Search Results

Yes, you are right. \/.* removes everything after / for server & client IP addresses.

/ is a meta-character, hence it should be escaped.

awk -F\| '{
for(i=1;i<=NF;i++) {
if($i ~ /subj=/) { sb=$i; gsub(/.*=/,"",sb); }
if($i ~ /srv=/) { sr=$i; gsub(/.*=|\/.*/,"",sr); }
if($i ~ /cli=/) { cl=$i; gsub(/.*=|\/.*/,"",cl); }
...

In this pattern we are escaping open round bracket ( and close round bracket ) because these meta-characters (http://www.bo.infn.it/alice/alice-doc/mll-doc/usrgde/node11.html) have special meaning.
...

awk -F'[ |=]' ' \
{
for(i=1;i<=NF;i++)
{
if($i ~ /^\(/)
{
site=$i; gsub(/\(/,"",site); gsub(/\)/,"",site); gsub(":","",site);
}
if($i ~ /username/)
{
...

Condensing bipinajith's proposal slightly, here's some explanatory hints:awk -F'[ =&]' ' # set field separator to " ", "=", or "&" single char at which the line is...