On Friday 18 June 2004 14:08, Larry Smith wrote: > On Friday 18 June 2004 13:56, Chuck Lewis wrote: > > On Thursday, June 17, 2004 10:23 PM Michael Stauber wrote: > > > > (stuff deleted) > > > > >I got curious and went through my maillog on various servers with this > > >command ... > > > > > >cat /var/log/maillog|grep "size=0, class=0, nrcpts=0"|cut -d [ -f 3|cut > > > ->d > > > > ] -f1|sort -u > > > > >... (all in one line) and it turned up a ton of IPs which had used the > > > same > > > > > >approach. Some IPs had checked just a few mailboxes, others had tried a > > > few > > > > Michael, > > > > Running a Qube 3 so I'm a "little guy" compared to you Raq folks but I > > thought I'd try that and got: > > > > 12.5.106.131 > > 204.95.246.246 > > 208.4.8.17 > > 222.101.168.32 > > 61.172.244.118 > > > > How can I see the # of times this have come through ? > > Chuck, > > Change the end of the line above from sort -u to > uniq -c | sort > > and it should give you a count of time tried in the left column then the IP > in question... The sort -u (unique) is simply giving you one of each IP > that tried.
Correction to my own. use sort | uniq -c EG just drop the -u from sort and pipe to uniq -c You will probably get a count on "blank" lines returned for some reason (I do) but this way it will all sort to the same counter. -- Larry Smith SysAd ECSIS.NET [EMAIL PROTECTED] _______________________________________________ Cobaltfacts mailing list posting/subscription services: [EMAIL PROTECTED] http://list.cobaltfacts.com/mailman/listinfo/cobaltfacts/ Search the Archives at: http://list.cobaltfacts.com/ Visit Cobaltfacts on the web: http://www.cobaltfacts.com/
