如何从ping.log文件截取有packet loss的文本

david0

说明：ping.log文件是从服务器发起对192.168.1.78的ping持续记录，每ping10个包记录一次，在该文件中会存在多行ping丢包的情况(比如10% packet loss), 如果有10% packet loss的行，把该ping记录发生时间点开始的行 到 rtt min/avg/max/mdev = 行 的所有行（标注红色的部分）截取下来写入到新文本文件ping_new.log中。10% packet loss的信息在ping.log文件中可能存在多行，请问如何实现，谢谢！

#more ping.log
###################### 2019年 02月 20日 星期三 05:43:39 CST  #######################
PING 192.168.1.78 (192.168.1.7 56(84) bytes of data.
64 bytes from 192.168.1.78: icmp_seq=1 ttl=249 time=11.3 ms
64 bytes from 192.168.1.78: icmp_seq=2 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=3 ttl=249 time=11.3 ms
64 bytes from 192.168.1.78: icmp_seq=4 ttl=249 time=11.3 ms
64 bytes from 192.168.1.78: icmp_seq=5 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=6 ttl=249 time=11.3 ms
64 bytes from 192.168.1.78: icmp_seq=7 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=8 ttl=249 time=20.1 ms
64 bytes from 192.168.1.78: icmp_seq=9 ttl=249 time=11.3 ms
64 bytes from 192.168.1.78: icmp_seq=10 ttl=249 time=303 ms

--- 192.168.1.78 ping statistics ---
10 packets transmitted, 10 received, 0% packet loss, time 9039ms
rtt min/avg/max/mdev = 11.245/41.399/303.390/87.370 ms


###################### 2019年 02月 20日 星期三 05:43:48 CST  #######################
PING 192.168.1.78 (192.168.1.7 56(84) bytes of data.
64 bytes from 192.168.1.78: icmp_seq=1 ttl=249 time=82.2 ms
64 bytes from 192.168.1.78: icmp_seq=2 ttl=249 time=488 ms
64 bytes from 192.168.1.78: icmp_seq=3 ttl=249 time=3204 ms
64 bytes from 192.168.1.78: icmp_seq=5 ttl=249 time=1350 ms
64 bytes from 192.168.1.78: icmp_seq=6 ttl=249 time=351 ms
64 bytes from 192.168.1.78: icmp_seq=7 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=8 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=9 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=10 ttl=249 time=11.2 ms


--- 192.168.1.78 ping statistics ---
10 packets transmitted, 9 received, 10% packet loss, time 9003ms
rtt min/avg/max/mdev = 11.251/613.607/3204.662/1004.110 ms, pipe 4


###################### 2019年 02月 20日 星期三 05:44:03 CST  #######################
PING 192.168.1.78 (192.168.1.7 56(84) bytes of data.
64 bytes from 192.168.1.78: icmp_seq=1 ttl=249 time=11.3 ms
64 bytes from 192.168.1.78: icmp_seq=2 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=3 ttl=249 time=11.1 ms
64 bytes from 192.168.1.78: icmp_seq=4 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=5 ttl=249 time=11.3 ms
64 bytes from 192.168.1.78: icmp_seq=6 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=7 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=8 ttl=249 time=11.3 ms
64 bytes from 192.168.1.78: icmp_seq=9 ttl=249 time=11.2 ms
64 bytes from 192.168.1.78: icmp_seq=10 ttl=249 time=11.2 ms

--- 192.168.1.78 ping statistics ---
10 packets transmitted, 10 received, 0% packet loss, time 9011ms
rtt min/avg/max/mdev = 11.189/11.282/11.358/0.105 ms

csccyab

awk '/^###/{b=1} b==1&&!/^ *$/{a=a$0"\n"} /packet loss/{loss=$6; sub(/%/,"",loss)} /^rtt/{if (loss>=10)print a; a=""}' ping.log

david0

回复 2# csccyab

脚本测试可用，高手，谢谢了！

wh7211

回复 1# david0

1. awk '{a=a?a"\n"$0:$0}match($0,"([0-9]+)% packet loss",c){if(c[1]==10){b=1}}/rtt/{if(b){print a};a="";b=0}' ping.log

复制代码