solaris一个高手的小问题

zstrong

想将LOG中的文件以某个关键字过滤后在生成一个新文件,如下:只想将某一个IP地址显示在生成出一个新的文件保存.
bash-2.05# more log
Mar  2 12:30:02 [192.168.1.1.2.2] Mar 01 2006 20:21:58: %PIX-6-305011: Built dyn
amic TCP translation from inside:172.17.50.7/4662 to outside(120):210.21.235.12/
44768
Mar  2 12:30:02 [192.168.1.1.2.2] Mar 01 2006 20:21:58: %PIX-6-302013: Built out
bound TCP connection 384291339 for outside:60.167.1.45/10700 (60.167.1.45/10700)
to inside:172.17.50.7/4662 (210.21.235.12/4476
Mar  2 12:30:02 [192.168.1.1.2.2] Mar 01 2006 20:21:58: %PIX-6-302015: Built out
bound UDP connection 384291340 for outside:71.139.174.154/5569 (71.139.174.154/5
569) to inside:172.17.110.247/17232 (210.21.235.12/45611)
Mar  2 12:30:02 [192.168.1.1.2.2] Mar 01 2006 20:21:58: %PIX-6-302015: Built out
bound UDP connection 384291341 for outside:221.218.217.147/4672 (221.218.217.147
/4672) to inside:172.17.25.90/10702 (210.21.235.12/32863)
Mar  2 12:30:02 [192.168.1.1.2.2] Mar 01 2006 20:21:58: %PIX-6-302015: Built inb
ound UDP connection 384291342 for outside:89.57.21.189/4672 (89.57.21.189/4672)
to inside:172.17.39.245/4178 (210.21.235.12/20172)
Mar  2 12:30:02 [192.168.1.1.2.2] Mar 01 2006 20:21:58: %PIX-6-302014: Teardown
TCP connection 384242067 for outside:61.230.198.30/4662 to inside:172.17.141.162
/2974 duration 0:00:54 bytes 495 TCP FINs
Mar  2 12:30:02 [192.168.1.1.2.2] Mar 01 2006 20:21:58: %PIX-6-302014: Teardown
TCP connection 384065083 for outside:219.70.236.200/24150 to inside:172.17.32.17
9/3880 duration 0:04:14 bytes 2202 TCP FINs
Mar  2 12:30:02 [192.168.1.1.2.2] Mar 01 2006 20:21:58: %PIX-6-302015: Built inb
ound UDP connection 384291343 for outside:212.251.126.99/15588 (212.251.126.99/1

sunyone

egrep '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' log > newlog

我能帮你吗

这个 办法是不行的   要修改

jiarong.lu

cat log|awk '{print $4;}'>11.txt