Re: Help listing log data in F17/64 -

[kevin martin]

On 08/12/2012 09:55 AM, Bob Goodwin - Zuni, Virginia, USA wrote:
> Would someone be kind enough to give me an example of how I can
>    extract data and list it to the screen from the following:
>    [root@box9 bobg]# cat /var/log/messages | grep Aug
>
>    Aug 12 10:29:38 unknown kernel: ACCEPT IN=br0 OUT=vlan1
>    SRC=192.168.1.9 DST=169.229.70.201 LEN=76 TOS=0x00 PREC=0x00
>    TTL=63 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=56
>    Aug 12 10:31:03 unknown kernel: ACCEPT IN=br0 OUT=vlan1
>    SRC=192.168.1.9 DST=173.194.79.108 LEN=60 TOS=0x00 PREC=0x00
>    TTL=63 ID=42627 DF PROTO=TCP SPT=36901 DPT=995 WINDOW=14600
>    RES=0x00 SYN URGP=0 OPT
>    (020405B40402080A007FFC710000000001030307) --
>    http://www.qrz.com/db/W2BOD box9
>
> For instance I would like to list: date/time, SRC=192.168.1.9,
>    DST=169.229.70.201
>
> That should give me a starting point on which I can expand on the
>    information extracted/displayed.
>
> Bob

Short and sweet try:

grep ^Aug /var/log/messages | awk '{print $1" "$2" "$3" "$9" "$10}'

Kevin