awk 取IP地址

lucash

文本内容模板如下：
sshd: refused connect from 2d.44.2d.static.xlhost.com (::ffff:173.45.68.45)
sshd(pam_unix)[30680]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.45.84.35  user=root
sshd: refused connect from ::ffff:118.102.25.161 (::ffff:118.102.25.161)
sshd: refused connect from 97.6d.7d.seuvenc.luesly.com (::ffff:173.45.91.151)
sshd: refused connect from lucas-98-162-44-80.dc.dc.cox.net (::ffff:98.162.44.80)
sshd(pam_unix)[29765]: check pass; user unknown
sshd(pam_unix)[29765]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.84.193.41
这是过滤过的文本，
我想用awk提取其中的IP地址，如何做？

谢谢

注：只用awk ，谢谢各位

[ 本帖最后由 lucash 于 2009-5-25 10:39 编辑 ]

greendays

grep -oE '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}'  urfile

lucash

只用awk，谢谢

Shell_HAT

1. grep -o '\([0-9]\{1,3\}\.\)\{3\}[0-9]\{1,3\}' urfile
   

复制代码

deepalley

awk '{if($0~/refused/){split($6,a,"ffff:");print substr(a[2],1,length(a[2])-1)}else {split($9,b,"=");print b[2]}}' urfile

greendays

awk -F"::ffffrhost=" '{print $NF}' urfile |awk -F" |)" '/^[0-9]/{print $1}'

kwokcn

如果没有干扰因素：

1. 
   
2. awk -v RS="[0-9]+[.][0-9]+[.][0-9]+[.][0-9]+" '{print RT}' URFILE
   

复制代码

blackold

try:

1. awk -v RS="[:= )]" '/[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/' urfile

复制代码

mixednuts

原帖由 blackold 于 2009-5-25 14:04 发表
try:awk -v RS="[:= )]" '/[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/' urfile

不错

lucash

print RT,这个RT是什么意思？