UNIX for Dummies Questions & Answers

Data begins as such;

Mar 16 03:27:05 afzpimdn01 named[221]: [ID 295310 daemon.notice] denied update from [1nn.nn.9].3983 for "nnn.nnn.in-addr.arpa" IN
Mar 16 03:27:37 afzpimdn01 named[221]: [ID 295310 daemon.notice] denied update from [1nn.nnn.nn.53].4844 for "nnn.nnn.in-addr.arpa" IN
Mar 16 03:27:56 afzpimdn01 named[221]: [ID 295310 daemon.notice] denied update from [1nn.nnn.nn.52].2650 for "nnn.nnn.in-addr.arpa" IN

cut -d "" -f 12,14 filename > filename2

gives me;

[1nn.nnn.nn.9].3983 "nnn.nnn.in-addr.arpa"
[1nn.nnn.nn.53].4844 "nnn.nnn.in-addr.arpa"
[1nn.nnn.nn.52].2650 "nnn.nnn.in-addr.arpa"

I need to remove the "[" , "]" and the port number ".3983", ".4844' from field 1 and the double quotes from field 2, then I will sort -u the output to a new filename.

I am looking to get;

1nn.nnn.nn.9 nnn.nnn.in-addr.arpa
1nn.nnn.nn.52 nnn.nnn.in-addr.arpa
1nn.nnn.nn.53 nnn.nnn.in-addr.arpa

I have not been able to get the substituions with sed.

Thanks for any advice or direction,

Altamaha

Code:

vnix$ sed 's/^\[//;s/\][^"]*"/ /;s/"$//' <<HERE
> [1nn.nnn.nn.9].3983 "nnn.nnn.in-addr.arpa"
> [1nn.nnn.nn.53].4844 "nnn.nnn.in-addr.arpa"
> [1nn.nnn.nn.52].2650 "nnn.nnn.in-addr.arpa"
> HERE
1nn.nnn.nn.9 nnn.nnn.in-addr.arpa
1nn.nnn.nn.53 nnn.nnn.in-addr.arpa
1nn.nnn.nn.52 nnn.nnn.in-addr.arpa

Many thanx.

Using cat filename | sed 's/^\[//;s/\][^"]*"/ /;s/"$//' > filename2 gives me the exact output I was needing.

I will now try to see if I can place my "cut" and your "sed" into a single script that user can run each day.

Thanks again,
Altamaha

As you should well know, your cat is a Useless Use.

Code:

cut -d "" -f 12,14 |
sed 's/^\[//;s/\][^"]*"/ /;s/"$//'

That's all it takes to combine them.

era,

You are right... useless now.

At the time I posted, I did not know how to get the data stream into the script. Since I had previously used a grep of the message log to create a temp file, I used the cat to get the temp file into the sed.

I now have it as folows;

grep "denied update" /var/adm/messages | cut -d" " -f 12,14 |sed 's/^\[//;s/\][^"]*"/ /;s/"$//' | sort -u >tempfile

I thank you for you answers to my questions, and your help in directing me.

Altamaha