Re: Log reporting by cidr

2010-10-05 Thread Michael Orlitzky
On 10/05/2010 11:14 AM, pf at alt-ctrl-del.org wrote: > > Great! > By saving one version with: > if ($line =~ ' connect from .*\[([\d\.]+?)\]') { > > And another with: > if ($line =~ 'smtpd.*client=.*\[([\d\.]+?)\]') { > > I can compare attempts vs success, from specific networks. > Rather tha

Re: Log reporting by cidr

2010-10-05 Thread pf at alt-ctrl-del.org
On 10/04/2010 06:25 PM, pf at alt-ctrl-del.org wrote: On 10/04/2010 02:48 PM, pf at alt-ctrl-del.org wrote: Are there any existing scripts out there, that report connection counts by cidr network? Input:? parse.pl /var/log/mail cidr_list.zone Output:? network count 10.10

Re: Log reporting by cidr

2010-10-04 Thread pf at alt-ctrl-del.org
On 10/04/2010 06:25 PM, pf at alt-ctrl-del.org wrote: On 10/04/2010 02:48 PM, pf at alt-ctrl-del.org wrote: Are there any existing scripts out there, that report connection counts by cidr network? Input:? parse.pl /var/log/mail cidr_list.zone Output:? network count 10.10

Re: Log reporting by cidr

2010-10-04 Thread Michael Orlitzky
On 10/04/2010 06:25 PM, pf at alt-ctrl-del.org wrote: > >> On 10/04/2010 02:48 PM, pf at alt-ctrl-del.org wrote: >>> Are there any existing scripts out there, that report connection counts by >>> cidr network? >>> >>> Input:? >>> parse.pl /var/log/mail cidr_list.zone >>> >>> Output:? >>> netw

Re: Log reporting by cidr

2010-10-04 Thread pf at alt-ctrl-del.org
On 10/04/2010 02:48 PM, pf at alt-ctrl-del.org wrote: Are there any existing scripts out there, that report connection counts by cidr network? Input:? parse.pl /var/log/mail cidr_list.zone Output:? network count 10.10.128.0/19 983 10.144.48.0/20 121 On 10/04

Re: Log reporting by cidr

2010-10-04 Thread Michael Orlitzky
On 10/04/2010 02:48 PM, pf at alt-ctrl-del.org wrote: > Are there any existing scripts out there, that report connection counts by > cidr network? > > Input:? > parse.pl /var/log/mail cidr_list.zone > > Output:? > network count > 10.10.128.0/19 983 > 10.144.48.0/20

Log reporting by cidr

2010-10-04 Thread pf at alt-ctrl-del.org
Are there any existing scripts out there, that report connection counts by cidr network? Input:? parse.pl /var/log/mail cidr_list.zone Output:? network count 10.10.128.0/19 983 10.144.48.0/20 121