查杀漏网之鱼--->isa2000日值分析

iamok

1. 
   
2. #!/bin/sh
   
3. case "$1" in
   
4. '1')
   
5. cat $2|grep "tencent.com"|awk '{print $1,$3,$4,$5,$7,$8,$9,$13,$14}'|sort|uniq|less
   
6. ;;
   
7. '2')
   
8. cat $2|grep "tencent.com"|awk '{print $1}'|sort|uniq|less
   
9. ;;
   
10. '3')
    
11. cat $2 |awk '{if ( match($7,".*\.messenger\.msn\.com") || match($7,".*\.passport\.com") || match($7,".*\.voice\.microsoft\.com") ) print $1,$3,$4,$5,$7,$8,$9,$13,$14}'|sort|uniq|less
    
12. ;;
    
13. '4')
    
14. cat $2 |awk '{if ( match($7,".*\.messenger\.msn\.com") || match($7,".*\.passport\.com") || match($7,".*\.voice\.microsoft\.com") ) print $1}'|sort|uniq|less
    
15. ;;
    
16. *)
    
17. echo "使用方法 $0 [1|2|3|4] 日志名"
    
18. echo "1为详细查看oicq,"
    
19. echo "2为简单查看oicq,"
    
20. echo "3为详细查看msn,"
    
21. echo "4为简单查看msn,"
    
22. echo "例如 filter_log 1 test.log"
    
23. echo "移动用方向键,ctrl+F,ctrl+B翻页,q退出"
    
24. ;;
    
25. esac
    
26. exit 1
    

复制代码