Nick,
I am not sure if this is going to be a routine thing you are doing, but if
your looking for something quick and easy just grab a trial copy of
DLAnalyzer Enterprise and use the IP Summary Report and set the "Test
Filter". It will spit the IP's out for you. If needed you can filter on
"Last Action" or "Weight" as well. You can also do reverse DNS look-up's on
them.
In regards to your grep question this is going to be more difficult since
the length of the line where the IP address is on can change depending
various factors like email addresses. Plus another thing that you have to
factor in is that the line containing the messages IP address can be
repeated multiple times depending on how many recipients are listed on the
email. However, depending on what you want to accomplish that may not be an
issue.
Darrell
------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And
Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG
Integration, and Log Parsers.
Nick Hayer writes:
I am trying to print a list of ip addresses derived from emails that
failed a specific test
So first I greped a declude file for all the queue_id's:
grep "TEST_NAME" dec1116.log | gawk "{print $2}"> trash.txt
ok so this works but I need to go into trash.txt and delete the leading
"Q"
then I run:
grep -f trash.txt e:\imaillogs\spool\log1116.txt > results.txt
Doesn't work - results.txt has only the information from a single email
while trash.txt has a list of hundreds..
Would someone please help explaining what I am doing incorrectly? and :)
how will I then be able to get the final extract I want which is the list
of unique ip's?
Thanks -
-Nick
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
