Shell Programming and Scripting

01-JAN-2009 15:06:06 15.64.3.22
01-JAN-2009 15:06:07 15.64.3.22

#!/bin/bash
LOGFILE="path_to_your_log_file"
OUTPUTFILE="path_to_your_output_file"
read -p "Give the IP : " IP
grep $IP $LOGFILE # > $OUTPUTFILE
# remove the comment above to record the output in a file

my_date='01-JAN-2009'
my_ip='15\.64\.3\.22' #use "\" to escape the "." for grep
time1='15:[0-2].:..'   #I'm setting a time range of 15:00:00 - 15:30:00 with these two
time2='15:30:00'       #time variables, you can adjust as needed with regular expressions

grep -E "${my_date} ${time1} ${my_ip}|${my_date} ${time2} ${my_ip}" file.log

#!/usr/bin/perl

use strict;
use warnings;

my (%k, $t1, %sum, %count, $block) = ( 15.64.3.22=> 1, 10.64.2.23 => 1);

sub report {
  print join (",", ++$block,
    map { $_, $sum{$_} || 0, $count{$_} || 0,
      $count{$_} ? $sum{$_} / $count{$_} : "" } keys %k), "\n";
}

while (<>) {
  chomp;
  my ($date ,$timestamp, $ip) = split (/ /);
  next unless $timestamp;
  my ($h, $m, $s) = split (/:/, $timestamp);
  my $t = 3600*$h + 60*$m + $s; 

  if (! defined $t1 || $t > $t1) {
    report if defined $t1;
    $t1 = $t + 10;
    %sum = %count = ();
  }
  if ($k{$event}) {
    ++$count{$event};
    $sum{$event} += $value;
  }
}

report if %count;