One-liner script for displaying BLACKLIST sendergroup ip/sbr

MFC (or possibly M-series) does not log BLACKLISTed SG connection information.
This make sense, because 95% of connections belongs to BLACKLIST. :cry:
To verify whether setting too strict of SBRS score for BLACKLIST SG, I have a script
For one mail.log file
tac mail.current | \
awk '/REJECT SG BLACKLIST match/ { a = $NF; getline; printf "%s ",$0; print a } ' | \
grep 'verified yes' | awk '{ print $15,$19,$NF }'|sort |uniq -c|sort -n
Fpr process multiple mail.@*.s file
tac `ls -1t mail.*s|head -3` | \
awk '/REJECT SG BLACKLIST match/ { a = $NF; getline; printf "%s ",$0; print a } ' | \
grep 'verified yes' | awk '{ print $15,$19,$NF }'|sort |uniq -c|sort -n
Example output
834 122.218.211.93 122x218x211x93.ap122.ftth.ucom.ne.jp -10.01
892 77.45.131.75 75.131.c10008-a77.dsl-dynamic.vsi.ru -10.01
920 70.56.148.214 70-56-148-214.bois.qwest.net -4.91
923 200.158.73.159 200-158-73-159.dsl.telesp.net.br -10.01
963 93.124.99.106 host-93-124-99-106.dsl.sura.ru -10.01
982 85.136.139.99 85.136.139.99.dyn.user.ono.com -7.31
983 82.255.81.30 lns-bzn-42-82-255-81-30.adsl.proxad.net -4.21
984 200.120.226.165 pc-165-226-120-200.cm.vtr.net -10.01
997 68.90.116.121 adsl-68-90-116-121.dsl.rcsntx.swbell.net -10.01
1031 80.7.70.213 cpc2-pool4-0-0-cust724.sotn.cable.ntl.com -10.01
1060 189.19.211.97 189-19-211-97.dsl.telesp.net.br -10.01
1127 210.202.82.21 nk210-202-82-21.vdslpro.static.apol.com.tw -7.81
1174 65.25.105.170 cpe-65-25-105-170.neo.res.rr.com -7.31
1253 82.41.145.16 82-41-145-16.cable.ubr04.grth.blueyonder.co.uk -10.01
1301 61.227.71.96 61-227-71-96.dynamic.hinet.net -4.51
1415 79.86.157.30 30.157.86-79.rev.gaoland.net -10.01
1450 189.58.225.74 189.58.225.74.dynamic.adsl.gvt.net.br -10.01
1646 91.67.109.82 91-67-109-82-dynip.superkabel.de -10.01
1843 77.192.81.76 76.81.192-77.rev.gaoland.net -10.01
1994 89.78.204.79 chello089078204079.chello.pl -10.01
2164 86.21.9.87 cpc2-stap6-0-0-cust342.nott.cable.ntl.com -10.01
2298 118.8.196.173 p1173-ipbf1408souka.saitama.ocn.ne.jp -4.01
(Btw, we set BLACKLIST SBRS <= -3.5)

It could be as simple as
lgrep -O conn <IP> access
If you have more logs you can cat them and pipe the output to lgrep in a pipeline, like:
cat access.1 access.2 ... access.n | lgrep -O conn <IP>
Just make sure that the logs are listed in sequence. The script won't produce reliable results if the log is non-sequential.

Similar Messages

  • One Line Item for More than one Ship to Party

    Dear Friends
    In one sales order which has only one Line Items for example P-101 qty-40 pcs. That 40pcs should shipt to my 4 ship-to-party. How I end user to do it. in one Line item in One Sales Order.
    Kindly Regards
    Arun

    Hi Arun,
    First create four ship to party master data which will be having different address.
    Then assign those ship to party in your sold to party master data in the partner tab.
    If you want sent material P-101 to different persons then you have to divide the quantities in the line item like this
    P-101          10
    p-101          10
    p-101          10
    p-101          10
    Now select one line item and click on detail screen.
    After that go to the Partner Tab and change the Ship to Party for that particular item.
    Do this same procedure for other three line item also.
    Try this method it might work.
    Suneet Prakash

