On Fri, 29 Oct 2004, L E O N wrote:
> Yes, but the problem is that an entry with "garbage" is created. Then when I
> try to use a program like SARG to generate a Report the program crashes. I
> was wondering if there is a way to avoid it.
filter out the invalid/failed login replies before you run SARG, and then
generate a separate report on these if desired.
Filter out failed logins and save then in failed_login.log
awk '{if ($4 == "TCP_DENIED/407" && $8 != "-") print > failed_login.log; else print}'
Just filter out failed logins
awk '{if ($4 != "TCP_DENIED/407" || $8 == "-") print }'
Regards
Henrik
Received on Sat Oct 30 2004 - 11:13:10 MDT
This archive was generated by hypermail pre-2.1.9 : Mon Nov 01 2004 - 12:00:02 MST