cut

[m.w.chang]

cat kernel.01 | cut -f 19-20 -d\

SPT=2701 DPT=27374
SPT=2701 DPT=27374
SPT=2701 DPT=27374
SPT=2701 DPT=27374
SPT=4169 DPT=1433
SPT=4169 DPT=1433
DPT=139 WINDOW=5360
DPT=139 WINDOW=5360
DPT=139 WINDOW=5360

this doesn't quite work because the number of fields varied on each 
iptables log entry. field 19 may not always be the DPT=xxx column.

How to create a column containing only the "DPT=9999" column?
Once that's done, I could apply `uniq -c` on it.



-- 
  Swiftly. Silently. Invisibly.  .~.   In Linux we trust.
                                / v \
  news://news.hkpcug.org       /( _ )\  http://www.linux-sxs.org
                                 ^ ^