cut

[m.w.chang]

I understood that the alternative is to modify the log-and-drop entry in 
ipatbles script, but still, was wondering abotu the possibklity of 
processing a free-form text file...

> this doesn't quite work because the number of fields varied on each 
> iptables log entry. field 19 may not always be the DPT=xxx column.
> 
> How to create a column containing only the "DPT=9999" column?
> Once that's done, I could apply `uniq -c` on it.
> 
> 
> 

-- 
  Swiftly. Silently. Invisibly.  .~.   In Linux we trust.
                                / v \
  news://news.hkpcug.org       /( _ )\  http://www.linux-sxs.org
                                 ^ ^