Sponsored Content
Full Discussion: Extract IP addresses
Top Forums Shell Programming and Scripting Extract IP addresses Post 302300372 by hazno on Tuesday 24th of March 2009 03:12:09 AM
Old 03-24-2009
Extract IP addresses

The only way I could extract the user names and 'from' IP addresses is to use a few temp files. Split up by 'Failed keyboard-interactive' and 'Failed password'.

Anyone have any idea to do this all in one go?

Code:
aaa.bbb.ccc.ddd   2009-03-23 01:28:33     sshd[16272]: Failed keyboard-interactive/pam for invalid user jkljlkjlj from 111.222.333.444 port 52095 ssh2
aaa.bbb.ccc.ddd  2009-03-23 03:33:10     sshd[16648]: Failed password for invalid user oracle from 222.333.444.555 port 29093 ssh2
aaa.bbb.ccc.ddd   2009-03-23 05:23:53     sshd[17589]: Failed password for root from 333.444.555.666 port 59095 ssh2

Ideally, I am looking at the following columns:

Timestamp UserName SourceIP

From both of these 2 types of authentication log entries.
 

10 More Discussions You Might Find Interesting

1. IP Networking

Finding IP Addresses

Is there anyway to tell what my NT IP is while logging into my UNIX box. I have users accessing our NT network and then telneting into our Unix Box. I would like to restrict access somehow. My who commands only returns the users name and pts device which changes. (1 Reply)
Discussion started by: golfs4us
1 Replies

2. UNIX for Dummies Questions & Answers

Hardware Addresses

can anyone tell me the procedure to view the MAC address for a system using linux (1 Reply)
Discussion started by: tcat
1 Replies

3. IP Networking

ip addresses

this might sound corny but i need help finding out about finding a persons ip address can u halp? and another question what the hell does ping mean??? thank u. (2 Replies)
Discussion started by: dragonslayer100
2 Replies

4. IP Networking

Ip Addresses

I'm not exactly sure what I can do with IPs... my friend won't tell me(don't ask me why, I figure it's cause he doesn't know either, hehe). I'm curious as to what theya re used for other than networking computers... if there IS any other purpose or use for them. That's all. --Evil_d00d (4 Replies)
Discussion started by: evil_d00d
4 Replies

5. UNIX and Linux Applications

email addresses

Greetings to all. I have installed dadamail on my web site and it works extremely well. I have two questions: 1. I have modified dada to bounce bad emails, but only the first newsletter will use the modifications. If I create another list, it doesn't use the modification. What gives? 2. Are... (0 Replies)
Discussion started by: okbrowder
0 Replies

6. UNIX for Dummies Questions & Answers

Different ip addresses

Hello! I have logged in using Putty into another machine 'tele'. The ip address which i used to login to 'tele' is 192.168.1.3. Now while at 'tele' when i run "#ifconfig -a" i get the same ip address i.e, 192.168.1.3. But when i run "#arp tele" it gives the output: tele (10.143.128.8) ... (9 Replies)
Discussion started by: suhail.sadaqat
9 Replies

7. Shell Programming and Scripting

Need help with IP and MAC addresses

Hi, i am working on a project where i have to write a script to find out MAC addresses of the systems with given IP address. Can anybody tell me which command i can use to find MAC address if you know IP address of the machine. Thanks (5 Replies)
Discussion started by: manmeet
5 Replies

8. IP Networking

Virtual IP addresses

How would i create virtual interface in linux to configure more than one IP address for a physical interface? any help wll be appreciated. https://www.unix.com/images/misc/progress.gif (1 Reply)
Discussion started by: salil2012
1 Replies

9. Shell Programming and Scripting

Extract list of IP addresses from a text file.

