_log_file = sys.argv[1]
        
        if os.path.isfile("%s" % snort_log_file) :
            tempName=snort_log_file+'.temp.txt'
            input_snort_log_file  = open(snort_log_file)
            output_snort_log_file = open(tempName,'w')
            read_snort_log = input_snort_log_file.read()

            ### TESTING LOOP  ###
            # print "TESKING !!!!"
            # TESTKING= re.findall(pattern_merge,read_snort_log);
            # for k in TESTKING:
            #     print k
            # print "############"
            #####################


            
            outtext = re.sub(pattern_merge, expected_pattern_merge, read_snort_log)
#            outtext = re.sub(r'[a-zA-Z]{3}\s[0-9]{2}\s',r'[a-zA-Z]{333}\s\s[0-9]{2}\s', read_snort_log)
            output_snort_log_file.write(outtext)

            print "\nOriginal snort_log"
            print read_snort_log
            print "\n"
#       to find exact 3 character in that file
#            found_pattern1 = re.findall(pattern, read_snort_log)
#          found_full_pattern = re.findall ( pattern_merge, read_snort_log )
            
            

            output_snort_log_file.close()
            input_snort_log_file.close()
            open_modified = open(tempName,'r')
            
            print "Modified file"
            print open_modified.read()
            open_modified.close()
        else:
            print "Snort file does not exist !!!"
            raw_input("press ENTER to exit...")

if __name__ == "__main__":
    main()