  • Powl- how to make one line editable for 'Insert line' button

    Hi,
    I have a powl in which I have two buttons of 'Insert Line' & 'Save'.
    Now in my result table - c_result_tab - I need to give one editable line, in which user can enter new record.
    & after entering it when they click on 'SAVE' i'll append the record in c_result_tab.
    Now my Que is - How to give Editable Line in ALV Display table of POWL, where User can enter New Record ??
    or is there any other std. procedure, like popup or something - which can help to enter record in same format as c_result_tab.??

    z-order for what? the Canvas class itself? It's AWT, so why would they be adding to that? For Graphics? That's not really needed, since to paint you have to override paint in a subclassed component and in there by definition you can fully control your painting.

  • Has anyone got a script for displaying a message when attribute combo = 0 stock on hand

        Looking for a script to display the wording back order when stock = 0.
    I am currently using {tag_instock, true, Please choose your customisation,Back Order}
    but that onle displays back order when product disable
    dont want to disbale product

    http://www.acrobatusers.com/tutorials/2007/js_document_scripts/ Entering Document Scripts by Thom Parker
    http://www.adobe.com/devnet/acrobat/javascript.html JavaScript for Acrobat
    You can enter:
    this.getField("todaysDate").value = util.printd("mdyyyyHHMM", new Date());
    or
    function Initialize() { // define action
    this.getField("todaysDate").value = util.printd("mdyyyyHHMM", new Date());
    return true;
    } // end Initialize function
    Initialize(); // call action

  • Does anyone one have script for quiz analyzer?

    Adobe provided php script but we need asp or .net for our server, does anyone know where I can get that?

    No. The 2G can only go as high as iOS 4.1.2. Its hardware does not support a higher iOS version. It only has 128 MB of memory compared with 256 for 3G/4G and 512 for 5G.

  • Scripts : want to display the text in one line

    Dear Friends,
    i want to dispaly the below text in one line,but its displaying in next line.
    ITEM   MATERIAL  DESCRIPTION ORDERQTY  UNIT PricePerUnit NETVALUE
    i am using the following code
    IL           <K>Item,,Material,,Description ,,  Order qty.  ,,Unit   ,,    Price per unit   ,, Net value </>
    Thanks & Regards
    Shaik

    Hello Hussain,
    Remove the TAB Spacing ',,'. Instead u give the Space.
    Reduce the length of fonts.
    These are the ways to display the text in a line.
    If useful reward points.
    Regards,
    Vasanth

  • Setting Line Terminator for a CLOB column by script

    Hello Everyone,
    I have a CLOB column in my table that receives external data (more than 400 sources).
    The GUI application displays it in different ways because of the multiple incoming Line Terminators.
    Here is the weird thing:
    In SQL developper 3.1.06. In the Preferences->Environment I selected as Line Terminator: Carriage Return and Line Fe(Windows)
    Once I committed the changes the data was properly displayed in the application (apparently was also re-coded).
    My Question is:
    How can I setup this property on the column or table to fix the issue??
    (I'm looking for a DDL script or something alike).
    Thanks in advance.
    Mijail O. T.

    914451 wrote:
    If that's the case, What is the SQL DEveloper doing then??
    I tested and looks like is a global parameter, not sure if works only for the table. (That what I need).
    If is possible to setup this feature from the GUI it should be a way to do it running a Script.
    Right????No.
    Tables don't have any concept of "lines".
    CLOB's don't have any concept of "lines".
    "lines" only exist in the context of the data you are providing, but that's not of concern to the database.
    So it looks like, what SQL Developer is doing (I assume as I don't use it), is to have a setting such that when it comes to display character data from VARCHAR2's or CLOB's it determines if there are CR/LF or just LF characters (as per the setting) and then uses those as line terminators for displaying the data in it's own interface. Thus it sounds like an interface specific setting, or to put it bluntly, it's something that is a part of SQL Developer to control how it displays things.
    Have you tried querying back the raw version of the data from the database to see that it still has the CR/LF characters in it? It should.
    I think you'll find the setting is a "display" setting, not a "alter my data" setting.