I have an xml file with IP addresses all over the show. I want to print only the IP addresses and cut off any text before or after the IP address. Example: Note: The IP addresses (x.x.x.x) do not consistently appear in the xml file as per the pattern below. Sometimes there are text before... (8 Replies)
Discussion started by: lewk
8 Replies

10. Shell Programming and Scripting

Extract e-mail addresses on a page

Hi I normally ask questions on coding but I think there is a code that can do this. I have regular text throughout my file and I want to extract all e-mail addresses from it (rather than going and searching each one). E-mails all have @ so I assume there is a way. Thanks Phil (6 Replies)
Discussion started by: phil_heath
6 Replies
sf(7D)								      Devices								    sf(7D)

NAME
sf - SOC+ FC-AL FCP Driver SYNOPSIS
sf@port,0 DESCRIPTION
The sf driver is a SCSA compliant nexus driver which supports the Fibre Channel Protocol for SCSI on Private Fibre Channel Arbitrated loops. An SBus card called the SOC+ card (see socal(7D)) connects the Fibre Channel loop to the host system. The sf driver interfaces with the SOC+ device driver, socal(7D), the SCSI disk target driver, ssd(7D), and the SCSI-3 Enclosure Services driver, ses(7D). It only supports SCSI devices of type disk and ses. The sf driver supports the standard functions provided by the SCSA interface. The driver supports auto request sense and tagged queueing by default. The driver requires that all devices have unique hard addresses defined by switch settings in hardware. Devices with conflicting hard addresses will not be accessible. FILES
/platform/architecture/kernel/drv/sf ELF kernel module /platform/architecture/kernel/drv/sf.consf driver configuration file ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Architecture |SPARC | +-----------------------------+-----------------------------+ SEE ALSO
luxadm(1M), prtconf(1M), driver.conf(4), socal(7D), ssd(7D) Writing Device Drivers ANSI X3.272-1996, Fibre Channel Arbitrated Loop (FC-AL) ANSI X3.269-1996, Fibre Channel Protocol for SCSI (FCP) ANSI X3.270-1996, SCSI-3 Architecture Model (SAM) Fibre Channel Private Loop SCSI Direct Attach (FC-PLDA) DIAGNOSTICS
In addition to being logged, the messages below may display on the system console. The first set of messages indicate that the attachment was unsuccessful, and will only display while the sf driver is initially attempting to attach. Each message is preceded by sf%d , where %d is the instance number of the sf device. Failed to alloc soft state Driver was unable to allocate space for the internal state structure. Driver did not attach to device, SCSI devices will be inaccessi- ble. Bad soft state Driver requested an invalid internal state structure. Driver did not attach to device, SCSI devices will be inaccessible. Failed to obtain transport handle Driver was unable to obtain a transport handle to communicate with the socal driver. Driver did not attach to device, SCSI devices will be inaccessible Failed to allocate command/response pool Driver was unable to allocate space for commands and responses. Driver did not attach to device, SCSI devices will be inaccessible. Failed to allocate kmem cache Driver was unable to allocate space for the packet cache. Driver did not attach to device, SCSI devices will be inaccessible. Failed to allocate dma handle for Driver was unable to allocate a dma handle for the loop map. Driver did not attach to device, SCSI devices will be inaccessible. Failed to allocate lilp map Driver was unable to allocate space for the loop map. Driver did not attach to device, SCSI devices will be inaccessible. Failed to bind dma handle for Driver was unable to bind a dma handle for the loop map. Driver did not attach to device, SCSI devices will be inaccessible. Failed to attach Driver was unable to attach for some reason that may be printed. Driver did not attach to device, SCSI devices will be inaccessible. The next set of messages may display at any time. The full device pathname, followed by the shorter form described above, will precede the message. Invalid lilp map The driver did not obtain a valid lilp map from the socal driver. SCSI device will be inaccessible. Target t, AL-PA x and hard The device with a switch setting t has an AL-PA x which does not match its hard address y. The device will not be accessible. Duplicate switch settings The driver detected devices with the same switch setting. All such devices will be inaccessible. WWN changed on target t The World Wide Name (WWN) has changed on the device with switch setting t. Target t, unknown device type The driver does not know the device type reported by the device with switch setting t. SunOS 5.10 27 Mar 1997 sf(7D)
All times are GMT -4. The time now is 12:50 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy