>Jul 25 10:39:12 10.0.0.1 852: 1d23h: %VOIPAAA-5-VOIP_CALL_HISTORY: >CallLegType 2, ConnectionId 0 0 0 0, SetupTime *10:46:49.143 GMT Thu Jul >25 2002, PeerAddress 0051122323223, PeerSubAddress , DisconnectCause 0 >, DisconnectText , ConnectTime *10:47:09.753 GMT Thu Jul 25 2002, >DisconnectTime *10:47:09.753 GMT Thu Jul 25 2002, CallOrigin 1, >ChargedUnits 0, InfoType 2, TransmitPackets 0, TransmitBytes 0, >ReceivePackets 358, ReceiveBytes 7064
So you want the date, the peer address, and the connect and disconnect times, correct? A purely regex solution might go along the lines of: #untested /^(\w{3}\s\d{2}\s\.*)\s.* PeerAddress\s(\d+),.* ConnectTime\s(\*.*)\s.* DisconnectTime(\*.*)\s/mx #$1 = date #$2 = PeerAddress #$3 = ConnectTime #$4 = DisconnectTime But no doubt there is a more elegant solution than this mess. ;) -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]