  • SPA525G permanent CLIR for one line

    Hello,
    how is it possible for one line (not for all) to set up a permanent suppression of the Caller ID. I can not find it in the settings. I can find only the suppression of all line.
    Who can help me?
    regards
    Daniel

    Hi,
    thanks for the reply. Does not seem to work. In the PBX (AVM FritzBox) , I can not suppress the phone number for this line. If I use the code *31# or #31# on the SPA525, it tells me unknown number. On ISDN or DECT terminal it works. Note If the unknown number from the SPA525 or the PBX?
    Sorry for the bad English!
    greeting

  • Line items not displaying

    Hi,
    When i simulate in F-28(customer), only one line items is displaying
    eg: 40 SBI a/c 1500
    but not displaying the remaining items like
    eg: 40 discount a/c 500
          50 ABC cutomer a/c 2000
    what may be reason. where can i change settings
    Rgds
    sunfico

    Hi
    Check the partner function of the customer.   Also check whether the customer is linkekd to any vendor accounts and that vendor has a open items.
    Thanks
    Ashok
    Assign points for useful answer

  • Simple Script for Multiple Objects?

    Someone recently helped me with setting an opacity level for an object using this one line script and binding a keyboard shortcut to it: app.selection[0].transparencySettings.blendingSettings.opacity=50; (Pressing "5" sets the object's opacity to 50%)
    Although the script works perfectly for one object, when mutiple objects are selected it only affects the first selected object. Can someone show me how to get this script to affect multiple objects at once?
    Thanks in advance!

    Thanks for the help man, but what's with the snarky comment? lol. Yeah I use my "5" key daily as well. But in ID it does nothing while in the default context, so why not put it, and the other digits to use to quickly set object opacity? (this function is similar to setting opacity for Photoshop layers by the way).
    Have a nice day, and cheer up. Spring's almost here.

  • Report output on one Line, without new line (cariage return)

    Hello I use a user defined report with style plsql. The output is with many dbms_output.put_line and is displays in only one line. May I ask you to get the output on more the one line. For eatch dbms_output I wont to have a new line (cariage return). Many thanks for help in advance

    In the body of the report, I used HTML tags to control the appearance.
    For example, to see what database features you have used in your database today, the following code works well:
    begin
    dbms_output.enable(1000000);
    dbms_output.put_line('<PRE>');
    for rc in ( select output from
       table(dbms_feature_usage_report.display_text)
               ) loop
       dbms_output.put_line(rc.output);
    end loop;
    dbms_output.put_line('</PRE>');
    end; This yields the following output
    DB FEATURE USAGE report for
    DB Name         DB Id     Release    Total Samples Last Sample Time 
    ABCPROD        900004321 10.2.0.1.0             78 09-Oct-09 18:29:17
    DB Feature Usage Summary                       DB/Release: ABCPROD/10.2.0.1.0
    -> This section displays the summary of Usage for Database Features.
    -> The Currently Used column is TRUE if usage was detected for
    -> the feature at the last sample time.
                                              Curr-                                
                                              ently Detected    Total Last Usage   
    Feature Name                              Used    Usages  Samples    Time      
    Automatic SQL Execution Memory            TRUE        78       78 10/09/09 18:29
    Automatic Segment Space Management (syste TRUE        78       78 10/09/09 18:29
    etc.However if you comment the lines with the beginning and terminating tags for preformatted text, then you get output confined to one line that starts out like:
    DB FEATURE USAGE report for DB Name DB Id Release Total Samples Last Sample Time ------------ ----------- and you'll have to scroll to the right or figure how you want to break it up -- That's too much work.
    My configuration:
    Windows XP SP3
    SQL Developer 1.5.5 Build MAIN-5969
    Java(TM) Platform     1.6.0_06

  • [solved]Need help with a bash script for MOC conky artwork.

