Magic Banana wrote:

> As you can see, I also chose AWK's default separator, the space. It is indeed usually easier to work with file > that do not have tabulations (especially with 'sed'). Well, except with 'cut' and 'paste' where option -d must > then be set (as I did above). If you really want tabulations, replace the commas in the print with ' "\t"' (the
> space cancatenates in AWK) and remove option -d of 'paste'.

In a hurry, I grabbed a few lines of the output of MB's new script above from my own hostname list, opened it with LibreOffice Calc, thereby replacing the spaces with tabs, and then copied & pasted by selection back into leafpad.

Before I ran the new script, I followed MB's advice and tested it with my "ftr05_output_test.txt" file":

time tr -sc 0-9\\n ' ' < ftr-shortlist.txt | awk '{ k = 0; for (i = 0; k < 4 && ++i > Tricky server owner: He reversed the 53 to 35 and put it at far right > Is it a consistent pattern over several machines? I mean: it could be coincidence.

The good news is that it was in a hostname that had been truncated in the Webalizer data in one month's data but not in another month. There are so few hostnames that escape these scripts that they could be analyzed manually after running the scripts. The incentive is that the trend is going in the direction of maximum obfuscation, and so careful post-processing will be the order
of the day.

Here are all the unprocessed hostnames from the second, long script, for which I managed to get confirmed IPv4 addresses (by nslookup) with Google or BGP: ftr05_output_empty_IPv4.google.txt

Reply via email to