Hi

I am trying to search a firewall syslog space delimeted file for all of the different tcp and udp destination ports.
I know that grep will find lines that contain specific text. And I have tried using the the the cut command to cut out of the file certain colums. However the test I am looking for is not always in the same colum.

What I would like to do is search through many log files in a directory for the text string dst_port=*** where the *** would be a wild card so I can see every destination port that has been requested from the firewall logs.
Below is a snap shot of the text im trying to search through.
Any help would be appreciated.
Andy

src=10.217.162.99 dst=10.217.208.105 src_port=4218 dst_port=135 src-xlated ip=10.217.162.99 port=4218 dst-xlated ip=10.217.208.105 po
rt=135 session_id=247646 reason=Close - TCP FIN

Assuming that a sample log file record is one on ONE line...
one way:
P.S. Pls use vB Codes when quoting sample data/source - no line wraps either.

Thankyou for your response.
Im presuming that I would need to be in vi to run the search command?
Or can I run this from my regular user prompt?

I have lots of files in one directory so to run vi I would need to consolidate all these files into one big file and run vi on the one consolidated file and complete the search??

Andy

why are you presuming that?
yes
I don't understand what 'vi' has to do what you're trying to do...
Copy a sample set of files to a 'sand-box' directory and execute the script on this directory ONLY. Once satisfied with the result - proceed to the 'real' thing.

Thankyou,

I did not realize that sed is a stream editor, with my limited knowledge of unix when I viewed your response /s I related that to searching within vi.
Sorry for the confusion, I will give it a shot.

Andy

The above code sed 's/.*dst_port=\([^ ][^ ]*\).*/\1/' myLogFile
, is this the sed command being used with regular expression syntax?
If so what does the s do, I know that / means search
Andy

no, 's' is short for 'Search'. do 'man sed' to get a full description of the tool's capabilities.