    I need some help with a bash script for displaying artwork from MOC.
    Music folders have a file called 'front.jpg' in them, so I need to pull the current directory from MOCP and then display the 'front.jpg' file in conky.
    mocp -Q %file
    gives me the current file playing, but I need the directory (perhaps some way to use only everything after the last  '/'?)
    A point in the right direction would be appreciated.
    thanks, d
    Last edited by dgz (2013-08-29 21:24:28)

    Xyne wrote:
    You should also quote the variables and output in double quotes to make the code robust, e.g.
    filename="$(mocp -Q %file)"
    dirname="${filename%/*}"
    cp "$dirname"/front.jpg ~/backup/art.jpg
    Without the quotes, whitespace will break the code. Even if you don't expect whitespace in any of the paths, it's still good coding practice to include the quotes imo.
    thanks for the tip.
    here it is, anyhow:
    #!/bin/bash
    filename=$(mocp -Q %file)
    dirname=${filename%/*}
    cp ${dirname}/front.jpg ~/backup/art.jpg
    then in conky:
    $alignr${execi 30 ~/bin/artc}${image ~/backup/art.jpg -s 100x100 -p -3,60}
    thanks for the help.
    Last edited by dgz (2013-08-29 21:26:32)

  • No way to move screen up one line

    I run Adobe Dig Ed on a VISTA 64-bit PC and, whether I click on the tiny scroll arrows (shaped like triangles) or on the up and down arrows, I get the same result: I move one screen, not one line.
    For people like me who wear bifocals, it's automatic, as we get near the bottom of the screen while reading, to want to move the text up a line or two.  I do this automatically when I get within 4 or 5 lines of the bottom.
    But in ADE, this jumps to the top of the next page and I lose the last few lines of the previous page.
    Is this a settable feature or a problem with the version I'm running?
    Doesn't make much sense to have two different buttons that do exactly the same thing and just as little sense not to allow line by line scrolling.
    Thanks,
    dave

    You can copy and paste, but that's more difficult than just dragging. When you go to paste, type cmd-opt-v to move the item as opposed to copy.
    You can use the mv command in the Terminal, but that is much more difficult if you are not fluent in the unix shell.

  • Display more than one line of text for events?

    I couldn't find this in the forum... I just recently updated to Leopard. Now when I put events in iCal, it only displays one line of text in the month calendar view. I'd really like to see the whole description of the event, even if it's two or three lines. I can't find anything in preferences that addresses this, and various searches are not yielding anything. Help?
    -mel

    Hi there.
    Usually in iCal if you want more than one line of text for timed events, resizing the window will help. Under all-day events, iCal will always show you one line of text, but if there is more space it will show you more text. So, also resizing the window for this will help to see the text.
    Take care.

  • Create ecatt script for one sales order creation with multiple line items

    Hi ,
    I want to create a ecatt script for one sales order creation with multiple line items. Preferably SAP GUI.
    This selection of data will be from an external file/ variants which will have only one row of data in it.
    Firstly: I have to sort the external file having same PO Numbers in an order.Group them together.
    Second: I have to create sales order for those many line items having same PO Number.
    Best Regard
    Taranum

    Hi Micky
    Firstl you should upload the Line items for a particular sales Order in an Internal table
    and then pass that internal table to your BAPI during your coding corresponding to a particu;lar sales order
    In case of any issues pls revert back
    Reward points if helpful
    Regards
    Hitesh

Maybe you are looking for

  • Applescript with iCal

    Hi All, I'm trying to write an applescript to dump those events from a calendar that lie between today and a future date I specify. For each event, on a single line I want two tab separated values - the date and the event summary. Here's what I came

  • Sequences crash fcp

    so we're transitioning from fcp 5.0.4. on a g5, 10.3.9 to fcp 6.0.4 on an intel, 10.4.11. i've got all my old fcp sequences transfered over along with all the necessary files. however, there are some projects that have troublesome sequences that cras

  • Server 2012 gpo deploy printer connection failed.

    Run gpresult.exe /f /h gpresult.html from a command prompt on effected machines and look at what the problem is when applying that GPO. Post results if you need help understanding it.

  • Privacy Settings: "Ask websites not to track me"

    When you select the "Ask websites not to track me" in the privacy settings of Safari, it states, "Select to ask sites, particularly third parties (including advertisers), not to track you. Some third parties keep track of your browsing activities whe

  • SyncML-Support for contacts, calender, task sync

    Hallo, i don't find any option for synchrozing contacts, calender or task by syncml. Wheter there is any option in the settings or accounts nor any app in BlackBerry world which support syncml. In the Account-settings on Black Berry os I have only th