----- Original Message ----- 
From: "Goran Jovanovic" <[EMAIL PROTECTED]>

> I was hoping for more of a histogram of the number of
> messages processed by hour or half hour. My first thought
> would be to just get info on simply messages by hour and
> then maybe if I see a spike I could rerun it to see who was
> sending/receiving during that time.

This little script can give you a no frills, hourly, unique message count
(does not account for a single message that is sent to multiple recipients):
=====
gawk "{print $3,$2}" spam\dec0824.log | usort | uniq -w 18 | gawk "{print
$2}" | cut -d ":" -f1 | grep -v [[:alpha:]] | egrep [[:digit:]]{2} | usort |
uniq -c
=====

Watch for word-wrapping - the script should be executed as one long line.
These two entries: "grep -v [[:alpha:]] | egrep [[:digit:]]{2}" are simply
there to help filter out garbage from log corruption.  The output will look
like:

1212 00
1251 01
1218 02
1244 03
1244 04
1317 05
1400 06
1514 07
1757 08
1880 09
1777 10
1837 11
1785 12
1743 13
1830 14
1657 15
1530 16
1378 17
1367 18
1272 19
1312 20
1325 21
1289 22
1297 23

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to