[nycbug-talk] Text parsing question

Jan Schaumann jschauma at netmeister.org
Mon Dec 15 20:46:02 EST 2008


"maddaemon at gmail.com" <maddaemon at gmail.com> wrote:
 
> Dec 15 05:15:56 - abc1234 tried logging in from 192.168.8.17
> Dec 15 05:15:56 - abc1234 tried logging in from 192.168.18.13

Split into timestamp, line and IP.  Use a hash:

if $line matched "abc1234 tried logging in from"
	if ! $line_by_ts{$timestamp}
		$line_by_ts{$timestamp} = $ip
	else
		if $ip != $line_by_ts{$timestamp}
			# dupe with different ip
		else
			# dupe with same ip
		endif
	endif
endif

awk or perl should do.

-Jan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
URL: <http://lists.nycbug.org/pipermail/talk/attachments/20081215/ce5c394b/attachment.bin>


More information about the talk mailing list